Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jpKNwYbqQU94aBskiUrQ1c23U6s.roa
File: jpKNwYbqQU94aBskiUrQ1c23U6s.roa (raw, json)
Hash identifier: KBv3xxcQ4qESOCaLhP6S+Nh32ie0ZkjMxXm4V/2grzA=
Subject key identifier: 8E:92:8D:C1:86:EA:41:4F:78:68:1B:24:89:4A:D0:D5:CD:B7:53:AB
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A87CD8E73CDC0F79F13192A28138F3EFB
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jpKNwYbqQU94aBskiUrQ1c23U6s.roa
Signing time: Tue 12 Sep 2023 05:11:50 +0000
ROA not before: Tue 12 Sep 2023 05:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:87:cd:8e:73:cd:c0:f7:9f:13:19:2a:28:13:8f:3e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 05:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e928dc186ea414f78681b24894ad0d5cdb753ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:fe:c3:c1:1f:36:e9:59:6a:40:95:01:80:
71:99:47:10:db:58:09:2a:36:f0:9b:8d:a7:6e:07:
97:45:c5:09:d1:29:ae:8a:58:39:b5:0d:e3:90:c3:
3e:29:bf:5b:55:c8:e8:3b:52:fb:7d:4e:b5:c0:ae:
ae:03:91:c8:0e:56:dd:a3:36:61:68:d1:0e:b1:41:
28:c6:20:f4:7a:39:5c:c8:fe:64:a2:aa:6b:61:93:
00:df:42:ea:63:66:32:30:98:85:bd:e3:af:4d:ff:
d1:75:5f:d2:fa:23:a3:bf:b6:86:ea:dc:61:0a:65:
ca:12:3f:69:80:53:b7:6f:8c:a5:ad:65:46:a5:83:
f7:69:8d:8a:e4:d2:1b:5f:1a:fe:a2:96:9a:e0:5d:
cc:5e:d9:52:31:e2:a5:07:0d:0b:16:6b:27:fe:7b:
b1:c5:51:27:6c:06:53:e8:32:09:84:b4:38:2a:16:
b1:65:9e:c3:fd:b7:f3:ec:4f:5e:0f:6a:97:c2:4f:
f1:28:61:ec:d6:7c:fb:f5:fa:dc:fb:13:d9:7d:f9:
17:59:ab:bc:72:b1:62:8b:3f:42:35:c5:0d:44:db:
c2:67:3d:41:9f:31:44:ce:3e:7a:12:e8:5f:d4:e6:
77:a3:3a:4b:b4:3b:b0:17:4c:e9:ac:6c:6a:41:67:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:8D:C1:86:EA:41:4F:78:68:1B:24:89:4A:D0:D5:CD:B7:53:AB
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jpKNwYbqQU94aBskiUrQ1c23U6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:d0:b1:3d:55:d6:94:d7:43:18:24:21:27:36:c0:c3:c6:4a:
bc:75:a6:ba:12:aa:97:89:c0:9e:5b:43:0f:48:af:eb:98:e8:
03:6f:d1:d9:24:45:60:09:0e:ca:fb:47:d3:0f:6f:ea:6e:84:
94:9b:c6:1e:0b:a4:45:a0:8f:f5:c4:bc:0e:f9:f2:4c:7c:d4:
c3:8e:8f:17:ef:1c:dc:fe:e6:df:87:8f:13:33:57:60:23:90:
b1:74:47:ee:5c:db:e6:a5:a2:25:42:b5:6d:3d:32:9f:84:e8:
0f:4d:ac:83:7a:61:e9:40:d7:e3:ce:41:1a:d6:c6:c0:19:3b:
97:f8:77:2b:3c:64:52:62:ec:5f:45:db:4a:61:e5:52:0d:f0:
21:58:ff:ed:a2:49:d5:c7:f0:b8:46:d5:6a:27:8e:20:8b:29:
bc:20:82:00:8a:27:2d:1f:ce:8c:8b:91:d2:4b:0d:a3:b5:b1:
ac:0f:83:7a:95:b9:f6:c5:32:a4:5f:0e:4f:34:a4:fd:d5:6c:
44:6c:a4:8a:5d:a1:00:57:a2:ca:6a:70:f6:f8:8b:8f:4e:14:
f9:52:07:d4:b1:3c:e6:06:9b:49:fa:6e:e8:39:4f:cb:73:98:
7d:10:63:27:ef:78:cb:00:af:09:2d:59:cf:17:95:04:c6:8f:
75:03:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:58 2025 by rpki-client