Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VEFfm2mdgQ3HxHlbbnbNM3WMj0M.roa
File: VEFfm2mdgQ3HxHlbbnbNM3WMj0M.roa (raw, json)
Hash identifier: 5RPM1oy61HAPS2+bTxm79tuhANC4mg8URRat5HUMYC0=
Subject key identifier: 54:41:5F:9B:69:9D:81:0D:C7:C4:79:5B:6E:76:CD:33:75:8C:8F:43
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A96D49A48EAE8FDA3646E053DB784B21B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VEFfm2mdgQ3HxHlbbnbNM3WMj0M.roa
Signing time: Fri 15 Sep 2023 03:13:50 +0000
ROA not before: Fri 15 Sep 2023 03:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:96:d4:9a:48:ea:e8:fd:a3:64:6e:05:3d:b7:84:b2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 03:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54415f9b699d810dc7c4795b6e76cd33758c8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:dd:03:0e:d3:4b:c2:8e:0b:84:97:f7:a8:
66:89:ac:64:a5:ce:98:aa:16:d4:e5:bd:9b:3e:65:
30:6d:a0:c4:e7:8c:5c:64:b9:69:67:b5:60:b1:69:
9d:f0:23:be:2a:2e:3a:c9:55:3b:8b:25:9e:5e:4f:
79:dc:30:eb:d2:88:56:bb:1f:46:fa:9e:89:16:18:
db:a4:99:26:fc:02:08:bf:85:47:35:00:0c:52:56:
da:91:63:9f:be:37:15:46:44:73:6a:bc:57:93:c4:
71:12:89:a2:75:ac:a8:dc:ee:36:cb:12:41:18:08:
76:57:0e:52:7b:c1:15:42:07:4a:d9:38:72:87:be:
00:f7:22:3f:0d:51:41:c7:4c:53:b8:e5:ac:72:2f:
ae:82:f9:d4:8c:2e:92:59:21:80:0d:33:e6:7e:58:
25:99:7e:8c:40:4d:f3:ba:0e:99:07:12:4c:98:57:
d3:d6:d3:fd:4f:d6:07:b4:27:7a:b5:e2:6f:e6:03:
c2:41:9a:ee:b2:f9:59:e9:5d:a4:dc:a4:8f:fc:48:
20:a3:ea:a1:f4:1d:cb:f5:44:5b:25:f6:5c:5d:5d:
55:9d:ba:7f:49:27:17:f7:c3:e6:62:de:46:f8:34:
b7:57:9a:11:04:62:ff:2d:25:3c:fc:d9:1c:9d:84:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:5F:9B:69:9D:81:0D:C7:C4:79:5B:6E:76:CD:33:75:8C:8F:43
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VEFfm2mdgQ3HxHlbbnbNM3WMj0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:78:55:b5:7e:32:1a:97:fe:07:de:3c:ef:b5:1d:c2:2a:f7:
f5:35:0d:7a:e3:9d:bc:9c:72:63:db:1f:d9:c9:5a:a7:ed:c4:
f3:48:f3:a2:a9:87:ad:7c:15:a5:bd:01:b2:8c:54:39:5e:86:
31:2e:a3:98:5e:0a:bf:66:cc:23:eb:2b:d6:e3:3f:6e:6e:dc:
19:46:30:1f:97:de:e8:99:e8:71:d3:eb:c1:7b:42:ca:33:51:
ef:00:19:10:91:3d:e0:83:85:b7:bb:c4:a9:d1:a5:7f:d9:1e:
94:4e:d1:24:3d:11:24:84:83:fc:36:05:c5:29:fa:1e:ac:4b:
96:8e:01:20:8d:8d:f4:92:fc:55:96:0c:15:43:b8:fa:7d:2c:
c2:a7:c7:7d:64:1f:3d:99:f5:cd:13:77:0d:a7:aa:0b:75:0f:
fc:0a:47:89:00:6e:69:b1:6c:3d:80:0f:3a:9a:3f:c1:bc:42:
bd:8d:25:02:0d:99:4a:64:67:cb:aa:fb:aa:f8:9c:07:aa:57:
64:9e:f6:18:a7:af:f3:81:5a:02:6f:c9:7a:03:26:2b:fa:e4:
ce:0e:15:c8:70:62:db:fb:33:b9:d2:cb:a8:47:9a:be:b6:24:
6c:01:2f:f4:6b:ad:25:46:5a:73:af:3c:34:78:1e:d3:c6:a5:
8a:b3:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:08:47 2025 by rpki-client