Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jppHln9lr-U1sLwL5C_Ka8xWShs.roa
File: jppHln9lr-U1sLwL5C_Ka8xWShs.roa (raw, json)
Hash identifier: 4ybr29oQvO2C6rKoOps3LtKWUxenrhTLM+Ej344oCoM=
Subject key identifier: 8E:9A:47:96:7F:65:AF:E5:35:B0:BC:0B:E4:2F:CA:6B:CC:56:4A:1B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA0468340F027304000D86ADEB9900BD5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jppHln9lr-U1sLwL5C_Ka8xWShs.roa
Signing time: Sat 16 Sep 2023 23:14:50 +0000
ROA not before: Sat 16 Sep 2023 23:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a0:46:83:40:f0:27:30:40:00:d8:6a:de:b9:90:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 23:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e9a47967f65afe535b0bc0be42fca6bcc564a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:f4:fb:f8:97:0e:8e:5d:d8:7a:ed:ac:9c:
12:31:53:0d:e5:08:53:ca:9d:64:6d:36:8d:f1:b2:
00:f0:c9:e5:c8:42:94:01:ed:d7:fe:1f:93:25:99:
d7:41:33:2b:68:20:99:b9:5e:a1:cf:6f:ba:9d:2f:
6f:4e:95:69:bf:c9:ea:75:ca:8a:73:79:ae:cc:6d:
38:8d:1a:0f:d2:9e:cf:6d:b4:29:bf:24:31:ef:df:
2b:d8:92:73:15:e4:23:c6:38:ab:4f:db:86:28:ba:
86:e9:af:32:24:75:6f:21:4f:bb:ef:55:4b:67:09:
c8:b9:ad:24:10:ab:cc:66:0f:42:2c:eb:ae:67:29:
29:82:9d:28:2e:db:f8:50:c7:7c:fc:9e:21:d7:ee:
89:09:2d:1a:fa:db:f6:23:27:1a:2d:2e:01:fa:7e:
b3:3a:cb:5b:fb:c7:31:08:f0:bc:5a:df:b2:0f:b1:
a6:6f:35:60:17:98:60:dd:83:23:b3:31:9d:60:c1:
0a:c6:5b:65:fa:91:7a:60:37:1c:df:c5:87:0f:0c:
66:02:2b:9b:b5:80:7c:b0:4a:1a:18:f7:3c:33:7b:
24:1e:4b:90:c4:20:da:0d:13:b0:c1:78:00:67:6e:
64:b8:50:99:c1:12:ee:06:37:12:a4:f4:33:06:8e:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9A:47:96:7F:65:AF:E5:35:B0:BC:0B:E4:2F:CA:6B:CC:56:4A:1B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jppHln9lr-U1sLwL5C_Ka8xWShs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:4f:88:9b:ce:b6:3e:88:0c:3b:08:97:63:9f:39:41:f1:fb:
42:8b:6f:e3:c8:92:fe:53:ef:18:c9:d5:12:12:98:87:e3:13:
da:42:db:77:f9:ba:21:f3:08:8d:59:81:64:78:ba:4c:6c:d7:
ea:0f:39:1e:ef:bb:fa:79:70:80:41:a1:8e:eb:31:82:6f:07:
83:11:7f:c1:62:af:15:3f:2f:81:c5:1d:6d:42:cd:06:de:f4:
ee:10:78:3a:ca:f8:a2:85:dd:cd:ff:32:1c:8c:05:75:ad:f3:
ae:d3:cc:e0:6f:8a:d2:b1:1b:c7:1b:2b:5b:39:b4:80:cf:77:
b5:2c:03:66:41:9d:f7:3e:71:37:54:ee:a5:a4:7e:6d:a6:b9:
3d:7e:22:f8:a7:1e:7c:17:5e:a2:98:ef:6b:2c:c9:ec:e8:47:
aa:cb:13:31:f8:7f:a1:9d:33:0a:0e:40:1b:c3:76:a5:3b:95:
bf:d7:99:08:98:bd:34:af:0b:06:d6:4f:75:0e:23:46:17:94:
e2:40:53:bb:91:5a:f2:49:5e:f6:90:d8:bc:9c:70:2e:05:f4:
98:d3:71:6b:65:33:7e:75:47:7a:ee:25:d2:5d:1c:28:88:db:
e8:26:55:e0:0a:1d:b0:df:ab:2c:d9:5c:6e:b7:dc:19:3f:e4:
fc:98:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:19 2025 by rpki-client