Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/yM5L4lc2GYFj-yG42e7mRTgyxL4.roa
File: yM5L4lc2GYFj-yG42e7mRTgyxL4.roa (raw, json)
Hash identifier: NIPHfLRf6L30ECIARzcswbNUO9C0UVwZK2QUdqB6QaM=
Subject key identifier: C8:CE:4B:E2:57:36:19:81:63:FB:21:B8:D9:EE:E6:45:38:32:C4:BE
Certificate issuer: /CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Certificate serial: 018EF642F07643B808E6ADC2E25023C3B5EF
Authority key identifier: F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/yM5L4lc2GYFj-yG42e7mRTgyxL4.roa
Signing time: Fri 19 Apr 2024 12:09:25 +0000
ROA not before: Fri 19 Apr 2024 12:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:42:f0:76:43:b8:08:e6:ad:c2:e2:50:23:c3:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Validity
Not Before: Apr 19 12:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8ce4be25736198163fb21b8d9eee6453832c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:1a:a4:1e:28:e2:df:0a:2b:3f:c5:5d:5a:
2e:6a:4d:fb:98:f1:e3:29:53:b2:5d:aa:ba:e4:2b:
20:d8:3e:71:c5:60:3a:a4:55:0b:1a:db:12:0c:6a:
6d:96:80:ef:4a:7d:7e:4f:ba:f5:62:33:37:84:d3:
68:aa:66:3a:6f:9e:4b:41:0c:b0:e2:11:f8:65:20:
11:ea:8b:3b:06:b3:d7:df:98:78:af:d6:d5:0c:a4:
87:83:32:3a:3e:b1:5a:b9:32:19:0b:9b:68:89:07:
fa:77:49:62:49:36:ed:84:f9:45:cc:e6:ca:bd:b3:
ef:2c:d3:29:8b:5f:fc:cc:09:a9:a7:2f:f5:ee:ee:
33:47:1b:4d:4c:ba:da:78:15:4b:8e:6d:05:55:9f:
91:7d:ad:0a:45:cb:da:39:d8:d6:09:0c:14:4b:e5:
af:cb:c1:5c:5e:b7:45:14:e0:0e:f9:a3:a4:9d:0a:
eb:fc:df:61:3b:cb:55:42:42:32:e7:08:41:f8:73:
21:e0:0e:e5:c6:4f:26:78:ae:d2:fb:f9:90:3a:8d:
1e:01:7c:e5:8c:1c:5f:a3:7c:16:e3:8c:ff:73:4a:
3a:60:e8:8c:27:41:b2:9c:f7:63:8d:e3:95:a8:33:
9e:9e:25:39:3f:51:86:c6:69:30:6b:10:ba:78:9a:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CE:4B:E2:57:36:19:81:63:FB:21:B8:D9:EE:E6:45:38:32:C4:BE
X509v3 Authority Key Identifier:
keyid:F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/yM5L4lc2GYFj-yG42e7mRTgyxL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:b4:cf:b8:4f:eb:1d:a6:b7:09:9d:89:33:e6:39:d6:e4:0d:
cf:3c:9a:dc:e4:41:f5:69:e5:1b:d2:b7:fc:72:30:fe:80:41:
07:42:7b:fb:0d:14:78:9e:f1:fe:1e:70:e9:95:18:3c:0a:17:
c5:69:9d:04:53:0e:0c:6f:79:7b:0a:83:43:3d:ea:8b:22:cd:
da:c9:0e:51:6c:50:b5:b2:10:c9:ff:ee:52:49:70:3c:ce:8a:
47:2a:ba:27:34:5c:58:c9:af:28:ea:65:54:42:b2:99:68:bb:
0e:f8:4d:ad:a7:99:f9:78:53:27:5e:9f:af:36:da:6d:70:fd:
26:92:27:2d:ab:82:66:1f:3c:24:05:fb:31:2d:a2:6c:c3:a3:
6e:e2:8c:a2:14:ae:25:4f:4f:50:04:13:b9:95:21:0b:eb:2f:
e2:49:f5:ec:48:74:24:a4:45:fa:95:50:79:2f:e0:b3:ae:5b:
a4:4b:5f:50:2c:14:e1:8a:12:e5:59:01:ad:00:31:e5:4a:bd:
15:0c:f9:55:6f:1c:b9:9f:c4:83:5c:ed:d8:56:d1:ce:cd:74:
47:d4:26:9b:4f:10:6f:d6:f3:4d:ae:be:e6:f1:f3:0e:00:96:
71:a5:85:5e:59:78:e5:72:19:ce:7a:1c:7f:bd:75:1b:4f:b0:
13:df:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:11:36 2025 by rpki-client