Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/u7pfasFDldXSlu-pKpRG_2RlHOc.roa
File: u7pfasFDldXSlu-pKpRG_2RlHOc.roa (raw, json)
Hash identifier: a969Avc3G7Pb/sl95Wu6boH5Lj+iKoLd03FPhkwckSw=
Subject key identifier: BB:BA:5F:6A:C1:43:95:D5:D2:96:EF:A9:2A:94:46:FF:64:65:1C:E7
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAB67A1A885E07B073DC9D9B07613ACB6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/u7pfasFDldXSlu-pKpRG_2RlHOc.roa
Signing time: Tue 19 Sep 2023 03:06:50 +0000
ROA not before: Tue 19 Sep 2023 03:06:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:ab66:d5ff/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:67:a1:a8:85:e0:7b:07:3d:c9:d9:b0:76:13:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 03:06:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbba5f6ac14395d5d296efa92a9446ff64651ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:54:83:10:18:4f:f2:4e:88:f7:b0:ff:aa:
da:01:4f:6b:39:33:a8:11:6f:27:71:27:fd:09:b6:
c4:27:ee:b5:67:5c:6f:b0:b7:c0:99:2d:1b:fa:f6:
a1:ac:08:91:b5:f7:4d:dc:64:7f:d3:f3:aa:98:b6:
42:1a:6a:d3:04:49:e6:65:fd:d5:23:d4:a3:6f:3b:
36:58:e1:1c:ea:37:47:f9:c8:a9:91:45:fa:56:8c:
b7:70:b5:01:5a:e2:47:f7:18:7e:9e:df:a0:72:c9:
fb:65:ea:d9:e3:cd:79:d3:83:97:1c:e6:4a:60:d6:
86:2d:cd:13:a6:fd:8b:cc:dc:d7:03:76:af:eb:9f:
81:85:c1:3f:be:4b:bc:fa:90:f1:7d:0f:ae:2c:af:
98:ca:71:96:3c:25:9a:f3:85:74:55:b9:52:11:ff:
08:61:ec:5f:b8:d5:f7:d0:2a:83:a1:4e:65:72:7f:
b1:60:6a:e2:07:29:f1:46:de:35:16:49:64:b2:11:
df:49:e8:d2:b3:0c:fa:78:e3:38:08:6d:45:61:9a:
d3:16:3d:17:76:72:50:a9:5f:a5:a6:48:61:13:0f:
24:a4:fb:a2:3f:64:24:97:1e:82:8b:60:2f:ee:10:
82:c7:65:1b:5a:c7:d7:5d:a4:cb:f5:2e:e5:7d:82:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BA:5F:6A:C1:43:95:D5:D2:96:EF:A9:2A:94:46:FF:64:65:1C:E7
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/u7pfasFDldXSlu-pKpRG_2RlHOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:5b:83:9b:70:13:66:f8:19:13:84:98:42:5f:53:1e:24:43:
b5:53:64:8f:b9:9e:92:fd:61:a2:2f:8b:c2:56:cb:0d:97:c6:
cd:78:40:06:ce:16:66:a4:2b:b9:42:93:5c:a2:8c:17:a3:66:
d0:aa:72:42:c2:9b:be:da:34:5f:4a:d9:ab:b1:4e:c3:25:78:
cc:f8:c1:8a:ed:d7:c3:5e:96:bd:49:52:ea:24:3f:65:1f:fa:
97:df:73:51:7c:72:1b:3d:e5:02:74:ca:a8:7b:35:d1:e1:47:
3c:ed:d1:c8:7c:a9:4e:f0:28:17:8b:48:49:fd:cb:00:5d:ec:
f1:d5:19:66:a8:17:57:3a:6f:89:d2:f4:c4:c2:92:ab:31:12:
54:bb:52:00:21:5b:a8:48:ca:90:ac:e7:91:40:60:6a:56:f7:
5f:4a:f6:6f:8e:6b:de:36:92:e0:77:eb:d1:74:33:d3:45:ad:
68:02:d0:9c:68:f6:65:ff:04:c1:28:de:9d:53:64:d0:a6:29:
6f:4d:0f:2e:17:19:6a:b6:47:ff:dc:d9:b5:1b:ad:77:95:dd:
7a:3b:ec:8c:83:6c:47:f5:8b:59:ad:95:73:0a:2e:0a:68:97:
76:60:b0:b6:34:41:d3:5e:ac:94:ed:b6:eb:69:2f:ea:44:7f:
a5:e3:a4:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqrZ6GoheB7Bz3J2bB2E6y2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE5MDMwNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmJhNWY2YWMxNDM5NWQ1ZDI5NmVmYTkyYTk0NDZmZjY0NjUxY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmxUgxAYT/JOiPew/6raAU9rOTOo
EW8ncSf9CbbEJ+61Z1xvsLfAmS0b+vahrAiRtfdN3GR/0/OqmLZCGmrTBEnmZf3V
I9Sjbzs2WOEc6jdH+cipkUX6Voy3cLUBWuJH9xh+nt+gcsn7ZerZ481504OXHOZK
YNaGLc0Tpv2LzNzXA3av65+BhcE/vku8+pDxfQ+uLK+YynGWPCWa84V0VblSEf8I
YexfuNX30CqDoU5lcn+xYGriBynxRt41FklkshHfSejSswz6eOM4CG1FYZrTFj0X
dnJQqV+lpkhhEw8kpPuiP2Qklx6Ci2Av7hCCx2UbWsfXXaTL9S7lfYJuWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLu6X2rBQ5XV0pbvqSqURv9kZRznMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvdTdwZmFzRkRsZFhTbHUtcEtwUkdfMlJsSE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB9bg5twE2b4GROEmEJf
Ux4kQ7VTZI+5npL9YaIvi8JWyw2Xxs14QAbOFmakK7lCk1yijBejZtCqckLCm77a
NF9K2auxTsMleMz4wYrt18Nelr1JUuokP2Uf+pffc1F8chs95QJ0yqh7NdHhRzzt
0ch8qU7wKBeLSEn9ywBd7PHVGWaoF1c6b4nS9MTCkqsxElS7UgAhW6hIypCs55FA
YGpW919K9m+Oa942kuB369F0M9NFrWgC0Jxo9mX/BMEo3p1TZNCmKW9NDy4XGWq2
R//c2bUbrXeV3Xo77IyDbEf1i1mtlXMKLgpol3ZgsLY0QdNerJTttutpL+pEf6Xj
pCQ=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:33:10 2025 by rpki-client