Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Xw9ifMf9dw99GJK1-xv2Xliq0rE.roa
File: Xw9ifMf9dw99GJK1-xv2Xliq0rE.roa (raw, json)
Hash identifier: 6O5qNuNUvruFeBZdi8XYxF5AON1GkzTQeChvoLAne/U=
Subject key identifier: 5F:0F:62:7C:C7:FD:77:0F:7D:18:92:B5:FB:1B:F6:5E:58:AA:D2:B1
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9A0456F876590F3BD3108928AD82ADC4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Xw9ifMf9dw99GJK1-xv2Xliq0rE.roa
Signing time: Fri 15 Sep 2023 18:04:50 +0000
ROA not before: Fri 15 Sep 2023 18:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9a03:fce8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:04:56:f8:76:59:0f:3b:d3:10:89:28:ad:82:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 18:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f0f627cc7fd770f7d1892b5fb1bf65e58aad2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:3f:02:4f:9a:e7:77:5a:17:20:75:39:79:
a5:25:35:24:60:32:aa:f5:e7:6b:a3:a9:b6:a7:0b:
45:8e:3c:9b:36:cc:be:57:78:ec:58:1e:93:93:dd:
79:d4:69:f5:e8:22:e8:30:87:1e:2c:96:d8:b7:6e:
2a:75:a1:74:28:3e:08:fc:4f:f3:2f:2c:96:98:b1:
39:44:e4:aa:47:d5:a7:b6:d2:1f:19:88:b5:ce:67:
27:cb:37:54:32:7b:d4:8d:25:99:12:bf:a2:50:31:
56:c7:11:bd:b7:fd:1d:60:57:61:2b:fd:1e:10:3d:
1e:36:83:14:4d:1d:8b:f6:b3:7b:d7:2b:75:99:e5:
85:c9:9d:fa:86:b4:0a:60:9c:04:7d:c0:cf:1b:22:
4e:c2:77:f2:15:21:1b:d5:15:5a:84:39:bb:e6:de:
e2:1f:bf:18:2e:bf:7b:ac:33:95:36:96:67:7e:54:
44:4b:f9:a4:14:6d:89:59:92:9d:bb:5a:30:dd:0a:
51:46:25:c3:80:aa:db:4e:c2:61:db:5d:e8:17:08:
01:da:17:a7:ed:b3:b1:5d:57:66:f7:75:25:13:7f:
21:fd:73:79:9e:c7:0f:dd:21:21:5d:22:cf:11:09:
e3:d4:33:a5:17:f2:4c:17:93:6f:ec:54:b5:c5:b9:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:62:7C:C7:FD:77:0F:7D:18:92:B5:FB:1B:F6:5E:58:AA:D2:B1
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Xw9ifMf9dw99GJK1-xv2Xliq0rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:b4:1f:57:8a:1c:fd:93:67:0d:43:61:7f:70:78:6d:47:bc:
a4:8c:95:b0:29:13:6d:f0:b6:1d:9a:29:7e:71:98:d3:8c:5a:
56:df:02:4f:7a:5b:3e:da:02:10:9f:72:a7:a8:0e:85:b3:cd:
f9:42:b6:48:43:e8:96:33:42:c9:3b:24:7e:19:6c:a5:2a:bc:
c9:55:81:6a:12:40:2a:6e:74:d4:50:7c:ad:23:18:6b:79:82:
a3:33:90:20:5f:4f:f1:71:d3:c8:45:34:24:98:b5:31:b7:fb:
aa:8c:04:61:d7:90:af:0e:b7:fd:7d:eb:90:8f:7c:98:98:29:
d5:c4:7b:94:ad:a0:ee:0a:45:ba:61:6e:89:19:2d:0f:03:49:
7d:ee:80:35:1b:f8:97:a5:de:f6:26:5f:08:b7:98:bd:51:70:
01:3a:b8:14:bf:ab:4f:47:aa:c2:72:9a:95:09:cf:a6:c2:83:
1f:6c:59:51:82:a0:78:25:a9:b5:39:2a:93:e8:3e:7a:5b:4d:
56:27:1c:bf:1f:fb:c1:b6:23:5e:db:31:61:a4:e9:22:7c:23:
53:70:8f:ae:1d:80:2b:f4:ea:71:5b:98:70:c6:e9:23:30:ba:
fd:6b:80:c0:a0:dc:b6:37:c9:88:95:01:4c:a5:74:54:05:bf:
42:25:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:53 2025 by rpki-client