Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hjplyNq6u6qYjcS-OSUeIPWpStc.roa
File: hjplyNq6u6qYjcS-OSUeIPWpStc.roa (raw, json)
Hash identifier: ff5n+NBR/+kfekSLJokZ/sGhKYJ6CNXHKUgMk3RWrOg=
Subject key identifier: 86:3A:65:C8:DA:BA:BB:AA:98:8D:C4:BE:39:25:1E:20:F5:A9:4A:D7
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A51F683AC11F3A4673EC652E113636EA4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hjplyNq6u6qYjcS-OSUeIPWpStc.roa
Signing time: Fri 01 Sep 2023 18:17:04 +0000
ROA not before: Fri 01 Sep 2023 18:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:f6:83:ac:11:f3:a4:67:3e:c6:52:e1:13:63:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 18:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=863a65c8dababbaa988dc4be39251e20f5a94ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:48:4f:7f:51:99:e1:35:2c:f0:5a:5f:53:
6c:a3:b4:03:ab:09:7c:a4:91:35:d2:e7:fa:eb:47:
75:50:3f:ef:0f:d5:87:95:19:ab:45:19:84:2d:1a:
a2:b4:ed:5f:94:af:c2:41:30:80:3f:92:39:b7:92:
a4:c1:b0:e0:74:21:ae:13:39:22:e1:38:f8:bc:b8:
16:c8:c9:1f:83:24:cc:50:d9:ef:bb:2d:03:d9:7f:
6e:bc:fd:0b:ca:02:f0:da:2b:b5:d6:85:c2:a3:91:
27:8c:2b:f9:3f:2e:50:57:71:da:9b:97:2f:67:55:
e5:a4:a3:73:37:e9:fd:af:3c:1d:c2:7f:38:82:ca:
aa:3b:ca:9f:ec:e5:e4:5d:bc:f9:24:80:b3:38:5f:
ff:bd:99:e2:76:03:11:fa:eb:a1:05:38:86:7d:7e:
d8:c7:6e:56:c5:c8:2a:94:c7:5f:b4:9e:19:3f:4d:
a7:88:40:50:c9:3b:c3:d3:4b:49:01:25:90:ea:45:
3b:78:61:da:8f:e0:eb:8c:ca:45:d0:1a:e6:4f:a1:
9c:4f:ed:57:0b:c2:ae:b1:80:e5:3c:e9:db:8a:cd:
cf:35:16:b5:32:47:30:62:17:c7:ce:8a:f5:f3:af:
22:78:1a:5d:0c:9b:b9:f1:06:96:ad:f7:34:76:e2:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:65:C8:DA:BA:BB:AA:98:8D:C4:BE:39:25:1E:20:F5:A9:4A:D7
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hjplyNq6u6qYjcS-OSUeIPWpStc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:5a:a4:82:0b:66:b2:89:76:c4:37:eb:02:d2:34:9f:55:af:
d5:1c:1c:71:93:51:e7:78:17:97:cb:bc:1f:b5:c4:41:20:a5:
7e:4c:ac:14:d7:6b:6d:a8:d7:f5:d4:44:2e:44:d4:6b:36:30:
a0:ee:9b:d8:d3:e2:a8:22:30:b2:4c:b3:bf:5e:34:81:40:9b:
a5:40:50:27:cb:0e:39:fe:98:72:72:83:c7:b3:ce:40:88:4a:
0a:c4:6f:4e:5c:9d:0c:0e:4b:77:62:00:c7:2f:d2:db:6e:a1:
00:ae:23:6e:59:ba:9f:c9:cc:49:20:00:f5:21:d2:0a:92:86:
26:14:74:cf:ef:72:eb:11:a6:37:d2:0b:fc:08:32:2e:fd:45:
c3:90:6a:e0:60:36:66:2a:b8:7a:98:94:f4:68:62:09:df:18:
d1:02:ff:42:aa:ba:17:3c:87:0c:64:9f:4c:c7:40:a4:4d:3e:
0b:34:95:53:27:3b:cc:6c:4d:45:85:5e:ee:66:bd:54:2f:fc:
ea:ef:ec:50:fc:17:62:ff:05:dd:63:b1:5e:87:41:89:d6:ef:
fd:70:c1:a8:61:78:76:e4:2d:dd:f6:cd:d5:a2:6e:f0:8a:62:
85:2c:5e:8b:d2:9b:79:01:87:c1:0d:1f:33:7f:c6:1d:b3:76:
24:7d:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:50 2025 by rpki-client