Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gUywFLedgqEhX-mpNFFmSuVzKVo.roa
File: gUywFLedgqEhX-mpNFFmSuVzKVo.roa (raw, json)
Hash identifier: uS2J041hQtnxEEbMejx00iusj+pQCEK8UGRm2dPp6NE=
Subject key identifier: 81:4C:B0:14:B7:9D:82:A1:21:5F:E9:A9:34:51:66:4A:E5:73:29:5A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9B85C66E0BB1B3068F7AC969FF866F06
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gUywFLedgqEhX-mpNFFmSuVzKVo.roa
Signing time: Sat 16 Sep 2023 01:05:50 +0000
ROA not before: Sat 16 Sep 2023 01:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9b85:951c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9b:85:c6:6e:0b:b1:b3:06:8f:7a:c9:69:ff:86:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 01:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=814cb014b79d82a1215fe9a93451664ae573295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:00:9b:6d:04:64:e3:a8:c0:c2:23:5e:60:df:
9b:eb:d0:88:73:5c:7d:39:f3:c6:50:79:13:77:f5:
0a:03:c1:2f:89:ef:dc:2d:e4:48:0a:cc:11:d9:06:
a4:79:62:e1:8f:31:0b:26:8f:5e:41:8d:49:36:9f:
be:d1:84:5d:5b:30:a8:e7:bc:5c:6e:f4:8c:21:f5:
36:c0:92:b9:50:f1:e5:b8:14:89:a8:5a:eb:1d:6a:
24:01:64:d2:e2:3e:94:4b:55:0a:7b:e2:e6:b1:5a:
f7:c1:dc:a8:1b:52:cf:9d:4c:be:2f:f8:1a:f5:b3:
d2:42:a6:c7:39:98:20:73:62:0e:94:75:f9:05:a5:
fd:da:a5:60:22:fa:2f:e7:1f:c5:93:77:15:46:b5:
f3:06:25:26:24:9d:34:c1:9e:1a:2a:5d:47:24:15:
8c:11:23:86:3e:96:06:6e:3a:47:e8:06:ad:da:64:
86:da:b3:91:83:0a:31:af:2d:d3:92:fb:01:2a:9f:
38:9c:d9:d4:ce:45:0f:58:c6:3b:6d:d5:5e:61:6b:
2e:49:1c:fa:98:08:be:eb:0e:00:ef:56:34:48:89:
ab:d0:84:23:5c:81:ed:71:5c:6a:50:95:05:c3:a5:
5e:62:b9:6a:e6:a1:c7:a5:6c:7c:81:8c:81:0a:de:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:B0:14:B7:9D:82:A1:21:5F:E9:A9:34:51:66:4A:E5:73:29:5A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gUywFLedgqEhX-mpNFFmSuVzKVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:e8:fc:4a:e8:84:ef:d7:48:c0:e1:64:95:72:22:8d:d6:2f:
35:6b:8a:db:f4:a0:c5:89:4c:16:8c:3e:06:12:74:7a:ad:86:
a1:06:d5:67:bc:59:1b:31:a8:c7:75:68:ce:97:de:f0:25:73:
0d:f3:83:a5:2c:61:c5:92:9f:c5:e8:e9:e7:f4:38:6d:98:d1:
5d:e2:a2:29:ba:4e:91:4b:58:d9:c9:2b:4c:c7:72:55:5e:33:
2f:f0:97:fc:12:5b:05:35:0a:7f:e9:86:b4:a8:69:c7:cb:c2:
47:29:00:bf:bd:7d:e9:46:c1:71:37:73:54:03:f5:1c:98:85:
60:11:91:11:1e:2d:31:7e:bf:30:bd:da:6b:0c:f8:8f:cf:eb:
92:6f:90:3b:18:7e:83:d7:77:22:70:4d:bf:bb:4a:b6:86:fe:
1a:74:57:33:a7:4d:3d:2e:c7:84:6b:52:af:8b:77:ec:3f:0b:
c8:32:d0:26:b2:de:78:1f:5c:85:49:c6:18:58:05:69:61:4b:
5d:04:e2:5c:36:8a:4a:b0:59:98:98:3a:1f:d7:9b:8b:44:48:
51:78:49:5d:48:ba:4f:dc:c0:d7:3c:65:31:f6:54:3f:36:4e:
b5:d2:b9:27:77:f2:dc:51:92:05:aa:81:28:6f:6a:03:01:a8:
d4:f8:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:47:00 2025 by rpki-client