Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/56E8Tr3YqlUFV8-5Qa6YVnpYdYI.roa
File: 56E8Tr3YqlUFV8-5Qa6YVnpYdYI.roa (raw, json)
Hash identifier: bsgRK34l/igHpIc33qBjwYDuQXLqAofxlzwbBWo9woI=
Subject key identifier: E7:A1:3C:4E:BD:D8:AA:55:05:57:CF:B9:41:AE:98:56:7A:58:75:82
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5146BBD80E61AF125959B381DA4B388A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/56E8Tr3YqlUFV8-5Qa6YVnpYdYI.roa
Signing time: Fri 01 Sep 2023 15:05:04 +0000
ROA not before: Fri 01 Sep 2023 15:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:5146:503e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:46:bb:d8:0e:61:af:12:59:59:b3:81:da:4b:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 15:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a13c4ebdd8aa550557cfb941ae98567a587582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:cf:4c:40:ac:e5:ec:e0:30:80:aa:8b:32:
81:59:9f:95:0c:91:a1:7d:da:fb:16:27:9f:28:8c:
54:64:a8:d6:b5:80:76:f6:1e:c2:6a:3b:3a:38:b1:
1c:33:47:a8:34:0f:11:da:a2:d7:0b:2f:f3:4f:46:
18:84:6f:26:86:0b:7a:86:3d:8c:75:ba:ae:b0:42:
b4:b5:ed:01:2f:c2:ff:91:1b:2a:c8:59:ab:ec:c7:
d2:2a:f1:cb:d6:06:59:99:a9:37:47:8d:c8:bb:02:
ef:de:f8:f9:9b:ba:9e:f9:ab:73:ee:c3:b7:e2:46:
1a:23:16:63:6a:dc:a0:f7:00:0a:ad:9d:b3:f5:1e:
c8:d8:b9:67:fb:7d:b8:83:85:ef:04:77:99:d3:8f:
16:bc:60:cb:d6:e6:e7:d8:f7:dc:e3:bf:85:c0:d5:
f1:af:2b:49:13:f8:8c:d9:f4:51:e5:6c:fb:6e:18:
0e:89:81:f8:3f:89:be:c8:20:38:43:c8:5d:03:12:
82:51:0d:24:09:89:72:35:50:a5:9e:3d:5f:de:3c:
ad:8c:fd:3d:19:55:24:88:ef:66:1c:4f:15:27:c3:
1c:67:e0:00:ee:ed:3c:65:ab:b5:eb:33:89:1d:b7:
63:20:ce:c6:82:9c:e8:6f:40:b3:cb:44:dd:df:98:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:3C:4E:BD:D8:AA:55:05:57:CF:B9:41:AE:98:56:7A:58:75:82
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/56E8Tr3YqlUFV8-5Qa6YVnpYdYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:c3:21:77:05:b4:42:20:11:c3:79:c8:72:8a:61:da:b0:aa:
70:c4:bc:96:79:cf:fc:c4:1a:e5:4b:8a:0c:99:01:36:bd:0e:
e4:e8:4a:df:f0:75:dd:8e:7f:30:35:d1:4e:6a:a8:aa:df:51:
64:31:6e:25:41:60:4e:bf:83:1a:20:34:ce:ca:8a:05:82:87:
f0:5e:36:4d:87:ea:ed:cd:5a:2c:cb:15:ce:cf:c4:42:dc:a8:
3a:fb:6b:a3:ea:c9:04:b9:fa:69:96:82:52:c4:42:9e:6b:df:
38:89:a8:93:7d:00:73:c7:44:e4:6d:fa:30:94:a5:4b:66:e5:
c8:62:c7:b5:b4:9c:d0:f4:0d:8a:94:93:c4:14:19:47:c0:54:
cd:04:df:18:2a:e1:ec:85:e4:a5:62:79:d4:b1:a6:e0:7d:55:
fe:d9:82:30:e6:e0:64:3d:28:97:74:a0:1e:be:bd:96:a5:cf:
86:98:8f:c7:5f:23:2f:7d:1d:6e:c6:34:e4:79:9d:5c:62:4b:
8e:49:6b:1e:ba:d8:ba:20:18:0c:7f:26:5b:3a:0a:e4:0d:93:
2e:46:45:cc:e9:51:41:21:55:43:b4:88:cd:7f:7a:b7:e2:f6:
f9:c2:43:32:93:b8:28:61:1a:31:8b:8a:28:fe:ec:d3:3a:33:
d9:5a:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:20:14 2025 by rpki-client