Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KjTHSD1_0TFBqiDFLqGcIzH6ONk.roa
File: KjTHSD1_0TFBqiDFLqGcIzH6ONk.roa (raw, json)
Hash identifier: zVXzqMfQdwusaa4SaxPTRG0ArGm4IFixgVEbla4ZNzs=
Subject key identifier: 2A:34:C7:48:3D:7F:D1:31:41:AA:20:C5:2E:A1:9C:23:31:FA:38:D9
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7DBA8CC77752749F923A6968DDEB22EF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KjTHSD1_0TFBqiDFLqGcIzH6ONk.roa
Signing time: Sun 10 Sep 2023 06:14:52 +0000
ROA not before: Sun 10 Sep 2023 06:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:ba:8c:c7:77:52:74:9f:92:3a:69:68:dd:eb:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 06:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a34c7483d7fd13141aa20c52ea19c2331fa38d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:61:37:fa:12:b2:25:c5:e2:4a:09:d7:e9:
53:ed:cd:21:05:80:5e:a2:f9:5b:bf:a2:f6:99:a5:
19:88:26:c1:87:a2:6f:1a:b8:93:ab:5e:af:fc:26:
cd:ed:74:60:27:cd:fd:90:b7:00:23:74:16:e0:fd:
07:33:0d:de:3a:d1:48:b4:4e:a5:f7:a3:05:17:9d:
7f:7e:53:ed:60:e3:b3:21:b3:d7:2b:4f:bd:6f:dc:
40:b9:f1:e9:bf:a3:f1:71:7b:e1:28:f5:7a:7c:9f:
a8:98:6b:a1:b7:0b:ed:0f:84:0f:ba:a7:85:f1:3b:
8d:7c:83:c3:51:90:3c:d3:35:a9:31:95:dd:b2:f9:
54:27:9a:8c:87:a2:9c:50:3a:b4:c7:0f:43:fe:9a:
4d:45:82:45:19:bc:51:0b:df:b0:c2:fa:55:b1:0b:
2a:dc:cd:d2:03:b2:ea:b1:82:51:78:ac:f3:77:03:
db:70:0b:6c:4b:8b:7c:8a:61:06:9c:b1:f6:08:95:
28:91:38:5a:46:0e:90:54:45:ba:fa:b2:0f:79:06:
2f:86:2b:32:31:55:39:5b:5b:7c:a9:f2:9e:b8:8e:
e3:7a:bc:f8:72:39:a6:f0:39:6c:ed:76:23:ab:2f:
1a:67:23:c3:2a:b8:a9:4a:bb:cc:71:bd:83:ba:4f:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:C7:48:3D:7F:D1:31:41:AA:20:C5:2E:A1:9C:23:31:FA:38:D9
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KjTHSD1_0TFBqiDFLqGcIzH6ONk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c4:d9:3c:57:3f:0f:cf:a3:12:dd:0d:b1:c6:d5:40:ac:84:
af:0a:09:c8:3f:64:0d:15:5f:59:1d:ef:c7:86:2c:bf:be:25:
34:f7:d3:ef:1f:02:b0:8e:9b:4e:67:74:da:cc:a5:ba:61:d8:
68:f8:05:bd:49:a5:11:c5:a8:68:09:c6:90:4e:1f:88:c4:60:
bc:6f:e7:d2:cf:4b:53:7c:7f:73:41:7e:93:bb:0a:2b:f7:4e:
eb:52:05:61:41:94:fd:53:3b:f7:81:f8:7c:ae:fb:5b:a0:59:
d6:41:99:a4:a1:df:27:ab:d4:10:8b:d3:9f:d4:4e:88:8a:dd:
08:3d:09:3a:72:97:97:f8:d1:06:cc:0a:5c:28:fb:64:5b:81:
a9:c3:d4:13:1f:1f:74:01:80:46:1b:c3:c9:e2:43:e3:46:f9:
18:cb:e3:1a:4c:cd:a5:df:c2:2b:5e:33:34:45:89:06:bc:37:
16:46:8f:50:70:8c:38:d4:9e:0e:72:f5:1f:da:a5:b8:f1:ab:
08:f3:0a:0d:9e:a2:61:9a:50:71:07:3a:e5:db:b1:db:a3:96:
48:a3:56:dc:a9:ef:ac:d2:b7:a1:d4:48:98:77:b9:ba:ca:cb:
23:de:96:0c:d5:7a:54:d0:5d:48:8e:a2:aa:8b:cd:af:1d:44:
72:b5:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:22 2025 by rpki-client