Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j4zq8QLx0sbWh4U38oU74cSmmI4.roa
File: j4zq8QLx0sbWh4U38oU74cSmmI4.roa (raw, json)
Hash identifier: ybV1Oe7KKHKnvI/r1wQ4kqjvY2rKQS1g8nvTB/MXqyI=
Subject key identifier: 8F:8C:EA:F1:02:F1:D2:C6:D6:87:85:37:F2:85:3B:E1:C4:A6:98:8E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A788B08F614806EA09E1EF63CE467A3F7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j4zq8QLx0sbWh4U38oU74cSmmI4.roa
Signing time: Sat 09 Sep 2023 06:04:52 +0000
ROA not before: Sat 09 Sep 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:788a:8ae7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:78:8b:08:f6:14:80:6e:a0:9e:1e:f6:3c:e4:67:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 9 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8ceaf102f1d2c6d6878537f2853be1c4a6988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:e6:4b:69:88:e9:52:04:d7:eb:dc:27:6e:
4c:4d:5c:66:93:98:ca:d9:d6:89:15:9c:b6:96:29:
ff:14:6d:df:19:f5:02:50:ef:b5:e9:a6:c1:7f:5c:
89:9e:b7:b0:fb:06:be:a3:0b:c6:c4:84:77:a7:65:
9d:67:cc:3d:a7:4c:25:00:20:0f:48:ab:e1:c9:9a:
1e:d0:45:99:78:3d:a0:39:e6:56:2f:23:2c:72:93:
58:0d:09:52:c6:65:da:d6:68:68:18:58:c2:46:da:
7e:b0:20:54:48:15:ff:73:36:ef:d9:11:4a:85:b2:
b4:eb:e2:40:78:b0:98:2f:d0:2f:e8:13:23:a4:e3:
1b:d1:f3:82:4b:d7:d8:ba:03:24:c6:2d:59:1b:88:
e3:1b:18:cf:f9:0c:cf:d5:8b:23:9b:54:27:86:9c:
04:15:4b:7c:de:fe:18:2d:f8:b3:fd:ac:03:20:d5:
a0:87:01:92:6e:dd:31:a8:6f:b3:2e:37:fc:e5:a0:
72:f2:cb:a8:39:93:7c:2f:8a:ee:f1:4c:a9:b6:73:
ea:f6:56:ba:1c:19:ea:e3:fe:86:91:e8:97:18:a5:
d5:f3:da:d1:23:44:64:1d:45:a1:44:ed:68:fd:39:
a5:e8:91:b0:c8:f7:df:d7:5e:4f:d4:56:5c:5e:69:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:EA:F1:02:F1:D2:C6:D6:87:85:37:F2:85:3B:E1:C4:A6:98:8E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j4zq8QLx0sbWh4U38oU74cSmmI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:9b:35:75:5b:0e:14:bf:c6:c9:db:8f:ad:f5:ad:dd:75:92:
96:ea:b3:4b:23:a0:93:34:89:e9:bb:b6:24:60:1e:90:2d:ed:
44:35:cb:6d:b1:f9:64:5a:a8:61:29:3d:33:c0:2b:74:5c:04:
6d:4c:e3:53:65:42:d4:f5:d4:e3:0e:3d:7f:4f:7a:c3:04:d5:
42:d0:58:4e:b5:fc:60:5d:d0:aa:53:49:7d:0d:2d:e7:f2:82:
30:f7:22:53:c5:c1:72:c0:88:6d:83:73:98:25:ac:a1:4a:4e:
3b:63:6f:86:1d:27:5e:63:76:b8:f5:ac:2f:e8:f9:3d:a2:72:
8f:0e:fa:09:82:37:4d:ee:b1:7e:6a:17:35:e2:d2:e6:48:fc:
d5:2f:ca:42:a4:82:82:54:01:37:36:dd:3f:c2:19:41:64:bf:
70:b5:d7:a0:a1:82:26:ce:f6:2c:83:64:70:ef:51:0c:d1:09:
0a:ae:b8:60:8c:e2:07:83:ac:8d:63:f2:1b:00:73:47:78:91:
92:1f:06:6d:93:2f:96:48:ec:b1:8e:96:87:f3:a8:dc:63:01:
80:3c:88:fd:67:fb:d0:b3:b5:fe:23:c0:de:b4:82:a5:6d:bb:
d9:bf:85:00:52:57:60:9a:71:73:4f:d8:26:6f:04:02:d6:75:
51:e8:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:30 2025 by rpki-client