Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/5a9rAZ-2AdQIxSvfbzjBWFrZeVs.roa
File: 5a9rAZ-2AdQIxSvfbzjBWFrZeVs.roa (raw, json)
Hash identifier: vdBDVUyOhMFi3bzGOPYdTQTOBa6muciPq1N2lXMl40g=
Subject key identifier: E5:AF:6B:01:9F:B6:01:D4:08:C5:2B:DF:6F:38:C1:58:5A:D9:79:5B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9F2AB2B5EFBCA269E8CA32500BED241D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/5a9rAZ-2AdQIxSvfbzjBWFrZeVs.roa
Signing time: Sat 16 Sep 2023 18:04:50 +0000
ROA not before: Sat 16 Sep 2023 18:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9f2a:7c96/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9f:2a:b2:b5:ef:bc:a2:69:e8:ca:32:50:0b:ed:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 18:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5af6b019fb601d408c52bdf6f38c1585ad9795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:9d:78:d5:c8:16:87:0e:f2:d1:3b:a0:b3:
34:bc:7d:df:c2:c9:36:24:82:c7:1b:b0:b3:f6:f5:
9c:38:b4:fd:87:51:5a:93:54:28:e2:eb:f2:e5:7b:
9e:5b:d7:e6:17:a3:86:ff:45:17:c2:7a:96:d5:5b:
7d:18:ed:9d:60:f0:43:45:3a:10:41:3f:02:03:9a:
f7:07:fc:d0:e4:02:f7:9a:d4:c1:5a:c5:76:42:25:
c4:6c:4a:30:af:99:09:e8:4e:8b:a6:22:f1:3a:5c:
7d:f5:73:b2:e5:7b:33:68:8a:93:0b:b0:6a:70:5b:
a4:58:e9:d6:07:d1:2c:13:5f:57:77:4f:87:43:aa:
9f:76:d1:64:f4:27:97:ea:26:fc:93:56:9d:b9:e2:
8d:1d:6e:0f:45:29:20:3b:be:7f:47:c6:88:6e:0e:
09:20:17:12:59:7f:69:48:a9:20:a4:3e:9d:f3:2e:
60:d1:a6:d9:6e:df:fc:48:4f:22:97:3d:0a:4e:2d:
5e:56:1d:85:e8:fb:7a:3b:e1:27:2a:05:a3:9c:bd:
3a:99:fd:b9:a5:45:90:68:ed:66:23:56:e1:e8:55:
2c:1a:3e:85:b9:50:88:00:47:6b:f6:64:56:4a:16:
35:73:4e:6e:fb:ae:35:2f:49:1b:56:9b:e4:9d:f3:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:6B:01:9F:B6:01:D4:08:C5:2B:DF:6F:38:C1:58:5A:D9:79:5B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/5a9rAZ-2AdQIxSvfbzjBWFrZeVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:13:53:70:dd:fc:66:49:4f:f5:22:0b:22:d0:fa:be:f4:05:
e9:60:48:a5:b9:ce:5e:95:60:93:c5:4d:75:2f:17:a9:08:21:
4d:1c:1b:4d:7f:e9:fb:ea:f0:6e:8c:c9:a3:ab:89:b7:bc:fc:
ca:ce:21:3d:8e:94:db:68:51:a5:13:0a:ba:4b:4b:01:f7:a7:
32:93:f3:0f:54:2a:07:71:39:4d:9a:48:fe:fc:b3:92:32:71:
71:96:dd:1f:5e:72:53:7c:90:cc:45:71:41:a6:4b:8c:5c:8c:
b5:78:7f:45:4a:39:75:6d:c8:f2:c0:ce:ba:47:83:75:4a:1f:
fb:89:52:55:f9:14:5c:cb:2e:2d:56:de:fa:b7:f7:8b:70:d4:
b2:a4:40:31:14:42:81:91:83:d5:23:7e:90:ab:5f:73:10:53:
c9:62:33:0e:88:b9:5f:da:c5:cd:61:85:f7:ce:bd:51:8f:ce:
32:83:0b:8f:56:d2:c5:5e:97:f4:74:4a:75:5e:e1:f8:f3:49:
07:37:ac:3d:36:fd:62:28:4e:1a:27:c1:3e:77:9f:69:88:dd:
f3:27:2b:47:e3:11:cb:9f:21:34:71:b9:70:81:44:ab:eb:86:
e9:da:ab:24:e4:18:6f:4b:6f:0f:2c:13:98:5c:bd:4e:5a:f8:
4c:47:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:25:10 2025 by rpki-client