Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/CO1Tix4uFxrKcXGfwLaLuUeLaCg.roa
File: CO1Tix4uFxrKcXGfwLaLuUeLaCg.roa (raw, json)
Hash identifier: OG3WHXSB9fdPsa+c0+V8Kb9CzQb3SNvNipiRAHOJXbg=
Subject key identifier: 08:ED:53:8B:1E:2E:17:1A:CA:71:71:9F:C0:B6:8B:B9:47:8B:68:28
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8E412AFE76B12A98E0FC57C3957BF84E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/CO1Tix4uFxrKcXGfwLaLuUeLaCg.roa
Signing time: Wed 13 Sep 2023 11:15:50 +0000
ROA not before: Wed 13 Sep 2023 11:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:41:2a:fe:76:b1:2a:98:e0:fc:57:c3:95:7b:f8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 11:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ed538b1e2e171aca71719fc0b68bb9478b6828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:a7:2c:3a:d6:20:33:d8:62:cc:18:45:40:
07:12:ed:1a:be:1f:c3:cd:2a:01:d4:64:49:93:ff:
23:7d:3f:7c:b4:d5:06:f5:1b:45:d5:59:9c:2d:4e:
21:1b:63:6b:6d:04:2d:98:9d:d7:45:93:9f:6b:7d:
74:c4:b2:d9:0f:dc:f6:b7:08:d3:77:14:aa:b6:cd:
54:a9:a0:3d:27:2c:c4:67:85:b3:ba:d7:c0:f1:ed:
55:1e:ed:43:a4:43:ef:64:fa:55:9f:bb:20:c2:88:
2f:b8:24:24:ea:84:3c:bc:27:5b:6b:0c:04:87:7c:
8b:07:d9:df:eb:92:ac:ea:c0:7a:27:45:ed:ae:53:
87:0f:f2:ce:42:63:6f:f4:cf:2c:11:d1:da:a1:8a:
7d:6a:cd:96:25:80:d5:bd:c3:90:3b:27:19:6e:09:
7e:6e:09:fd:47:ee:16:b6:43:07:ea:b9:e9:83:0b:
28:35:aa:c4:33:f4:e9:e1:d2:05:cf:96:19:27:0a:
e2:a4:5f:db:3e:b5:a7:24:71:c2:a2:65:9c:1c:bb:
7c:06:fe:f5:22:b7:ab:fa:0d:b3:9c:78:63:74:d4:
3d:ba:11:63:60:b9:d2:49:1b:52:68:b4:9d:da:39:
c8:4f:79:ba:08:2b:64:1c:a9:32:11:41:94:7e:ce:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:53:8B:1E:2E:17:1A:CA:71:71:9F:C0:B6:8B:B9:47:8B:68:28
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/CO1Tix4uFxrKcXGfwLaLuUeLaCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:70:0b:97:f9:04:e1:b4:ca:a3:c3:3b:20:a3:5d:32:9d:3e:
f0:32:67:fd:0d:84:eb:ef:20:34:9d:00:4e:a4:88:ec:e3:bf:
6a:d0:bf:34:d4:b7:2f:52:cd:6b:55:2a:7f:4f:46:2f:77:c2:
7f:08:62:d9:d7:c4:bb:38:37:91:9c:90:5a:25:5b:59:2f:92:
95:96:98:7b:49:a6:02:9b:2b:fb:e5:45:da:13:02:e4:bb:68:
56:0f:93:6c:d2:cb:24:08:0f:01:8b:e5:2d:ae:56:e2:67:48:
86:68:7a:93:86:fb:c3:45:3c:5d:ce:df:4b:6f:bc:42:5a:01:
7d:c7:5f:b1:ea:58:48:2f:8b:9d:bd:82:5b:3b:ad:46:09:5b:
f8:1e:e7:6d:40:7f:d2:15:53:47:ff:45:3a:4a:f3:75:02:4c:
7e:f3:9b:b3:db:fe:58:b1:c8:2b:da:54:8b:22:9e:5e:92:34:
23:3c:c4:32:01:f6:e1:af:1e:af:cf:16:83:0d:19:7e:fc:c7:
e5:a6:1d:68:d6:b5:15:f3:8c:c6:a9:e5:ba:db:4b:bf:7b:eb:
99:81:06:e6:c1:62:cb:b8:96:a0:10:47:bc:3a:a9:e3:f0:75:
c4:0e:d1:f6:ac:89:53:2b:81:70:42:d1:5c:e3:c8:2f:35:4b:
08:85:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:41:23 2025 by rpki-client