Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aWkN-M84VhbwTobY_gIPVm3y-S8.roa
File: aWkN-M84VhbwTobY_gIPVm3y-S8.roa (raw, json)
Hash identifier: WjfoixVEtb2TajKciZqogZc6eAzKvAOyO/5C/Tt5TpE=
Subject key identifier: 69:69:0D:F8:CF:38:56:16:F0:4E:86:D8:FE:02:0F:56:6D:F2:F9:2F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A67CE4CF5624444A822F78A7A349C7624
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aWkN-M84VhbwTobY_gIPVm3y-S8.roa
Signing time: Wed 06 Sep 2023 00:04:47 +0000
ROA not before: Wed 06 Sep 2023 00:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:67cd:e744/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:ce:4c:f5:62:44:44:a8:22:f7:8a:7a:34:9c:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 00:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69690df8cf385616f04e86d8fe020f566df2f92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:60:9b:87:52:79:1d:29:30:cb:e4:d2:6f:
ef:db:be:b7:5e:f3:d0:29:2b:03:11:41:02:3b:8e:
96:3c:8c:30:d8:bf:b4:e3:4c:18:45:c9:49:60:e8:
2e:6a:cd:d4:03:44:23:82:0e:db:35:ac:4c:af:f2:
5b:9e:bc:08:ea:8d:a3:d6:99:45:c9:bf:a6:8b:17:
3c:0d:e5:ff:14:44:b0:e1:5d:80:0e:71:11:49:03:
d7:11:0b:26:ad:15:90:76:45:af:9b:2a:03:78:0e:
4a:56:db:f9:7f:ab:47:ba:3f:17:8c:9d:9d:9b:e8:
ff:6f:5a:a6:37:b1:cc:55:52:a8:ba:10:5c:4f:a2:
51:cb:4f:08:04:0c:db:59:d0:83:e2:4f:f7:61:6b:
5c:0c:c4:37:37:cd:c1:ca:be:7a:e9:e0:c7:b9:79:
50:e7:72:d8:7f:95:27:f5:64:9b:35:94:eb:69:89:
41:bb:eb:d2:e9:17:db:d7:e0:19:b4:06:22:dc:79:
e5:a9:52:5e:9d:fc:fb:56:76:7a:24:fc:99:09:af:
b5:e6:fd:0e:c5:85:05:fe:77:af:50:9e:b8:68:c1:
c9:af:25:63:5b:f7:6c:5f:73:37:82:fd:19:39:b4:
61:fa:0e:27:f9:e2:0e:27:52:86:17:a1:16:df:65:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:0D:F8:CF:38:56:16:F0:4E:86:D8:FE:02:0F:56:6D:F2:F9:2F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aWkN-M84VhbwTobY_gIPVm3y-S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:fe:44:94:c0:55:bd:24:f7:76:ed:40:6c:0a:5a:52:bb:7d:
73:e0:db:50:14:2c:00:1a:f9:8d:e5:b7:e4:fa:1c:de:b9:5e:
60:ea:c6:f5:e9:d6:41:ea:fc:00:ee:4e:41:30:97:31:16:3c:
95:09:2b:df:2b:76:29:30:57:d0:78:42:ff:e8:25:95:a0:a0:
a7:48:3f:93:3f:73:25:25:66:e8:fb:ff:5d:12:74:d3:de:5a:
a0:f9:8b:51:c9:c4:71:f7:2c:61:63:91:4f:7f:aa:c8:f8:33:
69:b1:50:ad:6a:6d:ed:fc:27:ac:bc:cf:ca:30:55:cc:81:21:
5f:08:8c:5c:9c:f1:3b:8e:99:91:f2:84:79:3c:c0:9d:45:a7:
99:23:b6:4d:9b:25:ed:6e:58:af:a7:dc:14:02:8d:89:59:47:
12:9f:50:b9:41:1d:16:b2:bb:e7:dc:cf:e8:91:1a:59:bd:b3:
bc:ea:e5:bc:a4:2a:63:b4:b1:03:ec:33:f9:11:86:8a:a2:9a:
3d:d1:71:ec:4d:27:6c:48:9e:49:a7:1c:30:f9:26:a8:f4:55:
74:13:a9:24:6f:47:a2:2d:0a:f7:f6:b6:1d:e4:f2:71:ce:69:
20:0d:a1:a5:90:e5:fc:61:59:b3:56:2f:05:4c:6c:e3:70:85:
f1:74:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:58:28 2025 by rpki-client