Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jN8mHQYzZikjbqX8nItkw_xmENY.roa
File: jN8mHQYzZikjbqX8nItkw_xmENY.roa (raw, json)
Hash identifier: kpuKptQmocv+yh3a5yaoCQ66tHHt6UARdewkl80D3u4=
Subject key identifier: 8C:DF:26:1D:06:33:66:29:23:6E:A5:FC:9C:8B:64:C3:FC:66:10:D6
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA26CBDDB2498762D94C45E5ED6106C6C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jN8mHQYzZikjbqX8nItkw_xmENY.roa
Signing time: Sun 17 Sep 2023 09:15:50 +0000
ROA not before: Sun 17 Sep 2023 09:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:6c:bd:db:24:98:76:2d:94:c4:5e:5e:d6:10:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 09:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cdf261d06336629236ea5fc9c8b64c3fc6610d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:89:99:d8:e1:4d:73:9e:c4:2c:c4:0e:c2:
3a:0d:55:c0:67:2e:2c:b4:32:62:f1:fc:91:02:09:
a7:d1:3d:80:e0:2d:8e:97:e0:4a:47:7b:9c:3a:05:
b3:36:d7:d0:8a:6d:fd:92:77:08:2a:02:71:70:64:
a7:ab:88:b9:37:09:bf:28:98:f7:06:05:c5:b9:b3:
f2:d0:b3:18:f8:b8:93:be:18:5d:6a:bd:a4:32:a1:
01:b2:82:0e:10:27:3f:2f:ea:db:fa:dc:38:59:a4:
43:5d:ec:ce:01:f0:d7:36:28:ae:c3:69:2f:d4:27:
c2:3c:cf:1d:1d:4d:b7:fd:31:d2:c9:36:91:6a:e4:
14:c2:6b:78:38:25:f2:e3:1f:c4:01:ef:ec:57:b8:
f0:b7:9a:d5:72:e2:98:66:fc:6a:eb:2a:54:75:37:
e6:fa:db:1e:82:07:40:fc:9f:6d:54:50:49:34:6a:
2f:d3:30:56:fd:ef:ac:a2:9d:37:2b:f8:66:f3:a6:
59:8e:21:57:96:df:a4:bf:49:79:7c:59:a9:a9:7f:
c8:c0:3d:bd:1a:a8:59:74:50:ab:79:6d:c9:75:61:
d3:36:e0:8f:de:b6:9a:54:a7:4c:ed:98:70:da:6d:
38:b2:29:45:cc:57:ea:b5:92:ad:1d:97:72:5d:3c:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:26:1D:06:33:66:29:23:6E:A5:FC:9C:8B:64:C3:FC:66:10:D6
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jN8mHQYzZikjbqX8nItkw_xmENY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:51:b2:9b:63:63:65:c5:8a:ae:62:dd:3e:38:98:85:6b:c6:
1d:8f:9f:e7:df:72:62:29:8a:53:c5:3b:ad:b0:99:9e:9c:7a:
56:d4:3e:64:3c:1b:4d:00:57:fd:80:f9:72:bb:4d:17:0c:a2:
2f:eb:5c:ae:e3:91:39:e2:ad:23:56:8a:19:11:4f:b3:71:d9:
77:f7:88:d1:cd:65:f7:ea:c4:42:7b:ce:a7:5d:5b:a7:19:85:
e9:40:ec:16:b7:3e:35:e1:a6:2a:7f:ca:15:c7:f9:69:1a:56:
3b:34:69:f6:4b:0d:5f:ba:5d:65:6b:87:d6:88:ef:12:75:d9:
53:1c:f2:b6:9a:34:aa:32:18:6d:f5:54:cc:bb:2b:e0:c3:d2:
33:9a:01:3a:09:01:82:13:23:ff:bf:67:59:eb:a8:84:6d:00:
c4:4c:da:b9:e3:52:11:37:c6:d0:b6:c5:98:7f:03:8e:e8:fc:
be:90:75:5f:ef:1c:b8:5d:59:6b:fe:0f:f1:88:e2:dd:49:64:
5f:de:4c:32:a6:52:53:bc:06:71:9d:bf:cc:6a:21:3b:2a:4d:
42:34:7a:19:d3:35:bf:31:b1:c7:27:90:c4:02:e2:0d:2b:7b:
33:e7:1d:e3:32:10:26:e5:5f:ae:2f:94:82:af:a7:6c:f5:98:
24:73:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:08 2025 by rpki-client