Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0Iaza6vEp3BMZC2Mljg-PH7TBlY.roa
File: 0Iaza6vEp3BMZC2Mljg-PH7TBlY.roa (raw, json)
Hash identifier: whg2Rcn0LIC/AJU6LyVXkkiH496R7CCheChiSx1/CMQ=
Subject key identifier: D0:86:B3:6B:AB:C4:A7:70:4C:64:2D:8C:96:38:3E:3C:7E:D3:06:56
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA5D193CF331D2F7BD74F94612D494081
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0Iaza6vEp3BMZC2Mljg-PH7TBlY.roa
Signing time: Mon 18 Sep 2023 01:04:50 +0000
ROA not before: Mon 18 Sep 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:a5d1:21c4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a5:d1:93:cf:33:1d:2f:7b:d7:4f:94:61:2d:49:40:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d086b36babc4a7704c642d8c96383e3c7ed30656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:d2:ff:07:3c:aa:09:b8:cc:dd:e9:48:fd:
69:dc:9b:1e:ca:c0:05:5d:30:c5:e3:48:9d:a1:47:
23:51:38:dc:15:7a:a1:ed:95:e0:0f:dd:fd:42:67:
e4:98:56:cd:b4:ac:61:98:bc:c6:45:7d:38:27:28:
b5:d7:71:74:38:fd:88:2b:a6:f5:24:b4:b4:4a:a7:
6d:c6:43:d8:25:80:d4:44:7c:62:71:71:a7:85:99:
41:01:8c:8b:53:a1:9d:96:e9:fa:23:6a:1f:fc:04:
73:ce:45:20:25:b8:8e:2d:f6:95:ee:c7:ee:8e:42:
f3:64:a5:b6:ad:d5:09:e0:94:80:ca:ed:7c:04:f1:
58:54:9b:67:bc:f5:34:8f:63:39:d8:d3:a2:ac:a7:
6e:8a:ff:87:5e:34:7d:07:c9:55:6a:4c:27:93:6a:
7f:9e:34:6c:62:09:a4:7a:43:f3:ce:fc:14:0c:11:
6d:75:68:c2:23:98:14:21:79:75:c2:c8:e1:71:32:
8b:e0:cc:59:bd:66:29:f0:0a:ed:10:b9:a3:85:68:
43:2d:69:2e:12:2f:41:f5:cb:3f:6e:58:21:62:89:
65:fe:94:be:48:40:56:c6:b1:9a:df:1a:ee:ec:fe:
fc:4a:ec:82:1d:96:8e:74:29:40:39:a1:22:87:37:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:B3:6B:AB:C4:A7:70:4C:64:2D:8C:96:38:3E:3C:7E:D3:06:56
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0Iaza6vEp3BMZC2Mljg-PH7TBlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:aa:47:fb:b6:e5:84:3e:a8:1f:b0:1b:8c:50:b4:c1:7c:99:
04:37:76:60:53:d3:2a:a3:a6:60:4f:6e:62:20:ed:0e:87:63:
4e:d4:63:62:21:5a:ed:d1:e8:47:d6:dc:a7:eb:08:c6:f5:31:
a6:41:5f:39:c1:22:e0:93:a4:e9:72:81:b1:d3:f6:93:39:37:
59:e6:63:12:03:e1:3b:b8:c4:05:8b:02:d7:8d:9b:4f:0e:42:
0f:6e:d6:0a:d4:4b:1b:ea:95:f6:b2:b3:3e:4d:8d:ab:be:a5:
74:4d:0c:92:a8:3a:2d:62:8f:4a:65:4c:bc:c7:57:9e:e6:5d:
11:83:a5:5f:75:81:fd:8b:09:66:95:d2:90:03:c5:c2:53:f9:
83:3c:0e:d7:4c:d9:63:91:89:b9:53:fc:c2:7a:a9:0d:84:d0:
d7:e2:7e:07:14:b8:1f:b2:8b:01:16:dc:fd:26:41:a2:0c:d6:
cd:7c:41:57:4c:97:45:1c:e7:24:e4:d3:60:68:02:d9:f8:7f:
98:f9:70:1b:1e:aa:79:eb:42:62:05:f7:a8:d5:fc:e7:8c:ef:
17:2c:e7:5f:6f:f8:b2:b1:ab:8e:dc:29:9b:c3:b9:99:26:98:
01:e7:46:d2:d4:53:0f:5f:30:2f:12:0f:10:fc:20:79:19:50:
ee:da:27:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYql0ZPPMx0ve9dPlGEtSUCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE4MDEwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDg2YjM2YmFiYzRhNzcwNGM2NDJkOGM5NjM4M2UzYzdlZDMwNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSvS/wc8qgm4zN3pSP1p3JseysAF
XTDF40idoUcjUTjcFXqh7ZXgD939QmfkmFbNtKxhmLzGRX04Jyi113F0OP2IK6b1
JLS0SqdtxkPYJYDURHxicXGnhZlBAYyLU6Gdlun6I2of/ARzzkUgJbiOLfaV7sfu
jkLzZKW2rdUJ4JSAyu18BPFYVJtnvPU0j2M52NOirKduiv+HXjR9B8lVakwnk2p/
njRsYgmkekPzzvwUDBFtdWjCI5gUIXl1wsjhcTKL4MxZvWYp8ArtELmjhWhDLWku
Ei9B9cs/blghYoll/pS+SEBWxrGa3xru7P78SuyCHZaOdClAOaEihzeF6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNCGs2urxKdwTGQtjJY4Pjx+0wZWMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMElhemE2dkVwM0JNWkMyTWxqZy1QSDdUQmxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH6qR/u25YQ+qB+wG4xQ
tMF8mQQ3dmBT0yqjpmBPbmIg7Q6HY07UY2IhWu3R6EfW3KfrCMb1MaZBXznBIuCT
pOlygbHT9pM5N1nmYxID4Tu4xAWLAteNm08OQg9u1grUSxvqlfaysz5Njau+pXRN
DJKoOi1ij0plTLzHV57mXRGDpV91gf2LCWaV0pADxcJT+YM8DtdM2WORiblT/MJ6
qQ2E0NfifgcUuB+yiwEW3P0mQaIM1s18QVdMl0Uc5yTk02BoAtn4f5j5cBseqnnr
QmIF96jV/OeM7xcs519v+LKxq47cKZvDuZkmmAHnRtLUUw9fMC8SDxD8IHkZUO7a
Jyw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:35:39 2025 by rpki-client