Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0pPcEe6AZwBiGsHSQyvvPUw3h_M.roa
File: 0pPcEe6AZwBiGsHSQyvvPUw3h_M.roa (raw, json)
Hash identifier: EuUF6AiuQBBraS8wC8JYTxqYKASX1zl2r6vwqcBvSUI=
Subject key identifier: D2:93:DC:11:EE:80:67:00:62:1A:C1:D2:43:2B:EF:3D:4C:37:87:F3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5F7037F25653C2DD76019354DB095991
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0pPcEe6AZwBiGsHSQyvvPUw3h_M.roa
Signing time: Mon 04 Sep 2023 09:05:04 +0000
ROA not before: Mon 04 Sep 2023 09:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:5f6f:bc9e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:70:37:f2:56:53:c2:dd:76:01:93:54:db:09:59:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 09:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d293dc11ee806700621ac1d2432bef3d4c3787f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:dd:52:ce:0d:82:77:8e:67:08:5d:bc:e7:
65:f8:33:dd:45:5f:e0:95:0a:31:ad:01:47:db:26:
85:5b:92:98:71:d3:be:15:26:08:03:45:8e:0b:f5:
6a:b5:17:f2:c8:f2:67:25:97:a1:e5:ae:fb:b9:6a:
e2:3e:75:ad:df:8e:43:d1:f4:4e:ea:22:91:35:4d:
b3:d5:e1:60:c3:e3:3a:0c:dc:f2:7b:b7:58:d1:7b:
9a:31:4f:2f:6e:a6:d2:4d:56:c1:fd:ca:92:cc:52:
4c:71:d9:8a:c1:98:24:f3:4a:09:11:5c:86:74:ad:
16:d3:d7:b5:9a:0c:11:99:9f:25:72:c1:ed:42:15:
df:73:fd:3a:62:68:cc:2c:34:27:a7:26:e1:84:ff:
17:2d:0c:94:0c:28:9f:23:8c:9f:21:bf:53:0f:e2:
4e:22:22:fd:2b:e4:3a:76:09:26:79:d2:71:cf:1d:
1f:d9:de:67:2a:a3:59:d9:47:48:37:52:f6:d8:59:
bc:3f:64:cc:23:5f:12:6c:ca:ed:3d:c9:8a:44:2a:
13:91:ad:90:03:9a:02:24:d4:4c:b1:f8:54:da:69:
64:34:02:75:b4:02:82:26:93:e9:d2:c3:6b:af:8d:
ae:0f:7d:04:8b:03:9e:49:f1:71:2b:f0:65:1e:63:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:93:DC:11:EE:80:67:00:62:1A:C1:D2:43:2B:EF:3D:4C:37:87:F3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0pPcEe6AZwBiGsHSQyvvPUw3h_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:8e:8b:62:89:c2:1e:31:91:3e:52:2b:60:92:3f:29:1b:b3:
f7:40:9a:f1:49:68:ab:06:49:54:ae:f5:c6:7e:a3:b0:47:c8:
d0:6e:e7:da:87:58:bb:5a:b0:a1:06:1e:5e:cd:43:2f:81:33:
c3:64:73:89:84:3f:8f:cb:7f:9f:4c:d0:09:10:0c:ea:28:1b:
d8:76:35:ae:2e:86:fc:0d:39:d7:90:2b:cb:80:d1:22:56:4a:
fa:60:41:d4:0d:19:29:c2:c8:1a:ed:ab:f0:b3:c1:58:86:e0:
1d:80:22:40:c8:63:c0:ac:c2:d2:24:45:02:c0:57:02:2e:28:
24:32:39:51:da:b3:80:b3:3b:c8:8f:43:b7:3f:cc:44:19:27:
96:f0:b8:d3:bf:87:c3:d6:8b:3d:bb:e3:5f:ac:42:df:3f:c5:
10:71:cd:a4:6d:e2:d4:af:fb:71:62:ad:16:ef:93:82:3a:c7:
64:31:5a:c2:ae:d4:8e:07:34:33:eb:85:1c:48:12:a5:bb:f0:
2c:7e:3e:94:1f:ae:f2:62:c4:db:12:b4:b7:7f:db:3f:b3:69:
46:9e:d6:16:13:80:a9:b1:c9:cf:34:44:43:08:f4:e2:2f:cc:
07:38:bc:fc:ea:87:b3:4a:1f:ed:46:0b:c5:98:1e:71:71:50:
ff:ff:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:19:28 2025 by rpki-client