Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YGepOkh1Slvsu6Ixqbo7ZvYEGDg.roa
File: YGepOkh1Slvsu6Ixqbo7ZvYEGDg.roa (raw, json)
Hash identifier: KsJokE9l1N5VoaLRoCXmzxRZ4zbPHa4o80GKo+jNS4A=
Subject key identifier: 60:67:A9:3A:48:75:4A:5B:EC:BB:A2:31:A9:BA:3B:66:F6:04:18:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD464CA7F56DF59A62B54ED57F35F4618
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YGepOkh1Slvsu6Ixqbo7ZvYEGDg.roa
Signing time: Wed 15 Nov 2023 19:10:57 +0000
ROA not before: Wed 15 Nov 2023 19:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:64:ca:7f:56:df:59:a6:2b:54:ed:57:f3:5f:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 19:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6067a93a48754a5becbba231a9ba3b66f6041838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:71:07:04:ce:58:6f:23:a3:1a:97:65:4b:
6b:3a:30:45:c9:2a:19:9f:ff:71:eb:df:36:f4:28:
d5:8a:13:02:72:42:cf:45:27:4c:9e:fa:a3:fc:aa:
74:be:20:6e:09:43:1b:82:d5:69:4f:63:1d:86:8b:
5f:a7:70:15:94:22:6a:48:80:47:9a:9f:5d:9e:24:
6e:89:2f:88:a7:ea:04:ed:15:69:ed:c1:02:1c:cf:
66:df:98:11:c5:b6:74:07:87:44:5c:a7:ed:79:4f:
59:00:7a:d8:b0:cf:54:44:81:36:39:9b:5c:62:50:
9b:b2:d9:15:c8:53:f0:a8:0d:a4:0c:1e:0d:93:63:
60:ea:46:23:93:8c:8f:83:3a:3a:61:0b:99:f3:06:
c1:46:d2:ce:6d:ba:20:73:76:7b:8e:4f:a7:1e:86:
4e:21:df:86:a2:54:e9:61:be:d5:06:3a:9f:77:09:
0d:a8:83:02:30:55:7f:69:9f:08:b3:c0:d9:7c:1d:
4f:2e:c8:39:38:f3:31:db:97:4b:36:3b:9c:cd:d5:
ca:07:94:40:a6:44:e2:00:ac:7d:4f:5e:72:0d:7e:
dd:70:fb:0e:f2:57:20:39:18:be:82:53:82:54:4e:
83:9d:8c:8f:6f:36:3d:6b:ad:6d:dc:b9:80:b6:c0:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:A9:3A:48:75:4A:5B:EC:BB:A2:31:A9:BA:3B:66:F6:04:18:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YGepOkh1Slvsu6Ixqbo7ZvYEGDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:b9:5b:59:8a:b3:9c:7a:18:53:4c:b7:b0:6c:66:55:fe:ed:
1f:13:d6:a0:a9:7c:3a:27:50:2c:86:2f:30:7f:47:cb:7c:0a:
9c:28:ba:0a:b2:66:79:47:94:f6:9b:9d:c9:21:1b:09:5d:c9:
71:6c:94:23:d0:3f:fc:cd:44:e9:8b:0d:ee:f8:98:9f:7d:7d:
19:25:ca:d1:cf:49:b5:86:c9:6c:f9:eb:a9:72:0a:e0:8e:12:
c4:77:e5:38:b2:1f:57:46:8f:c8:aa:ee:7e:5e:2a:f5:64:2f:
c1:e4:a7:cd:41:6e:12:b3:04:79:cf:29:16:4b:ac:82:de:de:
14:70:9b:0e:94:97:6b:20:0c:a8:23:70:0d:ac:c1:de:81:53:
e7:98:b5:92:6c:4e:bc:05:48:a6:b2:0f:70:fc:50:54:93:51:
a6:2f:75:a7:50:9b:2f:88:d9:36:bd:50:fd:06:95:56:0d:72:
21:ef:28:1c:ce:d1:9b:8b:70:02:dd:4d:dc:02:63:d7:61:f9:
2c:42:93:9e:0f:6e:9e:95:c0:a1:80:f6:6a:81:9b:26:34:46:
7d:60:15:db:8f:be:16:22:24:fc:e9:99:9f:52:4d:0e:94:72:
db:76:55:df:bc:13:39:b6:c5:6c:49:f9:4a:51:b9:88:e5:d4:
c7:0a:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:23:41 2025 by rpki-client