Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/yrZlXzAtWSS9zseG0FH3d5-5ywQ.roa
File: yrZlXzAtWSS9zseG0FH3d5-5ywQ.roa (raw, json)
Hash identifier: UiN7/J7HNgKxBoffJvFCwAghyrfPTFCZqfWtsdnwFhw=
Subject key identifier: CA:B6:65:5F:30:2D:59:24:BD:CE:C7:86:D0:51:F7:77:9F:B9:CB:04
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7D438809F59FD7645E66F451E5785E7A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/yrZlXzAtWSS9zseG0FH3d5-5ywQ.roa
Signing time: Sun 10 Sep 2023 04:04:52 +0000
ROA not before: Sun 10 Sep 2023 04:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:7d43:b38/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:43:88:09:f5:9f:d7:64:5e:66:f4:51:e5:78:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 04:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cab6655f302d5924bdcec786d051f7779fb9cb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:4f:4f:7e:6e:93:c9:5f:09:26:c9:82:e9:
9d:75:10:97:0d:74:01:3b:18:e8:91:49:81:fc:ce:
94:4f:f0:ba:e0:10:74:9d:08:c4:89:b3:90:72:df:
ad:d3:d5:7d:ea:f9:53:25:36:2c:58:51:84:a1:db:
19:fd:6a:65:1a:f7:d5:db:7f:6d:72:41:91:2e:76:
3e:83:83:21:da:ba:dd:4d:6f:6b:11:56:ed:5e:89:
0f:e9:31:2e:7b:30:95:4c:26:f7:d9:fe:be:80:92:
b6:5b:64:0f:c0:99:11:fc:ae:9c:5d:b8:ce:cd:57:
dd:f9:0b:cb:d8:57:23:35:15:40:f0:68:a5:ff:0f:
bd:c1:f3:ef:99:25:b8:2e:13:ae:42:35:7d:5e:b8:
bf:da:b1:c5:45:d7:26:74:9d:7d:ed:65:9c:05:f9:
5e:36:c1:72:9a:f0:d2:bf:52:8e:70:37:e5:75:4b:
a1:6f:94:a8:82:70:f2:d8:c1:1c:7f:cd:c4:b3:0b:
c0:e1:06:46:cc:35:15:c6:ee:36:4e:d8:11:0d:25:
67:d6:5a:27:8c:1b:05:d9:d1:d7:5b:f5:b7:ff:ee:
9a:a8:d1:94:52:f4:aa:37:81:9b:57:f5:46:11:ac:
75:f5:07:ff:1c:62:a8:6e:54:c1:02:b4:76:9f:a3:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:65:5F:30:2D:59:24:BD:CE:C7:86:D0:51:F7:77:9F:B9:CB:04
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/yrZlXzAtWSS9zseG0FH3d5-5ywQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:60:cd:78:01:6c:e4:c8:83:7b:22:dc:5b:a4:65:03:67:04:
86:8e:cb:30:1e:07:2d:f9:ee:ec:87:bb:1e:53:fc:29:00:20:
92:63:d2:ad:e3:ea:3f:8b:5b:4c:dc:8f:36:91:79:b8:88:30:
3c:7e:58:d4:62:ac:2e:52:f1:43:b3:ab:7f:02:a7:b8:da:1d:
9d:ad:aa:04:2a:47:53:76:50:9d:0c:83:a9:e0:19:b1:2a:ab:
e7:01:29:4d:5b:89:2a:c9:5b:c8:83:2c:d7:89:a2:2b:7e:36:
e5:55:0e:fe:a3:f7:db:f3:b8:3b:1c:c7:da:12:7e:e2:2f:ae:
5d:ff:3b:50:52:96:44:74:fa:67:b2:82:ba:97:54:65:4c:0d:
9c:86:a1:d7:0a:6f:99:0d:4b:5c:db:b3:7d:4b:9c:38:1a:c3:
2e:66:c1:96:f5:f3:c4:5f:a2:9d:de:2f:f8:21:60:03:4d:7c:
e6:98:a2:a4:bd:42:09:c9:1b:45:db:e7:9e:58:56:16:ad:3b:
c8:3e:ab:8f:19:73:79:a7:54:b8:f9:e8:4e:39:f0:65:55:c9:
b0:0f:cb:89:d5:09:7c:06:bb:af:a3:99:86:1d:63:53:88:5c:
bf:63:18:25:bf:ea:ce:f6:36:a3:f2:01:6f:af:18:ce:02:d4:
e8:b6:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:06:07 2025 by rpki-client