Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jJwkyJ4p961JAh7jWc4_9JY4XU4.roa
File: jJwkyJ4p961JAh7jWc4_9JY4XU4.roa (raw, json)
Hash identifier: iCtC7KhMlazEjONWjC3X4XqOZzoR48MDl5GZqX0GLRs=
Subject key identifier: 8C:9C:24:C8:9E:29:F7:AD:49:02:1E:E3:59:CE:3F:F4:96:38:5D:4E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A582F35182BB2E9442FA633C63772DC8E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jJwkyJ4p961JAh7jWc4_9JY4XU4.roa
Signing time: Sat 02 Sep 2023 23:16:43 +0000
ROA not before: Sat 02 Sep 2023 23:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:58:2f:35:18:2b:b2:e9:44:2f:a6:33:c6:37:72:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 23:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c9c24c89e29f7ad49021ee359ce3ff496385d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:ad:1e:1c:2c:91:d4:0c:50:5a:8d:93:27:
ce:1f:12:3a:da:40:80:f7:7d:1b:34:72:51:bd:6e:
bf:64:4f:6c:02:6f:de:7f:b1:77:12:0c:0a:08:c4:
90:7c:a8:f9:29:aa:c7:9e:c5:23:ae:d1:84:63:99:
02:e0:92:75:0c:9a:ec:ab:4a:fe:26:66:f1:ac:b2:
1d:8b:15:56:59:91:a8:9a:98:3b:24:f7:2a:46:2e:
b4:35:8b:22:34:86:fa:d9:64:46:14:48:6d:04:46:
ec:48:0a:35:ed:85:2a:03:d1:d3:86:56:4f:30:3d:
72:75:ef:ea:cc:e3:17:71:d9:2d:46:74:2f:c1:48:
76:2e:7a:a3:b1:45:3b:29:e1:58:d5:d3:66:47:f8:
d0:c5:cd:27:2a:87:62:53:79:1b:5f:59:1d:e6:d6:
b0:ce:06:38:6e:35:07:6a:94:79:18:01:41:ef:77:
83:8f:52:eb:26:b3:6c:a8:0f:b3:0a:c0:d9:6f:6b:
8d:23:0f:35:aa:44:a7:cf:44:95:b2:2b:f4:1f:67:
e2:5e:90:0b:ca:13:d3:b6:d3:c8:18:72:61:04:50:
6f:b2:7b:33:40:bd:c5:01:6a:39:dd:3c:ad:27:73:
5e:15:67:d4:3f:e0:5e:5d:12:3f:23:3d:56:d7:55:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:24:C8:9E:29:F7:AD:49:02:1E:E3:59:CE:3F:F4:96:38:5D:4E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jJwkyJ4p961JAh7jWc4_9JY4XU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:c1:c3:b5:48:6b:7f:e6:05:8c:ce:cc:5a:44:8d:64:01:ee:
eb:ee:20:67:22:ac:7e:ae:4e:0b:a1:c5:9f:a6:03:92:29:7d:
d2:c9:2e:97:85:27:a6:db:b0:c2:9d:f0:56:69:28:23:0e:16:
98:a6:00:e8:3c:e1:0a:c1:be:a2:b1:4f:a9:29:db:15:93:cc:
e1:82:33:7f:fb:d0:ad:01:7a:d0:ac:4a:29:d1:4d:1a:9d:ac:
e6:97:96:59:e2:23:4a:ab:99:8c:c8:6e:29:2a:81:d7:32:76:
7f:4c:a7:40:a7:90:98:97:51:8c:e9:52:46:48:43:50:58:e8:
a9:93:91:c3:94:59:9e:2d:cd:7a:b8:c6:b0:b0:4b:e2:78:a7:
83:0e:4c:41:99:6d:e6:72:c1:12:55:19:20:56:71:68:e7:82:
0b:f8:80:df:27:5d:d3:72:d8:8e:b1:cd:1d:3b:2b:bd:02:f9:
5d:17:d9:65:eb:d7:d5:b3:9d:ff:99:dc:5a:66:da:a9:2d:8a:
2f:ec:29:fa:82:6d:a8:fe:6f:0b:f1:46:f9:cd:0f:7b:b7:df:
03:83:8b:65:e2:9d:f0:44:d5:b9:26:21:39:0d:96:16:82:a5:
5e:1b:84:ad:84:6e:3f:8c:e5:b5:bf:7c:f6:50:ea:54:b8:ed:
9b:29:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:59 2025 by rpki-client