Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JW7UlkybvOQ4gZ5eMSnFG_JFjRM.roa
File: JW7UlkybvOQ4gZ5eMSnFG_JFjRM.roa (raw, json)
Hash identifier: KGHkWenWmig6+PH6gwKhbLWPBondXxdLG6Dnbv6ll0A=
Subject key identifier: 25:6E:D4:96:4C:9B:BC:E4:38:81:9E:5E:31:29:C5:1B:F2:45:8D:13
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8F52E9A431740E45C64B4B9CA2C0A85E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JW7UlkybvOQ4gZ5eMSnFG_JFjRM.roa
Signing time: Wed 13 Sep 2023 16:14:50 +0000
ROA not before: Wed 13 Sep 2023 16:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:52:e9:a4:31:74:0e:45:c6:4b:4b:9c:a2:c0:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 16:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256ed4964c9bbce438819e5e3129c51bf2458d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:b2:06:a4:64:2a:97:4a:51:7b:3f:83:b4:
c2:e5:ca:ca:fe:56:de:c0:85:bc:67:16:9c:bf:10:
2b:31:4d:8d:dc:07:c1:48:61:47:28:f1:3b:2b:ef:
9d:80:a4:7d:c8:38:c4:1a:0c:b3:4f:1d:72:7f:25:
67:ca:48:5c:9c:07:89:89:79:3d:a8:8f:5f:d4:7a:
72:13:3e:d9:3d:20:72:bd:79:96:7d:1f:c7:dc:40:
cc:18:bd:5e:40:84:3d:f7:9d:7a:1d:29:4b:35:9c:
0e:3e:69:34:41:cc:87:cc:96:66:f8:d8:cd:4c:1b:
59:3f:66:f6:6e:d8:0a:eb:22:46:fc:0e:bc:54:49:
8d:49:10:74:7e:7d:80:0e:9c:54:26:a1:d2:bc:f3:
b6:b9:37:c0:e4:1e:e2:b0:83:8a:36:a9:fc:b1:de:
23:b7:13:bc:15:9d:50:0f:52:87:5a:d6:83:e0:c4:
41:f8:12:03:87:ae:94:c5:82:e2:0a:23:68:00:e9:
c3:c2:e8:f2:75:75:54:24:1d:ef:52:8b:6a:b3:14:
f3:f3:96:17:60:b3:bb:60:5e:bd:8e:5f:90:d7:f8:
12:da:6d:ae:4e:0e:cd:5c:cc:0a:52:44:44:d2:16:
f0:5b:94:64:3e:da:4a:d2:16:43:b3:22:a9:cd:63:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:D4:96:4C:9B:BC:E4:38:81:9E:5E:31:29:C5:1B:F2:45:8D:13
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JW7UlkybvOQ4gZ5eMSnFG_JFjRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:39:38:01:3d:cb:97:e2:1e:28:05:02:fa:61:a3:c0:11:6b:
91:6d:f7:b2:4d:f0:f2:71:c0:d4:54:d1:f7:2c:69:0d:a1:6d:
25:49:35:33:94:5b:53:ab:45:f0:82:09:24:96:92:ac:08:db:
ae:4d:73:8d:52:01:a1:1d:59:c7:28:93:fb:18:7d:fe:59:71:
8e:0b:f0:c0:3b:b4:3b:ad:7a:ec:e2:76:b8:7a:2f:f1:67:9b:
a5:38:12:7b:18:07:34:ef:d2:d2:a5:6d:55:87:2d:1e:16:07:
29:b4:a7:20:2e:5d:70:5d:f9:2a:b2:59:30:73:c4:08:1d:d8:
10:3f:9d:9b:82:98:a0:2b:aa:25:d3:e5:1b:45:03:c8:fa:5b:
b3:fc:d0:52:9c:24:a5:2d:03:a1:c0:d1:4f:c6:7a:fc:9d:a6:
7a:51:db:cf:c1:ff:cc:dd:bb:2f:1e:2d:24:82:48:84:ea:98:
90:86:e7:15:67:69:72:74:93:6c:67:18:00:d2:0a:79:42:fc:
44:8c:a1:62:54:8f:74:0f:1a:96:90:45:94:a9:07:21:fa:6c:
4c:a0:8b:2e:eb:75:73:a4:f6:89:75:a0:a2:96:b1:00:00:d2:
93:fc:04:b0:29:a8:12:97:8c:6c:f9:0a:4c:36:37:a8:2e:49:
9d:a2:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:54 2025 by rpki-client