Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJ6YSRj6EjbFA0NCgEGOMhMFYpQ.roa
File: LJ6YSRj6EjbFA0NCgEGOMhMFYpQ.roa (raw, json)
Hash identifier: K1Ih+b+gQk8cVbQRaxX3SU6IVupu+zsKAcdh/tT685o=
Subject key identifier: 2C:9E:98:49:18:FA:12:36:C5:03:43:42:80:41:8E:32:13:05:62:94
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5077D29AB4C8C73CE7B4C49538039B27
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJ6YSRj6EjbFA0NCgEGOMhMFYpQ.roa
Signing time: Fri 01 Sep 2023 11:19:04 +0000
ROA not before: Fri 01 Sep 2023 11:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:77:d2:9a:b4:c8:c7:3c:e7:b4:c4:95:38:03:9b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 11:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c9e984918fa1236c503434280418e3213056294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:7b:48:bc:7b:c0:d1:43:ba:c6:5d:85:5e:
e1:d7:e9:41:4f:4f:80:ec:e3:bf:31:a2:c3:3d:27:
d9:bc:ab:1f:85:fe:b8:ac:fd:81:9b:43:b4:4d:09:
c8:63:ba:32:de:c8:25:1a:dd:5d:62:82:98:c8:be:
7e:24:55:b8:89:0f:19:ee:5b:61:b6:a2:d5:ac:85:
e5:ee:70:22:84:70:6d:54:9f:88:cd:8f:11:ae:5c:
ed:d1:fe:37:aa:7a:73:84:60:be:b4:57:5a:22:0f:
36:77:51:d5:a5:c9:23:a7:14:3d:c8:1d:35:a4:f1:
f7:a3:6c:e9:9f:c9:36:b4:8f:bd:5b:5e:f1:9f:57:
dc:8b:eb:40:88:22:21:1d:b7:cc:6f:b2:85:f5:04:
00:65:70:7b:1e:84:94:2a:2d:37:2a:6b:c9:69:dc:
3d:ce:24:b7:63:25:cc:21:a5:25:dc:24:13:51:7e:
36:0e:ae:23:2b:36:2c:bd:83:42:8c:fc:c7:4a:bd:
73:8a:59:21:13:ae:69:25:36:a2:ed:5c:a1:e9:1b:
2b:ee:f0:28:10:2f:2a:61:a5:cc:0a:43:7a:02:31:
51:6c:ba:12:91:fa:84:b7:67:ee:59:a6:69:35:85:
d6:33:8c:69:54:c5:5c:71:20:4f:57:9f:05:d1:ec:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:98:49:18:FA:12:36:C5:03:43:42:80:41:8E:32:13:05:62:94
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJ6YSRj6EjbFA0NCgEGOMhMFYpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:85:ad:3e:24:33:71:fe:e1:38:5e:09:9e:18:97:35:bd:d7:
60:4d:b8:1d:7b:9c:ac:2e:c1:e0:e3:59:67:f9:e7:53:02:06:
92:ad:3d:3d:d2:58:08:fa:be:aa:15:20:c9:cd:cd:b8:64:86:
c6:2a:f3:10:b4:2f:84:6a:2d:ff:c9:1a:54:ad:1d:c9:78:92:
68:c1:81:97:c5:6f:3e:63:06:3b:13:e2:03:5f:24:1e:b8:12:
7e:42:2a:ab:1a:23:e3:64:19:cb:b9:2c:c6:f5:18:ae:c2:2a:
b0:3a:df:58:e5:60:82:e5:3a:76:d3:b2:88:df:d7:76:ae:7f:
8e:92:2a:16:de:14:46:12:34:c9:e4:8d:88:21:90:41:12:ad:
48:2f:8c:30:9a:13:8e:f5:90:49:11:c1:a9:f0:54:5b:f4:6f:
75:b5:d9:e1:d5:1c:dc:41:78:cd:1f:cc:2c:14:06:fc:15:96:
59:3f:0a:5c:80:c5:d3:57:33:11:40:52:f6:40:dd:ef:4d:0a:
91:c0:78:ae:b4:19:95:8a:5f:92:ea:d0:da:2d:c8:af:2c:a7:
24:99:52:cf:4f:ea:9b:5b:3d:3e:07:c9:46:94:cb:13:82:c6:
27:c3:03:61:8f:01:0f:7b:13:5b:2f:55:a1:23:23:15:4d:ec:
e0:63:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:29 2025 by rpki-client