Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Jk0N6xhQ8MbNnvhJ7cDWSlvmdU8.roa
File: Jk0N6xhQ8MbNnvhJ7cDWSlvmdU8.roa (raw, json)
Hash identifier: VlkMmd3Bq4Cze4FBnSsHzJAf/QXx1NP2AAVSOhQkt3o=
Subject key identifier: 26:4D:0D:EB:18:50:F0:C6:CD:9E:F8:49:ED:C0:D6:4A:5B:E6:75:4F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A52671F15F4335014E7390D0ED98B2671
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Jk0N6xhQ8MbNnvhJ7cDWSlvmdU8.roa
Signing time: Fri 01 Sep 2023 20:20:04 +0000
ROA not before: Fri 01 Sep 2023 20:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:52:67:1f:15:f4:33:50:14:e7:39:0d:0e:d9:8b:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 20:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=264d0deb1850f0c6cd9ef849edc0d64a5be6754f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:21:50:8f:fa:a1:e8:0b:33:29:24:87:35:
32:f8:7e:52:66:8c:2b:82:6c:c4:23:6f:b3:e3:4d:
c6:b4:88:58:00:25:b7:4e:69:95:f9:4b:c1:c9:bd:
1e:47:8c:5e:6f:6d:bf:05:bf:5d:c1:73:ff:a4:35:
d5:22:09:4e:cf:93:43:a3:19:b5:54:f8:db:ad:a9:
68:7e:22:5f:7c:f8:1d:d7:28:10:01:9c:8c:eb:88:
ee:b2:18:aa:40:a6:85:9c:22:88:47:73:cc:32:da:
c4:4e:6f:e1:20:b0:4f:60:bf:b4:b9:10:ff:fe:ed:
55:7a:c7:b6:2e:e0:29:9b:ff:83:18:cb:a9:78:05:
63:92:4d:7b:7a:dc:e8:f6:53:1f:c4:8b:28:b7:ac:
d8:78:35:31:86:31:0d:86:00:bf:16:69:c3:17:6f:
c4:bb:5a:94:61:13:54:03:f0:b7:5c:ac:5d:af:79:
1d:db:d2:18:98:ed:77:86:e6:ad:c7:7d:3f:8b:f3:
55:8f:0c:40:7d:1b:6a:68:21:99:4e:1c:76:e2:51:
eb:13:df:a0:75:c8:73:56:80:3c:37:3f:36:ab:5f:
24:a2:c2:15:c8:b0:99:43:24:6c:c1:be:b3:fe:47:
ff:4a:bb:f5:f0:f8:e1:8a:25:94:81:09:9d:61:45:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:0D:EB:18:50:F0:C6:CD:9E:F8:49:ED:C0:D6:4A:5B:E6:75:4F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Jk0N6xhQ8MbNnvhJ7cDWSlvmdU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:57:b5:2e:d4:fe:09:1a:44:ad:16:95:e5:82:73:25:24:86:
02:68:75:8c:af:b9:0d:a2:f2:4d:92:9c:6d:5a:35:33:77:34:
a2:eb:44:0e:0d:bd:dc:8d:6e:b8:e3:01:b5:d3:99:e5:79:00:
8b:19:56:19:f2:d8:75:3e:18:50:3b:a9:94:98:4e:e7:d0:91:
bc:37:d0:9f:df:fc:c9:11:e1:a0:57:f1:a1:d4:0d:27:b3:0c:
a1:a2:56:a0:af:e3:f5:2e:8c:91:1c:60:f0:62:8b:2f:08:b1:
bc:f0:31:9a:85:61:59:ae:51:9c:58:31:8b:4c:31:ac:c3:6e:
3b:c8:93:5c:f1:9c:58:4c:28:19:43:ec:69:1e:e7:f3:f2:96:
0d:92:8f:70:72:da:21:64:05:fb:c2:0d:82:89:d8:bb:63:40:
1e:53:72:19:13:fc:6e:b1:3e:5a:6f:7f:61:22:aa:a0:40:db:
bc:33:5e:6e:bb:21:bb:c4:9d:6d:da:7c:43:86:9e:d5:41:6a:
22:56:cc:9d:d8:a5:ec:9f:00:a1:e4:b5:81:70:27:db:d1:06:
82:14:ea:c8:2a:4a:5c:9b:e3:44:6d:10:c0:25:f5:96:d0:b5:
a1:37:ec:77:30:a6:36:9b:99:4f:91:65:16:f7:e2:d9:49:df:
20:15:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:20 2025 by rpki-client