Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JqyDax-fp4J4mh8M92M9NU7TU7w.roa
File: JqyDax-fp4J4mh8M92M9NU7TU7w.roa (raw, json)
Hash identifier: eGrz11/1kxXZaZELqSxIz+6WWcRzBJz9u6wZAvl1fqI=
Subject key identifier: 26:AC:83:6B:1F:9F:A7:82:78:9A:1F:0C:F7:63:3D:35:4E:D3:53:BC
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6BAB2A7625B8BF3B187658BB32EBBF39
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JqyDax-fp4J4mh8M92M9NU7TU7w.roa
Signing time: Wed 06 Sep 2023 18:04:54 +0000
ROA not before: Wed 06 Sep 2023 18:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:6baa:d54c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:ab:2a:76:25:b8:bf:3b:18:76:58:bb:32:eb:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 18:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ac836b1f9fa782789a1f0cf7633d354ed353bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:b4:52:06:a2:8e:a4:b8:55:e7:3d:d8:ab:
8f:a6:ce:f2:1b:1d:b3:69:97:00:56:cb:80:26:0f:
f2:89:25:4b:9c:91:73:21:b3:5a:16:9c:07:a6:6e:
a3:f8:78:cd:5f:5e:74:64:60:4d:6b:68:e1:f3:e8:
e6:c2:a6:73:25:50:29:1b:8f:b0:6b:ee:90:39:84:
7a:5a:37:92:ea:6f:bb:3c:66:37:eb:aa:2f:51:87:
2c:36:34:46:34:1b:02:c7:a9:b9:9a:02:34:b6:2b:
f5:81:47:b3:96:3d:2e:c5:77:59:b0:8b:b2:98:cf:
c0:a1:40:be:4e:7d:c2:30:7c:e8:cd:3f:00:24:1c:
a6:12:8d:be:f1:6a:9c:fc:65:b2:61:15:0f:d1:4e:
24:84:82:fd:04:c6:e3:86:1d:49:ab:0c:58:cb:c8:
41:a7:40:b1:55:c9:a1:a0:59:5e:b0:72:73:97:65:
31:66:7f:0d:2c:40:79:a0:1f:1b:1d:60:ac:21:6f:
a3:70:b7:64:05:a2:97:3c:0d:2f:85:4e:2b:9f:25:
87:6d:8b:77:49:6d:f6:9a:07:79:a3:ae:d2:b9:42:
7b:19:3a:75:be:ff:c6:e1:ce:a0:ac:bc:67:b1:5f:
6a:02:03:80:d1:5b:b2:1a:44:f6:9e:c1:3c:a2:2b:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AC:83:6B:1F:9F:A7:82:78:9A:1F:0C:F7:63:3D:35:4E:D3:53:BC
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JqyDax-fp4J4mh8M92M9NU7TU7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:15:5f:f4:dd:6e:c7:50:f7:8c:c0:87:3c:96:0f:2a:03:05:
35:7b:e6:a9:ee:01:7d:02:b8:e6:1b:6a:31:df:20:d3:22:6a:
22:42:ef:b5:2f:4e:09:b1:f5:c4:ab:64:ab:24:41:e8:95:06:
e9:87:53:4f:7a:fe:40:c9:c9:cf:61:36:d9:65:42:ab:ee:3b:
36:56:54:29:62:64:e6:ab:97:70:db:09:7b:b0:f5:4d:27:98:
f8:cf:36:a6:0f:b1:3b:d9:09:4c:d0:15:1c:1d:75:87:6e:fe:
48:d9:82:eb:48:ac:fc:94:67:9d:2d:af:8c:05:de:c7:8e:cc:
25:2d:85:d8:04:1d:64:58:36:c1:1a:2d:5f:34:a6:8b:b5:ae:
5a:cf:03:d4:e4:eb:ec:4d:4d:ed:5e:79:b2:f8:d5:b8:e8:97:
f7:e2:a1:cc:06:b5:da:0d:af:1f:8c:14:c5:57:21:95:88:39:
58:77:d8:fc:f7:76:23:d5:40:f1:bd:c0:41:08:bc:2b:05:70:
44:8d:c8:a6:e5:64:11:a4:55:81:b2:0c:c0:75:76:cc:b6:6d:
84:87:9d:48:f3:6f:94:64:46:8a:b4:90:2b:7f:c9:7d:ac:07:
07:c7:6d:c4:c9:cf:04:3a:66:21:ae:e3:35:7b:6e:c2:bf:b0:
66:5a:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:58 2025 by rpki-client