Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8ie2_JRIQCaGHGKQDD0qIearUlk.roa
File: 8ie2_JRIQCaGHGKQDD0qIearUlk.roa (raw, json)
Hash identifier: ZltaFYZ5DUuzeAVkJTGLJvVHwPPxOHwCoqg2q9dvfSg=
Subject key identifier: F2:27:B6:FC:94:48:40:26:86:1C:62:90:0C:3D:2A:21:E6:AB:52:59
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA42347A43CAFD1C90EF80B7134C6B72F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8ie2_JRIQCaGHGKQDD0qIearUlk.roa
Signing time: Sun 17 Sep 2023 17:14:50 +0000
ROA not before: Sun 17 Sep 2023 17:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a4:23:47:a4:3c:af:d1:c9:0e:f8:0b:71:34:c6:b7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 17:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f227b6fc94484026861c62900c3d2a21e6ab5259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:b7:da:b5:1e:8e:c5:3f:ac:ca:b7:9f:30:
11:b5:90:bf:05:6c:26:b2:6d:4e:e0:60:90:0d:52:
94:6e:bc:5a:42:95:35:1c:0b:33:2a:3a:50:d0:91:
11:89:a3:90:cb:3c:1c:28:da:98:14:e7:33:13:75:
22:9d:b6:bf:f9:e7:fd:b7:3f:88:29:d8:40:3f:c8:
31:8a:63:c8:ac:f7:40:bc:b7:8f:9f:d0:ae:64:b4:
c9:41:08:d7:04:30:05:d0:40:c1:10:c8:65:48:c0:
3c:6c:9d:99:62:ff:13:e9:b7:40:8a:12:f6:2c:04:
c2:22:f6:68:50:53:eb:8f:00:7d:fd:36:91:1b:e1:
5b:a5:1a:5b:1a:c8:dc:83:91:64:79:ed:72:24:a2:
79:8e:c4:fd:92:5c:57:03:2c:73:45:d8:ed:42:94:
a0:5e:9c:f7:b1:c4:4e:17:47:3e:92:af:92:d5:ea:
cf:5f:ff:37:ff:41:0f:f1:c4:e4:73:d7:9a:23:2d:
3c:b3:d9:26:06:46:83:d1:e2:55:c0:42:d0:86:0d:
61:e3:6c:6c:aa:fd:cb:a2:2b:36:3f:14:e0:d5:ec:
49:8c:4c:29:c2:a4:fd:12:4f:85:6b:c3:51:e1:b5:
58:7e:b7:96:29:21:08:e6:3d:3b:0e:de:71:7d:54:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:B6:FC:94:48:40:26:86:1C:62:90:0C:3D:2A:21:E6:AB:52:59
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8ie2_JRIQCaGHGKQDD0qIearUlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:8f:e5:13:e9:03:4b:9e:e9:73:7d:12:e2:70:1b:5d:b2:22:
b4:54:52:fb:1a:08:62:f8:c1:23:d4:cc:87:68:ce:d2:91:44:
4e:87:c7:d8:8e:65:fb:35:11:59:87:6c:4e:36:95:40:76:a4:
46:b2:35:4d:de:dc:c9:00:ce:6a:be:d0:b2:be:c6:d3:71:71:
23:ba:08:f5:b3:5f:e8:6f:66:63:25:61:0a:76:0f:90:71:75:
d1:98:a0:5d:db:0f:83:0e:62:b1:90:50:22:07:b7:13:c5:b4:
65:51:91:1c:b5:6b:39:2a:36:46:0e:10:5a:56:24:95:32:97:
53:cf:f7:36:73:42:89:6d:05:19:73:31:88:7b:01:1d:49:ad:
d8:d7:47:8e:eb:4a:3e:2a:d3:57:9a:ba:17:c9:75:d0:4a:cd:
f2:3e:c7:52:7c:90:e0:63:d9:7c:6e:93:d3:e4:60:43:f0:5e:
20:35:92:9c:3b:c5:12:0b:44:b3:16:0d:89:cc:8e:a9:72:1a:
98:ba:5f:e5:80:f2:95:eb:50:f9:dd:34:19:43:f4:48:2a:97:
8e:70:e7:a8:e5:83:fd:47:45:ec:84:f9:61:d1:2f:a7:3b:e1:
54:47:63:73:df:cd:08:9c:0a:0c:6d:ca:35:c9:9f:37:79:c6:
13:3d:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:00 2024 by rpki-client on console-ams.rpki-client.org