Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0JRRapYv0oqmmKtzoHmeUkKeLK4.roa
File: 0JRRapYv0oqmmKtzoHmeUkKeLK4.roa (raw, json)
Hash identifier: 86PiATILv7e4HmzrCVx3ubtF3AJMQU4oW8JkAMBsV5U=
Subject key identifier: D0:94:51:6A:96:2F:D2:8A:A6:98:AB:73:A0:79:9E:52:42:9E:2C:AE
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAB6EF4D080A14CADBB9D87E6B3340D93
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0JRRapYv0oqmmKtzoHmeUkKeLK4.roa
Signing time: Tue 19 Sep 2023 03:14:50 +0000
ROA not before: Tue 19 Sep 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:6e:f4:d0:80:a1:4c:ad:bb:9d:87:e6:b3:34:0d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d094516a962fd28aa698ab73a0799e52429e2cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:63:51:9a:4a:41:68:1e:fb:04:87:fc:89:
d1:01:51:e4:f7:28:d2:77:4b:e2:7d:3a:bd:7c:8a:
5d:62:48:eb:ab:5a:83:a7:16:75:d4:ce:11:06:6a:
2d:6c:5d:74:90:fb:47:40:29:a7:04:2c:6b:ed:78:
d1:97:e1:53:67:44:fe:5a:8d:fb:02:b0:e7:ed:3f:
1b:27:7d:84:76:1f:60:2d:f3:4f:61:77:a7:66:c5:
70:b9:b0:94:67:2a:2f:db:bb:8a:56:01:e6:e4:0a:
d4:43:22:01:35:4b:3a:b5:2a:39:68:d6:d9:ad:15:
f4:e2:e4:1f:0f:3d:0f:d0:aa:04:7f:dd:19:1f:ce:
dd:3e:25:fd:20:db:b1:49:05:55:66:56:ab:c0:e5:
23:a6:1b:cd:54:c1:02:05:bd:af:1f:09:46:38:ba:
39:fc:8b:aa:c7:d9:aa:31:3d:46:c5:57:6c:3f:a3:
e9:cc:e1:15:f4:a8:6d:30:f4:5d:4c:6a:65:6f:6e:
f3:85:9e:e2:27:52:f1:e8:2c:16:86:dc:19:75:9f:
8c:50:76:e8:67:40:d6:ad:69:ab:94:57:ac:ee:45:
83:02:55:bc:e5:98:b1:e7:92:61:69:63:6d:ef:4c:
29:0d:8c:9d:97:e2:e2:a7:25:ba:76:a1:53:0a:1b:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:94:51:6A:96:2F:D2:8A:A6:98:AB:73:A0:79:9E:52:42:9E:2C:AE
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/0JRRapYv0oqmmKtzoHmeUkKeLK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:68:49:76:b7:51:a4:df:b8:4e:0b:a2:54:09:d0:17:47:d1:
ed:0d:26:2a:36:a1:e5:9b:27:df:b2:ab:34:21:4e:1c:df:c1:
65:bf:fd:12:6e:da:ef:8d:6d:bb:2e:df:17:42:f7:e8:de:2d:
47:c3:54:3f:2e:40:86:8a:df:d9:a4:94:bc:6a:56:92:ba:fb:
ea:68:28:9b:fe:0e:4a:b9:fe:71:a8:40:a2:92:b0:f8:96:c9:
e2:53:9b:f6:75:71:3f:8e:ce:1d:0b:2d:77:75:aa:61:0b:35:
ec:88:23:45:20:a5:20:c0:77:67:4c:65:2d:a8:e4:cb:52:e4:
ad:56:40:01:78:ec:ba:c9:30:2e:29:f4:9e:ac:22:2a:a2:2f:
57:48:b1:0c:52:fb:54:d7:24:23:5f:c5:0e:8e:a4:94:3f:91:
d9:da:67:71:73:f3:99:9e:02:7e:ec:f1:36:3e:0b:c5:12:8f:
51:af:02:e2:a2:aa:35:ee:cd:8d:18:eb:4b:3d:16:77:2a:f5:
6f:db:b7:48:a0:e6:b2:58:4c:1d:64:ae:bf:16:f8:f5:34:5f:
3b:31:42:91:38:a1:9b:b8:6b:cf:88:e6:55:c0:fc:73:44:b6:
e4:23:22:54:9e:73:cc:45:91:5c:ea:81:69:b9:5d:ff:eb:db:
86:5b:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:19 2025 by rpki-client