Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/J4svZULkq4Md_V6FDyQJbwHcesA.roa
File: J4svZULkq4Md_V6FDyQJbwHcesA.roa (raw, json)
Hash identifier: ofeJDHcpnf1lBoH3FwQX0daVssLDeOKO1VpGaygIRsA=
Subject key identifier: 27:8B:2F:65:42:E4:AB:83:1D:FD:5E:85:0F:24:09:6F:01:DC:7A:C0
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A939E75871AC2D75B3510B189C55CC81F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/J4svZULkq4Md_V6FDyQJbwHcesA.roa
Signing time: Thu 14 Sep 2023 12:15:50 +0000
ROA not before: Thu 14 Sep 2023 12:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:9e:75:87:1a:c2:d7:5b:35:10:b1:89:c5:5c:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 12:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278b2f6542e4ab831dfd5e850f24096f01dc7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:d0:cf:bc:a9:15:33:1a:2a:50:07:73:54:
50:b9:3c:5f:57:e9:d4:11:30:13:44:f4:c1:8d:a4:
e5:1e:74:f8:c8:b6:81:1c:3e:01:61:2c:dc:14:dd:
84:5f:a1:26:85:5b:4d:3c:0d:e1:14:62:2c:a2:38:
dd:03:2c:b3:0c:7f:b9:d6:88:89:34:8f:8c:bc:75:
f1:c6:e6:7d:7d:06:e0:53:e6:f9:19:10:df:1f:80:
12:d9:c3:db:e8:9e:44:4f:58:1b:f2:06:49:2b:14:
a3:86:26:b9:8e:29:eb:ea:2f:0f:d7:6d:96:f9:c9:
74:0e:4f:b0:e5:ce:55:b1:0a:ae:36:38:db:14:31:
06:91:1f:f4:c2:a9:1c:39:71:e8:e7:38:e7:6e:bf:
5f:5d:ce:09:45:62:0c:b5:2b:86:9b:4e:73:f9:83:
c8:82:69:56:f5:f4:54:f5:a6:b2:c5:cd:94:9d:f2:
3c:28:26:89:70:d8:97:71:c6:70:28:3e:bd:a2:0b:
d8:da:4d:21:4e:88:50:20:d3:e8:a7:2b:f1:dc:ce:
64:b2:f9:24:9b:67:d8:0d:1d:85:1a:7e:d8:21:6b:
de:c2:44:ae:86:04:0d:da:2d:12:b3:ac:1b:2d:8e:
62:24:e7:d2:49:98:28:37:88:24:e9:c0:bc:91:7f:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:2F:65:42:E4:AB:83:1D:FD:5E:85:0F:24:09:6F:01:DC:7A:C0
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/J4svZULkq4Md_V6FDyQJbwHcesA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:96:40:bc:ba:b8:3a:06:58:ac:bd:b9:c4:ff:66:fa:0d:f1:
be:98:7e:d0:e3:bd:6b:fc:26:7d:99:98:69:1e:04:45:97:8e:
04:4d:23:3e:32:ad:8e:7c:46:7b:8b:60:d1:5f:60:ba:5e:4b:
1d:51:cc:e5:25:14:c9:df:d4:9b:27:71:0d:2f:ce:bd:05:c4:
73:bf:51:d0:7c:b8:bf:b9:4c:ef:63:85:9e:2d:60:11:09:86:
46:a2:48:42:ee:20:61:0a:c8:78:a6:81:f2:68:b1:26:3a:11:
df:93:d1:02:3d:bd:75:8c:13:b2:39:04:2b:a5:5e:65:ef:27:
86:82:9e:e2:39:cd:6b:93:0d:e4:87:3f:1d:06:fd:36:74:36:
84:3a:ba:8f:a7:67:47:bf:38:57:c8:3f:3e:bf:89:af:54:da:
2b:3a:46:cc:36:28:c2:83:45:ad:f6:18:1a:a1:f6:c1:9d:cd:
22:8f:f8:79:47:a3:d4:a0:4d:53:73:9d:a0:70:02:66:c5:0d:
c7:7f:74:43:97:b9:67:ae:3c:d3:9a:f2:2e:ba:40:2f:5f:7b:
3e:4e:d0:70:8e:5a:18:98:05:76:f8:a5:47:b1:83:d8:9a:46:
71:93:74:61:f9:5e:69:df:23:cc:d2:15:d9:8f:76:91:81:65:
c5:1d:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:38 2025 by rpki-client