Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/RRz5RYbrxz1oZgsr1CvNRKYb6yM.roa
File: RRz5RYbrxz1oZgsr1CvNRKYb6yM.roa (raw, json)
Hash identifier: HrPQWuxy7hH8GJ6U6Idap3/1UK6kzWL6fF7QQzTEhKg=
Subject key identifier: 45:1C:F9:45:86:EB:C7:3D:68:66:0B:2B:D4:2B:CD:44:A6:1B:EB:23
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8E3718AED175BDE3C27525FCD9E9D632
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/RRz5RYbrxz1oZgsr1CvNRKYb6yM.roa
Signing time: Wed 13 Sep 2023 11:04:50 +0000
ROA not before: Wed 13 Sep 2023 11:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:8e36:a0c6/128 maxlen: 128
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:37:18:ae:d1:75:bd:e3:c2:75:25:fc:d9:e9:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 11:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=451cf94586ebc73d68660b2bd42bcd44a61beb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:5a:ef:13:e4:20:98:56:0e:c1:3c:ac:5a:
3d:22:82:ca:85:9c:48:f3:1d:12:7b:74:8c:ec:8f:
34:88:41:d1:ef:97:4e:5c:e3:bd:8d:7e:3e:fd:e1:
80:98:f2:b5:53:2f:d1:4e:c8:ef:d2:45:27:12:de:
c2:99:b3:2b:a8:e5:f8:28:80:ce:b8:48:e1:32:7c:
30:e0:44:82:e0:62:b7:0d:40:62:4a:f4:cf:73:dd:
71:a4:b7:6b:9c:67:90:07:6b:05:01:83:ee:7c:bc:
cd:04:6a:a0:0e:ac:29:9e:06:9f:f5:21:d5:48:0f:
fe:f5:5e:88:f2:da:9b:46:5d:4e:42:4e:c8:a1:68:
5c:e6:35:6f:5b:46:79:b7:47:ec:fe:c3:be:9f:09:
0a:74:6f:bf:df:48:f0:76:a9:f9:94:f1:ff:a9:a3:
88:48:3b:2c:6c:c6:5e:d2:9b:e9:57:a1:cc:53:73:
3b:2d:6c:98:d6:a9:10:cb:55:e1:22:a1:db:6a:5f:
77:49:00:1e:70:37:6b:89:b7:29:5c:75:c8:dd:8c:
c2:8e:21:c7:a5:37:60:b8:71:ea:69:4d:fe:31:27:
cb:02:9f:60:69:dc:08:96:a0:59:eb:b1:20:7b:f5:
99:3a:63:34:8d:52:bc:a5:c8:f3:33:56:eb:c7:1b:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:F9:45:86:EB:C7:3D:68:66:0B:2B:D4:2B:CD:44:A6:1B:EB:23
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/RRz5RYbrxz1oZgsr1CvNRKYb6yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:da:a6:99:8c:7b:cd:d8:bd:2b:79:1e:1b:e4:76:69:5f:a0:
56:55:35:5e:71:df:16:7f:c9:01:e6:c5:da:71:2f:2b:af:a4:
da:30:7d:49:10:69:e3:ad:a8:ac:2b:60:f9:f6:c2:9b:8d:8f:
1c:83:14:7d:f8:0c:0e:d7:66:6c:dd:bc:63:5c:28:07:19:21:
90:cd:34:cd:35:19:32:f7:f0:7d:b2:30:a6:17:9c:bb:1d:16:
b3:37:bf:a3:4b:e0:2e:08:0e:b2:f2:69:93:9d:5c:e1:b6:94:
0f:bf:91:a9:56:5f:81:7b:35:cd:29:87:b5:1d:09:d7:12:47:
19:58:3b:56:f0:b0:98:ee:2e:2e:a7:dd:1f:43:d8:9f:24:99:
07:e2:bf:04:4d:3d:cf:6d:ad:9f:f4:80:6e:b9:81:ce:e0:4f:
4d:6b:ea:f0:93:2d:47:84:11:fe:ba:f3:cd:64:64:cf:ec:af:
0f:2f:5c:f8:03:6b:d1:7c:ad:7c:71:a3:4f:b8:95:ae:69:fe:
3e:e9:16:14:0f:ac:03:71:e4:af:0c:36:13:bd:b6:c6:6f:eb:
e2:bb:07:a6:20:37:7e:1a:48:c2:fe:37:0f:a9:dd:4c:27:1d:
8e:5d:4c:09:7e:ce:4d:d4:88:b8:e2:8e:3b:42:eb:7d:9a:7f:
6b:e0:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:26:22 2025 by rpki-client