Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JtMYopDzqF_SQaoc_VWtN9ZAH9E.roa
File: JtMYopDzqF_SQaoc_VWtN9ZAH9E.roa (raw, json)
Hash identifier: p0yhU208WZNSsfalK2xcHatP3eaIMW77ggfAIYRm0tw=
Subject key identifier: 26:D3:18:A2:90:F3:A8:5F:D2:41:AA:1C:FD:55:AD:37:D6:40:1F:D1
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4F5B1809DC4795F6233AE62DFFFD03C7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JtMYopDzqF_SQaoc_VWtN9ZAH9E.roa
Signing time: Fri 01 Sep 2023 06:08:04 +0000
ROA not before: Fri 01 Sep 2023 06:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:4f5a:6439/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:5b:18:09:dc:47:95:f6:23:3a:e6:2d:ff:fd:03:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 06:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d318a290f3a85fd241aa1cfd55ad37d6401fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:66:4d:59:d2:db:7f:7b:40:cd:b6:17:ab:
df:bb:f6:a6:23:fd:b7:9e:67:41:19:8a:a2:df:51:
e0:4c:79:5c:84:73:89:8b:2e:de:b2:a0:1e:bc:7f:
98:4b:55:78:4b:4d:27:1a:e7:76:ff:71:2d:50:51:
66:da:dd:91:83:a5:6e:e3:46:65:a3:17:4a:e4:5a:
48:68:c7:15:72:1b:31:67:81:72:92:05:20:81:13:
10:0e:d1:2f:3b:52:6a:66:c6:ae:7d:be:e3:ea:5b:
92:7e:48:c1:b9:08:db:77:86:c4:0d:bc:a4:c7:49:
5d:69:db:cb:f0:a5:d8:c1:52:07:ea:97:07:6c:05:
0d:62:12:5f:7d:79:5a:37:56:f2:68:f6:8d:4f:e5:
65:aa:c0:9a:9d:35:76:5c:e9:2a:f0:5b:c9:ef:10:
eb:17:ef:e9:64:f3:48:2c:91:1b:61:bc:cb:70:e6:
40:06:ae:29:06:51:ed:33:13:c8:8e:03:76:46:b5:
68:95:32:f1:f9:f6:95:d4:21:2a:4a:25:6b:13:9e:
b9:67:59:9d:da:d5:d5:3b:ea:46:27:b9:fd:e2:4c:
09:b0:b0:0f:58:75:16:7c:3a:e9:33:17:3e:77:1d:
a7:82:52:bf:21:0c:7b:a3:44:0a:ab:b2:70:11:6b:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:18:A2:90:F3:A8:5F:D2:41:AA:1C:FD:55:AD:37:D6:40:1F:D1
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JtMYopDzqF_SQaoc_VWtN9ZAH9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:2e:ad:b1:32:0d:5c:d2:b0:a8:90:11:23:38:66:11:2a:3c:
1b:89:81:3c:81:94:47:19:45:1b:49:c6:55:6f:ae:65:97:6d:
4a:25:6a:28:8b:2a:13:02:e0:8b:47:a2:7f:51:0d:53:79:8b:
0a:d6:e0:11:95:65:c9:49:46:21:45:7f:0b:e4:30:88:59:6d:
75:c2:5e:13:29:59:ab:5b:3a:37:ac:ab:78:c6:f5:8e:4f:af:
83:ed:c7:41:2a:2e:82:19:c0:fd:b7:93:a5:eb:2b:ae:10:e3:
b2:1a:15:f4:c7:b7:be:9d:8c:3b:cb:94:c6:e9:2b:07:66:92:
35:e1:a3:74:a8:dc:79:f4:a0:b7:a5:76:df:ab:7e:05:49:df:
48:45:1e:99:c5:a2:fc:19:c5:49:ae:52:ac:33:b1:f1:ae:4d:
8d:9d:ac:fb:1e:d8:98:d3:56:38:37:59:f3:ef:4d:3d:ab:b7:
10:a5:76:a6:ba:06:f0:bf:2f:45:06:65:39:72:86:bf:ab:af:
90:06:83:34:ea:5c:19:08:5c:42:06:66:bf:a6:9a:97:49:5c:
19:6c:df:3b:b9:fd:7d:82:66:3e:a4:f6:f4:30:77:70:0c:97:
e0:95:49:94:1a:03:bb:fd:97:86:01:d0:f8:8d:91:ea:ca:8a:
3e:5e:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:26 2025 by rpki-client