Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JiwlRD3VoCsRXfr7WCDOpUmKgHg.roa
File: JiwlRD3VoCsRXfr7WCDOpUmKgHg.roa (raw, json)
Hash identifier: O8/3ILEQUMw2dyS4euU/R0KOMMiPC54hJ7MRBbZTDjo=
Subject key identifier: 26:2C:25:44:3D:D5:A0:2B:11:5D:FA:FB:58:20:CE:A5:49:8A:80:78
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A90D36E7CE33F1E9B2B66FAF3CC17C361
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JiwlRD3VoCsRXfr7WCDOpUmKgHg.roa
Signing time: Wed 13 Sep 2023 23:14:50 +0000
ROA not before: Wed 13 Sep 2023 23:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:d3:6e:7c:e3:3f:1e:9b:2b:66:fa:f3:cc:17:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 23:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262c25443dd5a02b115dfafb5820cea5498a8078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:d0:38:6c:b9:fd:59:ba:29:0b:53:ab:78:
cf:c6:66:ca:33:09:02:eb:cb:e1:8f:19:83:d6:92:
cd:88:8f:21:0c:ee:ab:83:db:bb:a3:3d:46:a6:77:
56:20:7f:7b:b3:1c:1d:c7:bc:29:40:5e:ea:56:bc:
94:4b:a5:f4:c2:d1:d9:9a:53:49:13:4d:69:62:0f:
2e:b1:5e:71:9d:cb:33:f5:d6:da:05:b2:fd:c7:23:
a5:d7:b4:6d:57:8d:b8:db:29:eb:06:3d:a2:12:53:
a2:d7:d9:8d:06:a4:ae:97:37:58:59:4e:fa:d7:f2:
0c:35:7e:a0:7b:05:49:1d:9e:52:0f:a4:53:b3:16:
78:1e:07:2e:c9:94:ad:6c:40:73:a2:cd:0c:8d:c6:
ac:46:ed:8a:54:8e:1a:1a:3d:71:87:95:36:e3:0d:
15:bd:a7:f8:62:11:a6:c0:83:63:e2:a0:2c:13:42:
4d:89:70:41:ff:a1:fc:e5:ab:30:46:79:ac:36:fb:
5d:45:57:b9:5e:ee:d0:8f:f6:ed:44:f0:6d:9e:0e:
7c:54:c0:d3:86:b2:55:77:2a:8b:e8:28:c6:76:d5:
07:ae:16:58:19:ff:8d:22:ae:40:28:b3:32:66:7e:
fa:35:36:83:fa:7a:05:8b:26:5a:b2:6c:45:48:bf:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:25:44:3D:D5:A0:2B:11:5D:FA:FB:58:20:CE:A5:49:8A:80:78
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JiwlRD3VoCsRXfr7WCDOpUmKgHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:3f:df:38:5e:be:9c:f5:1a:af:e9:43:a9:7c:13:ba:c8:e2:
7c:9c:4d:73:ea:7d:89:31:f2:4b:0d:58:4c:b9:54:53:19:25:
93:99:33:c0:a9:3c:e8:08:d4:69:97:32:a9:e5:0b:d1:59:15:
05:06:c9:81:c1:a1:38:54:52:a2:58:40:e8:ed:7c:2f:33:88:
e2:54:5d:a1:52:2f:68:20:ba:0d:d4:c9:ae:a3:07:52:0d:dc:
4e:5c:8f:b1:31:a2:47:d4:47:55:54:78:b3:cd:b4:fa:52:14:
7b:17:69:f8:26:ba:54:a4:aa:b0:c8:bd:54:3b:1d:c3:9b:95:
72:27:37:9e:cd:ec:97:ce:cc:07:5f:94:a6:de:ca:3c:2e:19:
dd:2e:3a:2d:07:e1:cc:82:03:42:de:85:b3:7f:55:15:dd:3b:
3d:92:49:a0:7d:c2:39:9b:4e:f5:17:87:21:56:6d:5c:f5:0b:
37:08:ae:60:7e:a1:0c:7d:d6:9c:8d:77:11:04:f8:86:37:d0:
69:24:01:4a:f1:82:ec:13:83:d0:e2:a4:3b:ce:79:b2:de:5c:
1f:77:2a:43:6f:33:c4:8f:fd:f2:52:b5:77:ac:62:45:70:06:
bc:f7:d8:f3:e6:ed:2d:da:83:00:36:32:95:6c:7a:2f:13:4b:
55:14:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:40:14 2025 by rpki-client