Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/B4TIzJgtb1yyBRsS0fWfNUhYJr0.roa
File: B4TIzJgtb1yyBRsS0fWfNUhYJr0.roa (raw, json)
Hash identifier: OCj8JCqaB8AE1lp1vaPoLUYhcY5IyuKLUB7pUy2OQTY=
Subject key identifier: 07:84:C8:CC:98:2D:6F:5C:B2:05:1B:12:D1:F5:9F:35:48:58:26:BD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A645FA63B041A34AECED97A7032DAFF06
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/B4TIzJgtb1yyBRsS0fWfNUhYJr0.roa
Signing time: Tue 05 Sep 2023 08:05:04 +0000
ROA not before: Tue 05 Sep 2023 08:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:645f:1eff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:5f:a6:3b:04:1a:34:ae:ce:d9:7a:70:32:da:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 08:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0784c8cc982d6f5cb2051b12d1f59f35485826bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:4d:be:2b:26:6e:a9:40:e9:e1:44:e6:5f:
c5:a7:d5:4f:10:64:f4:4e:5e:64:20:91:f4:9f:08:
e1:83:67:cb:2f:27:58:33:7f:cb:c9:81:fc:14:c5:
26:f8:25:04:bb:d7:96:3b:91:b3:32:4f:be:a1:13:
17:d1:8e:ad:04:07:47:09:ff:33:08:99:a8:b3:55:
45:fa:c9:e7:81:48:ca:7f:d2:86:74:5a:d5:8a:3e:
a8:da:f0:f4:a7:0c:61:ba:31:78:bc:5f:e0:b7:17:
56:91:1d:93:a1:e5:9e:4e:d8:23:da:30:06:66:7c:
a4:9b:13:a3:d4:70:60:06:cd:62:4e:f9:89:02:8a:
14:9a:5d:b5:93:dd:54:ef:bd:89:c4:33:66:e4:c7:
93:9e:9d:9b:ea:83:8b:fe:14:10:e3:6b:6c:c7:23:
41:26:92:bd:3c:c4:5f:d3:06:ce:03:e1:b4:65:2f:
bc:b5:10:fa:25:d5:40:75:01:30:63:20:49:1a:7b:
8a:11:7f:cc:51:08:ed:89:9f:e6:7c:48:71:47:b5:
10:0b:a5:83:ea:f2:6a:43:20:89:fa:db:ba:08:77:
e3:cd:69:72:33:5e:b6:d4:cd:c6:9f:40:2c:88:81:
f9:45:08:97:01:75:15:08:fb:28:30:93:91:89:0b:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:C8:CC:98:2D:6F:5C:B2:05:1B:12:D1:F5:9F:35:48:58:26:BD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/B4TIzJgtb1yyBRsS0fWfNUhYJr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:e7:73:c3:93:18:f9:1c:c7:92:b3:0c:de:d2:5a:c8:09:9e:
4d:a7:c8:02:b6:97:03:1e:e0:3a:eb:78:f6:7a:e0:4c:db:8a:
6c:fe:f8:76:11:80:aa:e4:17:fa:f4:77:8f:33:8a:1b:84:a7:
b8:10:07:3c:fe:c1:ed:a0:77:ae:07:94:b1:5c:68:06:32:c1:
79:5e:90:f1:bf:87:d0:9c:bd:f9:44:cf:9c:48:89:d0:27:26:
2e:4b:bc:49:59:c2:b2:9a:ec:3b:d9:77:d9:90:74:18:8b:ca:
25:16:4e:08:ab:6f:d3:2f:36:84:72:b9:2e:70:a7:a5:eb:c5:
c9:e4:a4:c3:97:e6:0c:b5:5d:92:d6:ce:87:da:f5:05:6e:ef:
75:5d:9a:c6:eb:26:54:6b:c1:06:be:6e:21:1b:38:5d:c9:c5:
4e:ea:0f:81:5c:ce:92:d9:0e:44:db:d8:af:f4:29:1c:1a:61:
1c:cf:77:65:69:15:3a:e4:49:e8:4f:b0:26:b0:14:96:64:c1:
27:63:0a:e6:6e:78:fb:43:3c:c2:fc:f1:75:17:e9:0d:cc:24:
29:d8:36:ce:81:0e:0c:8b:12:8b:11:7e:cd:fc:2c:ae:5c:9c:
7a:ed:b1:7f:be:7e:5d:77:0b:01:bd:94:c5:9b:05:fd:7d:9e:
60:65:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:33:45 2025 by rpki-client