Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ka_j1_SuDkYiJ7tDQH1mj9z7Nqk.roa
File: ka_j1_SuDkYiJ7tDQH1mj9z7Nqk.roa (raw, json)
Hash identifier: aCm/eYy+rJPuYujHP7N/xKtjYMrv7Ufn0a7s1p8OORo=
Subject key identifier: 91:AF:E3:D7:F4:AE:0E:46:22:27:BB:43:40:7D:66:8F:DC:FB:36:A9
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8533F969FF4DA8B94CCF2C8960AD700C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ka_j1_SuDkYiJ7tDQH1mj9z7Nqk.roa
Signing time: Mon 11 Sep 2023 17:04:50 +0000
ROA not before: Mon 11 Sep 2023 17:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:8533:c51f/128 maxlen: 128
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:33:f9:69:ff:4d:a8:b9:4c:cf:2c:89:60:ad:70:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 17:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91afe3d7f4ae0e462227bb43407d668fdcfb36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:0b:0b:89:f2:c4:64:64:9e:e2:da:5f:85:
f6:da:92:9e:6a:b2:3e:c2:1b:7f:99:a3:e5:25:48:
27:dc:f3:01:c6:9d:a6:e2:c0:14:d1:52:37:5c:2c:
08:4d:a2:c9:c3:00:0c:ad:c1:37:93:3c:c6:99:da:
89:38:38:97:9b:70:ea:f5:a5:a6:dc:77:81:c4:b5:
8b:c6:f3:fb:19:f4:e2:a0:66:c9:45:bb:30:d6:8b:
43:df:72:98:42:c3:66:a2:f6:fd:b4:be:8a:ac:33:
d0:92:b2:79:07:ab:76:bd:00:51:ac:0e:a5:58:2f:
24:b2:4a:0f:df:76:d6:1d:40:9e:1f:ad:1d:69:9b:
cc:1e:b9:99:65:ba:85:d9:91:ec:62:97:7f:16:6e:
40:09:9b:c1:af:7b:ae:ff:a3:ca:5d:5b:6c:65:a7:
1f:b8:87:d8:fe:99:af:9d:ad:20:56:3f:91:cd:0c:
1d:45:34:fe:0e:bf:85:71:54:f8:0e:9b:6c:05:15:
3f:84:30:58:19:c3:d9:9b:42:72:e4:77:b7:18:46:
d8:90:11:fc:07:0f:06:e3:57:3c:6d:e3:bb:32:59:
b2:4f:2d:8f:1a:79:06:22:02:c1:f4:6f:87:17:81:
41:53:b0:c4:70:89:43:52:12:99:e9:b4:85:2c:39:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AF:E3:D7:F4:AE:0E:46:22:27:BB:43:40:7D:66:8F:DC:FB:36:A9
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ka_j1_SuDkYiJ7tDQH1mj9z7Nqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:e7:af:a8:56:a7:aa:f7:5c:a8:6b:c8:9c:3a:85:97:70:8f:
6e:e3:fc:b2:96:2c:b9:4d:bd:3a:c6:b8:41:3d:29:e3:2b:8d:
94:ea:6d:ed:92:ad:56:0a:1e:c5:83:20:c2:1c:bb:f0:bb:05:
f7:9c:9a:36:66:66:28:83:69:a0:06:f0:7f:7b:28:05:41:f2:
f7:f3:fa:79:46:53:68:d4:5e:c8:5a:aa:9f:dc:9b:a1:1a:b1:
41:73:d5:da:2a:48:2b:03:d4:30:4c:f4:77:05:c2:f4:9b:35:
d9:54:89:df:d2:ce:25:ea:22:7f:a8:10:86:48:db:68:06:4b:
91:66:cb:57:40:53:b8:b5:ef:dd:7d:79:57:38:96:74:fc:2f:
e2:39:83:41:65:56:bd:1c:2a:c2:7c:99:55:b5:a0:ca:35:68:
6f:a1:5a:c4:b4:3b:1d:ca:da:44:d8:4d:9f:95:ce:9e:99:20:
e8:d5:1e:e5:60:d1:6f:48:4b:7f:ba:cf:d9:fc:d1:ac:da:27:
a6:17:03:ce:9d:01:0f:49:a3:23:82:6b:4c:d7:53:99:3d:ad:
b9:63:57:bb:59:5d:24:1d:da:32:ee:5c:cf:85:8e:de:07:ce:
b7:3c:87:4e:84:d3:85:a2:63:16:23:9e:e6:fd:bb:40:32:1d:
2d:cd:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:20:20 2025 by rpki-client