Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/36Gq32oBq5Uzq4N2IB11iTZj3z8.roa
File: 36Gq32oBq5Uzq4N2IB11iTZj3z8.roa (raw, json)
Hash identifier: ffRN2qJHZ4/N6pnAvWf4yFjn9TFkm6kUKRwjJb3SsCs=
Subject key identifier: DF:A1:AA:DF:6A:01:AB:95:33:AB:83:76:20:1D:75:89:36:63:DF:3F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9EF3C3FB38F18452130B1F68D6322B66
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/36Gq32oBq5Uzq4N2IB11iTZj3z8.roa
Signing time: Sat 16 Sep 2023 17:04:50 +0000
ROA not before: Sat 16 Sep 2023 17:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:9ef3:7561/128 maxlen: 128
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:f3:c3:fb:38:f1:84:52:13:0b:1f:68:d6:32:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 17:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa1aadf6a01ab9533ab8376201d75893663df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:cc:32:0a:d1:40:8e:ba:7e:84:f0:93:c4:
7a:44:0b:9f:c5:c0:5f:8b:be:5e:98:5a:27:4b:fe:
8b:2a:93:41:f0:77:3f:8b:25:a6:45:8e:66:6e:13:
dd:a4:35:a5:25:06:9a:93:45:7a:fb:53:09:07:b6:
00:24:e8:8c:92:6a:41:93:e8:ca:c9:22:00:62:e5:
8f:08:bc:70:1e:aa:8c:c9:c8:13:c1:ac:ea:fe:c1:
15:91:59:8b:37:0b:64:b4:d9:52:88:2d:d0:b7:0d:
1f:be:f8:34:83:c4:79:9d:06:33:20:81:47:b4:f3:
f6:4c:41:6e:75:0a:ba:d3:c4:44:57:ba:fc:29:82:
88:94:af:03:b5:02:ed:4f:48:6c:76:c9:0c:90:8b:
f4:1d:c0:82:dc:53:56:96:07:5f:f9:e0:ff:ab:4e:
85:a6:03:f5:96:6d:ce:16:dd:b8:38:33:1a:36:de:
bc:d3:dd:2a:9b:d2:68:f0:a0:32:44:84:77:92:02:
9a:22:2c:78:84:af:17:db:58:d2:48:0e:eb:68:98:
e1:59:01:f2:88:bb:6d:a3:02:6a:b7:7e:27:66:7e:
45:bc:98:cd:bf:01:16:86:6e:18:a4:73:f1:81:ff:
a6:11:e4:3e:3a:51:3d:dd:f0:20:2e:04:e7:13:cc:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A1:AA:DF:6A:01:AB:95:33:AB:83:76:20:1D:75:89:36:63:DF:3F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/36Gq32oBq5Uzq4N2IB11iTZj3z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:57:48:e1:59:1d:28:07:6b:ad:e5:5c:45:90:68:47:32:90:
84:85:aa:cf:bb:a1:44:ae:28:ac:3d:79:c9:bf:e4:5f:e8:db:
64:df:82:92:42:32:21:71:aa:75:87:7f:dc:34:ed:0c:01:16:
49:e2:43:fe:a1:f5:ec:38:af:41:f1:71:6c:0a:3c:86:ec:e6:
28:fd:e7:f8:8e:8c:57:0b:29:93:14:5c:a2:c5:10:04:41:3d:
1c:b4:62:0a:e4:a3:29:e1:cb:ff:d5:4d:1f:d6:cc:b3:6d:28:
e4:c0:61:2a:9c:3e:86:d9:ac:93:41:1f:44:0b:c3:91:11:44:
cc:01:6b:3a:74:3f:da:9b:0b:ad:5e:ae:1f:bf:35:83:95:88:
b1:af:45:0a:da:82:65:c9:4b:17:48:e8:23:d8:06:7f:d1:49:
1d:48:ae:ff:3f:89:02:78:24:86:10:c5:2e:e5:a5:07:ef:21:
c1:32:e7:ca:f1:5e:3b:45:80:fd:33:37:44:2a:df:db:3f:97:
d8:64:11:5f:94:70:b4:35:0c:e2:47:65:73:77:22:f6:c6:6b:
7c:60:ca:f8:e3:d9:42:05:c4:9d:22:c0:bc:0d:46:11:e7:d3:
a5:53:aa:46:21:ab:c2:96:a9:0f:57:b9:9d:e9:32:d2:09:6b:
b8:77:d1:c7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqe88P7OPGEUhMLH2jWMitmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE2MTcwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmExYWFkZjZhMDFhYjk1MzNhYjgzNzYyMDFkNzU4OTM2NjNkZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm3MMgrRQI66foTwk8R6RAufxcBf
i75emFonS/6LKpNB8Hc/iyWmRY5mbhPdpDWlJQaak0V6+1MJB7YAJOiMkmpBk+jK
ySIAYuWPCLxwHqqMycgTwazq/sEVkVmLNwtktNlSiC3Qtw0fvvg0g8R5nQYzIIFH
tPP2TEFudQq608REV7r8KYKIlK8DtQLtT0hsdskMkIv0HcCC3FNWlgdf+eD/q06F
pgP1lm3OFt24ODMaNt68090qm9Jo8KAyRIR3kgKaIix4hK8X21jSSA7raJjhWQHy
iLttowJqt34nZn5FvJjNvwEWhm4YpHPxgf+mEeQ+OlE93fAgLgTnE8wzcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN+hqt9qAauVM6uDdiAddYk2Y98/MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMzZHcTMyb0JxNVV6cTROMklCMTFpVFpqM3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFNXSOFZHSgHa63lXEWQ
aEcykISFqs+7oUSuKKw9ecm/5F/o22TfgpJCMiFxqnWHf9w07QwBFkniQ/6h9ew4
r0HxcWwKPIbs5ij95/iOjFcLKZMUXKLFEARBPRy0Ygrkoynhy//VTR/WzLNtKOTA
YSqcPobZrJNBH0QLw5ERRMwBazp0P9qbC61erh+/NYOViLGvRQragmXJSxdI6CPY
Bn/RSR1Irv8/iQJ4JIYQxS7lpQfvIcEy58rxXjtFgP0zN0Qq39s/l9hkEV+UcLQ1
DOJHZXN3IvbGa3xgyvjj2UIFxJ0iwLwNRhHn06VTqkYhq8KWqQ9XuZ3pMtIJa7h3
0cc=
-----END CERTIFICATE-----
Generated at Mon May 12 16:12:11 2025 by rpki-client