Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/b2tWinUkF66ScKLox0ZAfHvUqtQ.roa
File: b2tWinUkF66ScKLox0ZAfHvUqtQ.roa (raw, json)
Hash identifier: 8KVEtHkUaCTrib0n2TOd/grSa30JuCTJCHL9All0Fw8=
Subject key identifier: 6F:6B:56:8A:75:24:17:AE:92:70:A2:E8:C7:46:40:7C:7B:D4:AA:D4
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A601503CBF3FBF59C8E59878093074626
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/b2tWinUkF66ScKLox0ZAfHvUqtQ.roa
Signing time: Mon 04 Sep 2023 12:05:04 +0000
ROA not before: Mon 04 Sep 2023 12:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:6014:806f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:15:03:cb:f3:fb:f5:9c:8e:59:87:80:93:07:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 12:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f6b568a752417ae9270a2e8c746407c7bd4aad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:6d:63:6c:67:06:6f:d3:de:5b:e3:b1:8b:
c5:1b:aa:28:ae:22:f6:88:1f:8e:4e:37:d1:1d:32:
ce:d6:02:a5:03:5b:09:e0:9e:46:77:e1:f9:68:69:
59:26:7d:84:61:47:21:36:37:9d:5a:4c:27:30:66:
f5:bd:2d:92:70:a6:31:16:75:01:30:ef:db:31:81:
db:95:be:6b:b6:c9:51:a3:f6:7b:4a:ac:4d:12:d1:
81:29:d2:5a:db:24:2b:0e:87:e8:75:04:12:54:32:
7f:4b:11:5e:c4:3c:1b:0b:5d:6c:f3:0f:d8:80:b5:
b2:ba:9d:54:5a:36:9e:49:6a:88:d2:03:ed:94:f4:
9b:ea:ac:84:e0:02:7d:34:22:a6:15:49:f4:b7:ab:
1c:a8:1e:7e:76:ee:3a:c5:d6:4a:02:19:8c:a0:d4:
af:41:23:bb:63:de:66:b3:ef:e9:25:85:1c:fc:a4:
b7:6f:74:2a:89:28:6b:54:3c:76:ed:b7:38:04:2c:
36:ab:2e:19:36:e7:9b:81:12:c7:84:57:dd:04:41:
c7:40:0f:fe:ec:f4:76:04:9e:d4:89:f8:ee:57:13:
74:53:71:ef:ce:5b:16:0b:d9:75:c0:e4:e3:30:21:
3e:08:ee:0e:3e:25:b6:67:1c:0b:fe:e9:36:7c:8c:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:56:8A:75:24:17:AE:92:70:A2:E8:C7:46:40:7C:7B:D4:AA:D4
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/b2tWinUkF66ScKLox0ZAfHvUqtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:80:b0:02:4c:44:92:52:80:03:bd:d1:d3:5f:6d:4e:b1:c3:
d9:08:97:d0:9b:5f:c4:bd:2c:5c:9e:32:a7:d4:78:ba:f9:e7:
de:a5:aa:e2:b9:a6:9b:aa:1d:88:e6:47:01:84:8d:0d:72:e3:
3b:48:2a:48:66:29:18:2b:4c:b4:c9:48:3c:85:c4:7b:81:c3:
8f:08:7a:4c:81:e3:60:26:3a:55:1c:e4:79:2f:03:76:4d:8b:
bc:b2:4c:55:bd:e5:ce:b1:05:76:11:d8:23:cd:7c:6d:f9:cd:
87:ae:5d:60:13:e9:4f:13:d9:ea:5b:10:2c:39:24:6d:81:ec:
f5:0e:bc:2e:2c:0c:04:11:63:e4:99:86:48:6e:9a:00:f6:23:
ca:e7:f2:26:bb:d8:8f:d3:c5:11:16:6b:a7:66:10:4b:2a:6c:
1f:2d:e6:5d:33:3e:b7:9b:4e:a6:18:8c:20:94:90:81:ec:4e:
7e:30:67:3d:57:bf:5b:02:d5:3a:43:5e:a6:c8:cb:b5:fa:a8:
8e:6e:83:29:eb:37:c9:15:d1:5e:97:9c:fd:32:00:70:d7:72:
02:77:b6:a3:98:fc:ff:5d:9a:7a:b3:7a:c0:0d:80:cf:47:de:
fa:b3:fc:32:6f:15:e9:34:f0:25:e1:46:7d:cb:6a:60:21:0d:
e5:e6:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:29:21 2025 by rpki-client