Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Cj_zq2-Me3q8-fC1GEtt6dmsGz4.roa
File: Cj_zq2-Me3q8-fC1GEtt6dmsGz4.roa (raw, json)
Hash identifier: hRiTovgj1keAWNoJfArafEiM3PfmtE3HjCyy0V0Ej/E=
Subject key identifier: 0A:3F:F3:AB:6F:8C:7B:7A:BC:F9:F0:B5:18:4B:6D:E9:D9:AC:1B:3E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5ECC57754A9D0AC81119B5AA4C10168A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Cj_zq2-Me3q8-fC1GEtt6dmsGz4.roa
Signing time: Mon 04 Sep 2023 06:06:04 +0000
ROA not before: Mon 04 Sep 2023 06:06:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:5ecb:d3d7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:cc:57:75:4a:9d:0a:c8:11:19:b5:aa:4c:10:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 06:06:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a3ff3ab6f8c7b7abcf9f0b5184b6de9d9ac1b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:56:54:a6:fd:fe:54:42:f3:7d:96:71:4b:
06:2b:12:5f:35:5e:85:1c:be:e6:3f:aa:d9:30:ac:
cc:80:82:0c:2b:63:e4:12:21:ab:ab:6f:91:10:9a:
19:ea:99:9b:b2:8c:59:ee:ec:fd:79:68:25:3e:57:
f6:82:1e:79:9e:9f:e0:fc:51:73:14:6e:3b:b7:12:
31:ba:a8:fb:6b:e3:a7:84:08:8d:a3:76:55:2f:5a:
b8:da:b4:6c:01:53:c9:c1:cb:7e:be:76:ec:0b:88:
ef:b6:d1:77:a0:44:87:51:a1:7e:0a:88:82:13:45:
22:74:25:87:4a:7d:77:d3:b1:d5:84:73:78:04:85:
5b:23:63:bd:87:03:49:a4:a8:62:59:2e:13:26:18:
b9:b1:7d:e0:76:d7:be:18:c1:a5:16:e5:16:14:8c:
e4:c0:18:b4:b5:83:3d:6a:ef:f2:12:f0:aa:4a:10:
a8:93:fe:17:3b:e7:a9:b0:9b:a8:bd:91:2b:1c:5d:
e9:66:75:54:d4:86:83:70:19:79:6d:46:a0:92:55:
da:15:f1:4a:bd:e2:b8:e5:bc:d0:f7:47:38:d5:4c:
43:5a:9a:41:06:a7:be:9d:d5:c3:db:bf:69:fb:e0:
c6:4c:de:51:0b:d0:f3:a0:2f:99:98:bc:8c:68:66:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:F3:AB:6F:8C:7B:7A:BC:F9:F0:B5:18:4B:6D:E9:D9:AC:1B:3E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Cj_zq2-Me3q8-fC1GEtt6dmsGz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:9e:87:46:a9:54:4b:b1:49:38:2b:68:e5:b9:60:3f:b4:29:
77:75:f7:e6:74:98:cd:5a:e6:f8:8f:0a:2a:6f:17:78:b9:73:
71:35:de:14:0e:6f:d2:8c:93:1c:ba:65:de:ed:bd:f5:6b:2a:
9a:dd:82:6c:c8:8e:c1:27:3f:b4:cc:86:1c:60:0d:fc:e3:41:
7e:d5:74:a7:3d:29:2c:2b:26:13:15:0d:51:33:80:cc:e2:b0:
b4:4a:14:ff:eb:cd:92:d4:c7:2f:e6:ea:70:bb:61:b1:ce:e3:
ad:f8:04:a7:22:ec:1c:01:9a:c4:20:e2:91:ea:ac:ce:28:d3:
30:aa:17:cb:18:0d:0f:07:e6:c7:b2:43:f6:6a:ce:4a:9a:0c:
17:b3:06:84:46:08:0e:09:b7:f7:79:fb:71:0b:ff:db:15:71:
24:5a:31:07:5e:0a:44:f1:8a:2a:cc:26:3e:ef:b7:78:c0:89:
60:19:c5:3c:f6:f4:69:66:85:fe:4e:d5:91:74:31:0b:87:d0:
6c:65:56:c5:0c:20:34:73:2a:b4:cf:4a:87:7e:37:b5:02:79:
f7:c9:64:1e:4d:e9:8e:88:d4:46:a6:1a:56:69:a9:55:62:6e:
81:3e:94:51:4e:5f:e8:13:a6:2e:26:a9:38:e8:c8:ad:d7:46:
9a:5e:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:06:30 2025 by rpki-client