Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JTt54fpvBXgpyPKrJHQRjssA9YE.roa
File: JTt54fpvBXgpyPKrJHQRjssA9YE.roa (raw, json)
Hash identifier: TrJRf9OYc3rujPA9QAYZeM/BWBFsacVXnSj4Pm186a8=
Subject key identifier: 25:3B:79:E1:FA:6F:05:78:29:C8:F2:AB:24:74:11:8E:CB:00:F5:81
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8B3F358A5F8D58B10EFBE4DB89B02B6A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JTt54fpvBXgpyPKrJHQRjssA9YE.roa
Signing time: Tue 12 Sep 2023 21:14:50 +0000
ROA not before: Tue 12 Sep 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8b:3f:35:8a:5f:8d:58:b1:0e:fb:e4:db:89:b0:2b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=253b79e1fa6f057829c8f2ab2474118ecb00f581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:36:48:b9:38:51:98:b4:49:3f:1c:47:08:
d8:a1:89:93:c7:d4:cd:84:8d:b7:fe:d8:fa:a1:54:
38:fe:66:fe:89:8a:3d:33:5e:40:95:17:75:55:9c:
da:46:fb:a4:73:8f:36:8f:6d:3d:24:d4:3e:4d:d7:
1a:94:0d:c9:4a:bd:e3:6b:ec:36:c5:9e:0a:05:f8:
8b:91:02:92:3b:ed:1a:05:d4:4d:86:66:ec:08:41:
e9:b5:17:a2:3b:7f:93:31:b5:f9:3f:8d:be:2d:48:
23:78:57:9a:20:c6:e9:40:26:76:4f:c0:c0:82:27:
e0:b5:a0:38:5b:7f:57:75:c0:3f:2b:c8:9e:e8:f7:
6a:e4:15:f4:12:ea:9a:07:e4:d3:3d:94:54:fc:01:
d1:b0:71:07:bd:7e:33:d3:fc:fa:de:0b:87:42:1e:
86:22:18:fa:16:b6:da:ac:73:34:27:89:46:51:07:
a1:b7:2a:44:dd:80:38:a0:bb:8f:f2:b0:c0:db:7b:
31:73:70:5e:8b:e1:59:c0:1f:29:5d:20:74:46:95:
bb:dd:30:56:c6:4e:16:07:4d:56:c1:1d:a8:51:17:
13:e8:49:7c:47:02:db:7f:5f:15:62:ef:f7:91:0b:
61:23:a1:ae:c8:7d:ac:a4:10:d9:62:dc:6d:45:f1:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:79:E1:FA:6F:05:78:29:C8:F2:AB:24:74:11:8E:CB:00:F5:81
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JTt54fpvBXgpyPKrJHQRjssA9YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:92:b4:48:26:8b:2f:8f:6c:49:51:6b:02:73:ef:12:8c:33:
9b:32:24:7c:66:c1:5f:db:d2:b5:88:24:70:15:2f:d8:b2:0b:
91:30:f2:e0:79:47:24:f6:d8:30:92:5f:b9:c7:ed:8c:42:ca:
bc:78:33:7d:d0:1f:0c:93:49:02:44:7a:77:6c:16:72:40:28:
b1:03:bb:fd:5f:92:9c:62:18:6e:cf:89:70:27:c7:65:e7:cd:
1f:b1:65:2a:d6:c3:de:64:8b:5a:b9:ad:4b:95:2a:1b:d2:eb:
e2:2e:50:62:fd:77:16:94:58:0f:23:87:dc:2f:16:05:27:8c:
62:91:8a:e1:2b:26:45:45:71:9a:ef:fb:61:e7:2c:0f:75:11:
ea:47:db:b3:0a:77:11:a3:f3:5d:d3:11:9c:12:b3:72:92:c1:
93:a9:c7:ef:fa:b4:f7:14:a3:eb:5a:9f:87:34:94:9d:ab:11:
a2:58:cf:3f:fe:bf:b3:a2:31:1c:56:20:f1:a0:9f:02:b2:b4:
fc:c2:bf:82:85:16:06:1f:84:a2:c9:36:ab:c4:ad:55:76:5c:
32:0c:4d:8b:bb:4b:80:c8:bc:16:c3:08:c3:e1:26:fb:66:5b:
5f:84:54:e1:9a:f3:62:a1:b4:d0:91:fb:b2:7c:93:2e:a2:61:
26:b2:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:03 2025 by rpki-client