Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/J5lIxzrdLMpQ8tfF46dBDChC0n4.roa
File: J5lIxzrdLMpQ8tfF46dBDChC0n4.roa (raw, json)
Hash identifier: 8WC5hJvG5MnwEH0920cl168QYLqpOWJC5wBDGX33EmM=
Subject key identifier: 27:99:48:C7:3A:DD:2C:CA:50:F2:D7:C5:E3:A7:41:0C:28:42:D2:7E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAD1D41152E903A08B30CD11281E159BD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/J5lIxzrdLMpQ8tfF46dBDChC0n4.roa
Signing time: Tue 19 Sep 2023 11:04:50 +0000
ROA not before: Tue 19 Sep 2023 11:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:ad1d:b0d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ace5:be7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:1d:41:15:2e:90:3a:08:b3:0c:d1:12:81:e1:59:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 11:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=279948c73add2cca50f2d7c5e3a7410c2842d27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:34:11:81:a8:5c:48:3e:be:11:1a:a4:4d:
26:5b:0d:c5:73:ac:44:8e:0f:d0:4f:20:7b:ce:09:
61:8a:43:1b:0e:72:7d:70:c9:9f:04:bc:67:bf:36:
43:bb:1b:54:15:91:37:0f:fb:08:81:e6:ec:e4:c7:
e6:8e:0f:92:4a:67:de:e6:ae:e3:15:72:64:7e:b0:
e6:ac:d4:30:4d:da:5b:63:58:6f:53:9c:64:ab:5c:
0c:41:2d:07:f0:e8:28:10:14:02:31:ea:55:f8:e6:
37:33:a5:70:9a:cc:02:95:92:7d:f7:cc:10:2d:9a:
85:21:cb:89:fc:72:7d:6b:62:1b:98:04:16:6a:aa:
ed:6f:41:ba:ee:6c:18:3b:18:a4:fb:67:81:47:b1:
6c:67:1a:a5:ad:6f:bd:b7:52:0b:dc:62:0f:0b:90:
58:cf:2f:96:dc:06:72:d0:69:dd:c5:d0:b7:1c:a2:
83:09:2b:cc:e2:92:ea:b5:64:b3:6d:26:f7:81:e8:
5b:04:ce:09:ec:32:57:23:0e:65:8f:1a:6b:26:9b:
a7:bf:82:f3:90:6d:84:d1:ac:60:d6:b6:e1:42:40:
bd:22:a7:2d:5a:72:ff:ac:5e:46:8b:b9:55:8d:ad:
a0:eb:aa:25:b2:14:3a:03:02:1a:a5:51:85:24:6a:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:48:C7:3A:DD:2C:CA:50:F2:D7:C5:E3:A7:41:0C:28:42:D2:7E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/J5lIxzrdLMpQ8tfF46dBDChC0n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:8e:ae:b8:81:15:b9:b3:f7:23:56:db:d2:65:55:cd:f2:7f:
17:6c:04:c9:32:e1:5a:e2:4f:44:ca:91:be:b2:d3:dc:c3:4c:
6b:02:17:36:66:26:20:4d:a9:db:01:06:c9:85:76:b2:22:df:
e5:ff:d2:ea:80:d8:79:e5:fc:28:87:fc:47:40:16:7e:92:27:
39:1d:dd:82:e0:a9:97:c6:94:b5:60:82:20:72:e6:01:e8:f3:
44:f1:52:c9:aa:3b:21:7b:48:64:18:96:4c:0b:1f:ea:83:af:
17:20:f9:c1:b4:00:71:0b:b2:7b:6b:d2:3c:b9:ba:09:be:1f:
fc:4c:d1:16:14:0d:21:f9:d0:48:11:67:da:22:ce:47:1f:8b:
18:c0:cd:59:39:71:87:e6:a2:e0:b8:ba:e4:e6:cb:f3:13:61:
0c:5b:37:58:34:47:67:6c:74:4f:88:73:08:34:17:c1:b2:5e:
1f:47:bb:f0:fa:57:1c:a1:0d:50:df:8d:b7:d1:a2:2a:fe:5f:
33:19:40:23:5d:81:77:77:d6:6c:5a:53:19:1c:ca:57:6c:b7:
c4:7a:b2:9a:d9:5e:19:47:c7:65:cc:7c:f2:c8:cd:11:7b:79:
ae:b1:e3:25:19:67:b7:c1:a2:f4:d9:74:b7:7c:50:20:85:0c:
e8:1c:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:29:46 2025 by rpki-client