Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RYpeYyy9obGVubZy1VL85AX7YH4.roa
File: RYpeYyy9obGVubZy1VL85AX7YH4.roa (raw, json)
Hash identifier: J382hejNLJMVzX/6m3YbtQrwB/3PrJd6MFIMk6DF38g=
Subject key identifier: 45:8A:5E:63:2C:BD:A1:B1:95:B9:B6:72:D5:52:FC:E4:05:FB:60:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7396B6F25CB3DB41125346A04A2C919A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RYpeYyy9obGVubZy1VL85AX7YH4.roa
Signing time: Sat 16 Dec 2023 17:05:06 +0000
ROA not before: Sat 16 Dec 2023 17:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:7396:89f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:96:b6:f2:5c:b3:db:41:12:53:46:a0:4a:2c:91:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 17:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=458a5e632cbda1b195b9b672d552fce405fb607e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:9b:f9:3d:68:d1:78:c6:bb:cd:ea:d6:2d:
98:43:0f:ed:1d:ae:10:3c:1b:f5:43:3f:99:60:ad:
3a:e3:3b:ea:5d:ba:76:8e:eb:bf:02:0b:5e:dd:3f:
2f:86:db:b4:bf:0e:53:d5:8c:5d:00:84:eb:55:c2:
76:05:20:47:43:7e:1f:94:a9:bf:65:99:39:10:68:
5a:b5:56:ea:ac:53:77:43:57:fa:08:03:4d:18:8b:
99:75:f0:2e:9e:3b:65:2f:0b:3f:16:d0:37:7c:44:
1d:d2:d4:0b:ca:4c:02:c7:4c:f7:48:24:d7:fa:17:
88:55:95:4f:d9:5b:87:88:26:c7:4a:1b:45:28:de:
6f:68:08:7e:01:c3:97:f4:ce:58:98:5d:8f:32:c4:
ea:35:17:17:6b:0b:34:c1:f0:37:93:2a:a6:9b:39:
7e:78:6a:15:b0:a4:f8:c0:95:62:07:9f:b1:83:ff:
bb:6c:5f:e3:46:df:54:fc:5d:80:1b:61:ac:91:c6:
ba:bf:66:cd:23:59:a8:ad:0f:55:65:72:3b:13:76:
0f:a4:61:e0:1b:66:8c:d6:90:3b:e3:f4:ea:67:01:
1e:f3:49:9b:2b:41:6b:4e:1b:db:de:72:e7:bc:96:
0a:ff:4d:19:9c:3e:6d:af:97:41:8d:66:fa:7c:f5:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8A:5E:63:2C:BD:A1:B1:95:B9:B6:72:D5:52:FC:E4:05:FB:60:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RYpeYyy9obGVubZy1VL85AX7YH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:98:67:10:1f:77:6b:bb:64:19:5c:43:3f:3a:13:61:75:35:
7a:ea:ca:d2:bf:3a:d8:12:e0:de:79:9d:e1:c5:57:19:9f:7a:
7b:2a:ea:40:b6:4b:e9:1a:a4:8c:76:1e:fb:6a:c6:37:ae:0d:
b9:7e:05:6a:2e:9d:d3:30:60:18:e2:92:92:b4:62:9a:31:2d:
c1:64:18:2e:2e:f5:75:ee:7e:c9:17:a7:60:6c:b7:fa:f9:d9:
40:73:ad:b2:a1:4f:f5:d8:4b:9f:c5:de:11:73:3e:41:38:d1:
dd:30:2d:c6:ee:91:6f:00:74:3a:d9:f2:7f:9e:7b:3b:fb:81:
54:58:ba:01:63:0e:14:5a:26:93:43:25:b1:4b:32:6d:53:5c:
d8:05:14:db:3d:c4:72:58:5c:2c:62:13:32:c5:4b:4e:e1:6d:
19:bf:8b:d8:4f:9d:11:83:de:4c:c4:f4:ea:d1:94:b3:4d:11:
4b:3b:35:3e:6b:49:7a:d6:9c:4d:07:e9:3d:7a:7b:90:f5:4c:
04:da:4b:7e:33:08:01:d9:e2:43:6a:73:50:d5:0e:72:9f:87:
ac:94:46:d1:e5:0b:1d:bd:64:35:85:af:d8:80:45:97:23:d2:
ec:bc:0f:10:56:9a:90:a0:f8:c6:64:66:7e:e8:a8:7a:f5:a6:
31:2d:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:58 2025 by rpki-client