Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vlU6CJxPHKFajd8nrlaVSK4VV8k.roa
File: vlU6CJxPHKFajd8nrlaVSK4VV8k.roa (raw, json)
Hash identifier: iibcxnCPpxn8Twe4xGiEvHadsH83ui5S7c3tOJvPXwQ=
Subject key identifier: BE:55:3A:08:9C:4F:1C:A1:5A:8D:DF:27:AE:56:95:48:AE:15:57:C9
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A48B1770D5CD1317C6F1BCD10E2A7F632
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vlU6CJxPHKFajd8nrlaVSK4VV8k.roa
Signing time: Wed 30 Aug 2023 23:05:04 +0000
ROA not before: Wed 30 Aug 2023 23:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:48b0:da5e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:48:b1:77:0d:5c:d1:31:7c:6f:1b:cd:10:e2:a7:f6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 30 23:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be553a089c4f1ca15a8ddf27ae569548ae1557c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:f2:22:f2:c1:ab:5a:50:90:56:45:93:4f:
26:11:ae:9b:63:79:39:70:67:eb:3a:0e:0b:4f:59:
bd:88:40:55:00:a3:6a:68:3f:49:b7:c9:a3:9f:b6:
3f:64:51:f3:6c:2c:66:11:9d:d7:59:e0:e9:17:2e:
3e:2c:54:cf:aa:5d:5a:69:72:f4:9b:4a:9f:90:47:
de:e9:b4:5a:db:2b:15:15:d7:c7:d9:d5:57:c8:38:
74:57:15:a4:56:c5:69:ee:e6:31:d1:a6:bf:76:68:
d6:08:22:bb:12:16:8d:c1:04:9c:d6:b3:6d:f7:40:
54:d9:56:f9:c8:c1:60:ac:b0:d7:5c:f8:4f:6b:65:
b8:58:63:a1:1d:dc:83:2a:bd:b2:66:d9:8b:d3:aa:
a8:bb:66:8e:62:25:fa:cc:36:09:9e:bf:26:82:0a:
38:f9:49:a5:ff:f6:fb:d0:0f:d2:2d:ac:ba:ec:d5:
b2:ec:06:f6:ec:6d:74:84:b7:5a:e8:6e:d9:a2:83:
7d:e5:0d:0d:52:41:4a:63:6e:1e:33:47:2b:bf:78:
86:68:b1:dd:b6:bf:0e:17:06:ae:94:81:7f:59:cd:
6a:b2:91:e8:a0:88:1a:bf:9f:d7:22:97:4d:5f:1b:
c8:8b:26:20:3d:95:b3:bd:61:1c:60:f9:e0:ed:f5:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:3A:08:9C:4F:1C:A1:5A:8D:DF:27:AE:56:95:48:AE:15:57:C9
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vlU6CJxPHKFajd8nrlaVSK4VV8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:84:c1:38:46:eb:b1:31:2e:c0:33:46:ac:fe:04:aa:b1:bc:
06:54:15:f9:31:bd:e4:3f:4d:44:93:c7:07:c3:84:29:7e:bc:
e6:ab:85:e5:a7:42:fb:e4:ed:8d:10:cf:1e:2b:79:eb:a5:40:
a8:0c:25:7e:be:cc:a4:8c:0e:b2:a1:90:db:2c:c2:e9:06:52:
8a:de:f8:06:cc:bc:04:d8:5b:96:4c:68:bc:eb:92:db:77:3e:
3f:49:ad:13:1a:0e:ec:9d:46:b6:e2:4b:36:5d:ed:c5:57:63:
34:41:d7:ae:2d:06:88:81:a7:5e:f2:f0:30:50:3a:f9:34:72:
80:9e:3c:1c:7d:91:c8:02:58:b9:53:b8:1e:eb:25:14:b1:64:
d6:3b:2e:5b:59:fc:ae:3c:02:e7:69:1a:0f:0d:00:bf:01:98:
83:99:e2:76:5a:10:85:8b:bb:c1:16:b9:63:30:6f:12:5d:27:
b3:78:ca:1a:1c:9f:2c:64:bf:fa:ea:da:ac:d9:36:c9:7c:a3:
13:a6:b7:7c:91:76:43:04:c0:01:ed:56:4b:67:fc:87:99:75:
73:a7:d1:17:df:ff:6e:fa:a2:ad:74:81:32:27:37:ca:9e:c1:
09:cc:1c:24:4c:ed:84:0c:b8:2d:9f:ff:d1:df:dd:32:05:3b:
42:7e:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:09:58 2025 by rpki-client