Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aCruV0FuoUeVdv05UF2lkTr4sfI.roa
File: aCruV0FuoUeVdv05UF2lkTr4sfI.roa (raw, json)
Hash identifier: KOSYh4lZSF+GCxBRbaU1f8Z+6r7jqx61t7JZ59sW2IQ=
Subject key identifier: 68:2A:EE:57:41:6E:A1:47:95:76:FD:39:50:5D:A5:91:3A:F8:B1:F2
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8C48B6165F6D10572A7EF299BBC62A53
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aCruV0FuoUeVdv05UF2lkTr4sfI.roa
Signing time: Wed 13 Sep 2023 02:04:50 +0000
ROA not before: Wed 13 Sep 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:8c48:1502/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8c:48:b6:16:5f:6d:10:57:2a:7e:f2:99:bb:c6:2a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=682aee57416ea1479576fd39505da5913af8b1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:2c:18:0f:22:9f:c7:3c:af:3f:cf:d3:76:
2a:bd:66:3e:fb:8d:56:e3:f0:fe:04:27:00:89:29:
c6:5c:14:89:7a:94:e3:b9:85:28:02:98:2a:95:4b:
6b:86:75:85:a6:50:a2:80:28:53:da:00:20:46:4a:
d5:36:25:d8:4c:c4:76:f0:9d:6a:ea:7a:6d:38:c2:
47:e5:54:7f:37:43:cd:d2:62:0c:c8:56:ef:35:43:
12:c3:ae:17:4e:2a:c6:35:ce:a5:01:c9:9e:31:f4:
c8:50:54:0f:4c:84:9d:85:7c:5d:b1:5d:75:a6:7a:
93:16:22:ed:b1:4d:d2:f6:d9:52:59:d4:a5:d5:a7:
24:9f:80:ce:1a:ab:e8:07:7d:70:92:47:20:cb:3b:
b0:3a:c8:e0:67:15:74:49:f4:16:86:6e:f7:5d:4e:
52:30:3e:b4:29:fd:f2:96:b9:c9:90:75:af:63:86:
b1:0b:e1:50:94:d3:02:7f:19:5b:03:ae:26:f4:b1:
20:69:44:97:05:66:22:2e:d6:10:99:0f:2b:35:1d:
d8:a1:c5:8e:22:2a:72:97:f8:94:5a:ce:86:2d:e8:
0d:91:c3:8b:16:b7:fd:97:66:b0:81:c1:c0:68:14:
e6:74:4e:f8:95:60:55:52:8d:e2:70:43:7e:f8:9f:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:EE:57:41:6E:A1:47:95:76:FD:39:50:5D:A5:91:3A:F8:B1:F2
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aCruV0FuoUeVdv05UF2lkTr4sfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:00:8a:6e:2a:da:7f:de:e7:d1:a1:a9:b0:14:36:90:a3:a0:
25:69:4a:f4:0f:56:28:d1:ec:32:8f:5c:13:ad:0b:a5:fc:85:
9d:da:58:13:8a:ad:77:42:2a:0e:93:b9:a4:2d:eb:71:ef:9d:
c3:ec:3c:ea:5d:31:2b:fe:6c:16:70:11:d4:85:87:b6:ed:04:
3e:64:0f:58:4f:d0:8b:7b:a9:3d:bc:f6:24:4e:4e:19:6b:d1:
0a:c8:2d:0e:21:21:76:9a:0d:41:dc:a9:59:37:0d:db:82:ed:
db:8c:d1:5b:a4:ac:02:01:25:e8:5a:c7:73:6f:87:77:5f:10:
64:af:4e:a8:1e:a4:da:22:a6:ed:d4:5f:be:c9:c5:46:2f:bc:
3f:e4:97:1b:f5:e6:89:01:49:dc:ac:8f:be:9e:af:91:40:3e:
5d:86:8b:db:4e:d2:6e:89:3c:29:0c:5d:85:89:04:04:9e:e8:
cd:ad:01:16:93:26:fe:3a:5c:6a:8c:5f:48:b8:c1:bc:fa:81:
a2:48:9d:bc:0f:6d:9b:34:b0:e3:17:01:11:0d:93:29:29:fa:
1c:bb:ba:fc:43:d0:80:1d:21:76:bf:a7:71:07:df:23:79:91:
50:0d:e0:eb:7d:5f:48:81:0f:fd:c1:46:4d:44:c8:e0:ad:a4:
70:0a:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:14:55 2025 by rpki-client