Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y9TZ-qQwD6kqZDjDi9czV9oaPkc.roa
File: Y9TZ-qQwD6kqZDjDi9czV9oaPkc.roa (raw, json)
Hash identifier: JgIce4iYb7f42Iu5oWQHOjt1A4Wm40nU8WPuQHEBSlc=
Subject key identifier: 63:D4:D9:FA:A4:30:0F:A9:2A:64:38:C3:8B:D7:33:57:DA:1A:3E:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B709CF3046D7137B8C5A7C0B1D063D797
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y9TZ-qQwD6kqZDjDi9czV9oaPkc.roa
Signing time: Fri 27 Oct 2023 10:10:15 +0000
ROA not before: Fri 27 Oct 2023 10:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:9c:f3:04:6d:71:37:b8:c5:a7:c0:b1:d0:63:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 10:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63d4d9faa4300fa92a6438c38bd73357da1a3e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:64:97:ec:d7:2a:48:a3:ab:df:18:bf:a1:
03:ea:24:04:aa:52:67:e8:29:d6:2d:90:46:76:87:
85:cf:40:17:1e:0b:ce:83:1a:be:31:94:0c:29:23:
14:2c:cb:25:39:43:e0:d4:65:15:c9:ee:ac:b3:2e:
e9:14:55:8a:7b:f8:13:a5:c3:1a:6f:3e:89:d7:42:
00:d3:87:d7:de:e8:22:1f:50:26:f7:91:f4:1a:59:
47:3b:22:f1:34:56:d3:20:b9:04:d7:50:d9:d1:aa:
4d:6d:b8:cd:d4:81:a6:85:51:15:d3:e3:60:6b:d4:
8d:83:ff:fc:20:65:46:87:fd:3f:39:f6:52:cc:92:
e2:97:d6:e2:81:db:ac:cb:a9:28:51:fa:29:de:1e:
b6:d6:cd:ba:1c:82:a9:97:51:0b:6f:da:78:ad:db:
70:83:9b:62:05:55:aa:c3:4e:56:e6:33:9f:92:ac:
a6:e8:f8:1f:14:e1:ff:f2:ab:80:c7:da:de:c4:b6:
56:5a:6f:e2:6b:c7:ac:d2:b1:a6:67:ee:55:37:2d:
86:e2:6a:cf:c5:e8:73:c9:08:ca:7d:ab:c3:f3:54:
b0:62:70:63:60:a1:af:26:49:2d:b9:68:7d:9f:4c:
78:28:7f:43:99:82:25:fa:24:ba:61:ac:12:fa:8f:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:D9:FA:A4:30:0F:A9:2A:64:38:C3:8B:D7:33:57:DA:1A:3E:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y9TZ-qQwD6kqZDjDi9czV9oaPkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:d7:1d:23:d9:d0:cc:6e:ed:5b:3d:e0:3b:68:d1:8f:be:52:
f3:ef:ca:d0:3a:6f:39:c1:d3:49:09:8c:11:09:da:6d:80:e2:
f9:6e:29:38:eb:9a:56:ca:9f:77:de:8a:5f:ca:81:88:f4:1d:
e1:53:03:20:05:bd:ba:4b:de:82:ca:e0:13:5e:8b:d6:82:c4:
d2:e4:9f:e3:26:e4:b3:56:24:f3:6e:93:ad:a5:38:0b:c9:e9:
dd:64:b6:72:d9:99:5a:e7:d5:50:3a:24:39:78:8c:5c:96:36:
73:35:3e:a3:de:ed:05:0e:ac:bd:2d:e0:23:7c:a4:a1:e9:ac:
be:b9:cd:19:c8:ab:ae:b7:95:0e:01:21:46:9f:d9:e8:14:d3:
70:09:e1:17:a0:d3:bc:4d:91:ee:a9:fe:ee:58:3c:91:31:26:
52:4b:e9:87:e3:7e:20:6a:4c:eb:f8:f7:3a:94:0c:32:3f:11:
04:60:3f:1e:c1:2e:52:ce:db:e5:3b:ef:ac:92:85:20:6f:d7:
23:c5:61:8a:18:7b:62:b6:c7:72:69:9e:81:27:6c:d7:b9:84:
8a:bc:d3:a7:9b:46:c5:73:7e:91:e2:a5:47:63:33:d3:0a:a1:
eb:c0:b4:9a:68:ad:68:be:b3:27:9c:b2:cb:dc:c3:51:0a:cd:
0b:f6:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:19:26 2025 by rpki-client