Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/AvwKN_ueZhH0BNSCR_U8K4R-9TY.roa
File: AvwKN_ueZhH0BNSCR_U8K4R-9TY.roa (raw, json)
Hash identifier: FXBcmNzZ9lKQEUHuqKuzX4mH/YvNx1Q4OeafEEUxRSY=
Subject key identifier: 02:FC:0A:37:FB:9E:66:11:F4:04:D4:82:47:F5:3C:2B:84:7E:F5:36
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A53D9E94D410664BD34AD0DF2CA2014E6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/AvwKN_ueZhH0BNSCR_U8K4R-9TY.roa
Signing time: Sat 02 Sep 2023 03:05:04 +0000
ROA not before: Sat 02 Sep 2023 03:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:53d9:b857/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:53:d9:e9:4d:41:06:64:bd:34:ad:0d:f2:ca:20:14:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 03:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02fc0a37fb9e6611f404d48247f53c2b847ef536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:99:26:ea:f3:4f:04:c9:ba:c7:94:d2:50:
c4:26:75:e7:e4:b4:d4:a0:54:86:ce:2f:59:7d:57:
bb:18:f4:68:5b:41:06:9b:a8:12:0b:c3:fa:35:9c:
7f:e9:92:87:d6:03:a7:16:f2:8a:6a:c0:4a:a0:9b:
5c:c5:45:d2:68:93:8a:41:a6:e3:b1:5f:82:f0:00:
cb:f9:47:83:79:4b:e3:74:99:5c:ac:6d:0d:f7:42:
b3:03:3d:f8:cc:b4:bd:ed:31:cf:c9:e5:bb:3d:60:
00:22:52:8e:5e:37:d4:fc:82:e0:ec:69:c7:46:6e:
79:66:cb:d0:83:ce:fc:56:c4:4d:85:f1:51:33:0d:
28:58:90:b4:b2:61:54:09:30:7c:a1:dd:db:4e:f0:
54:9d:37:50:39:34:82:1c:d8:44:61:b2:de:8d:a7:
76:d1:50:27:af:7b:ba:c6:dd:ae:6f:2c:64:b3:45:
70:0f:fb:f7:53:3e:c7:cb:17:f6:28:d6:d0:ea:a2:
1e:e0:59:67:22:d9:c6:a9:9e:96:8e:2d:5d:2f:b7:
66:6f:c9:73:dc:b2:40:10:7b:27:ab:3f:13:df:f7:
09:8c:f6:ce:65:b1:47:9c:ff:6b:99:4f:04:64:d6:
ec:30:74:1f:1e:c6:47:a7:f3:9e:79:45:9f:96:4b:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:0A:37:FB:9E:66:11:F4:04:D4:82:47:F5:3C:2B:84:7E:F5:36
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/AvwKN_ueZhH0BNSCR_U8K4R-9TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:58:a9:3b:63:12:48:a9:2b:d9:6e:d3:3d:c0:c1:20:40:31:
54:5c:46:ed:78:32:b2:3f:1c:64:17:ce:f7:88:01:d1:5d:4b:
d1:5e:bd:d5:01:fe:21:2d:73:f0:37:08:b5:eb:09:0e:f7:ed:
e9:93:ed:0c:f6:aa:4f:a9:8a:bc:f5:a4:95:20:97:5d:f5:d0:
af:5c:d2:78:e0:67:04:5b:a6:75:db:80:d2:7d:9c:f5:b6:4a:
bd:3a:c0:40:62:f0:69:db:11:e3:b9:ab:c3:81:d6:8e:fe:c9:
3c:9d:1b:68:90:75:6d:16:46:6a:bd:44:29:b4:60:d8:42:33:
2b:e1:57:39:bd:67:c6:f1:dd:90:95:00:ea:55:79:b3:35:cb:
b4:7c:81:98:eb:05:e4:5d:88:ed:4a:4a:5a:a8:95:02:77:0d:
17:45:78:64:0d:ed:94:51:7d:f0:63:f0:b6:78:bf:13:3d:1a:
b0:a5:c1:7c:5e:3b:b5:fd:de:6c:9e:d8:0b:14:6d:dc:88:22:
44:77:81:62:0f:90:ce:ef:a9:c3:8f:42:b6:af:fe:06:76:76:
41:4d:3c:66:7b:db:ec:f8:17:51:c3:93:98:e9:3a:21:d8:21:
d9:88:fb:f0:10:b0:12:95:3e:be:88:25:83:e3:aa:fe:27:07:
31:f1:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:01:42 2025 by rpki-client