Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIMF60JOFND73ZyXKWCnub3n3l8.roa
File: YIMF60JOFND73ZyXKWCnub3n3l8.roa (raw, json)
Hash identifier: gxMi/8/u9SGPal+ujl8b7NvPhjKHUYvvjyJNM+n52y0=
Subject key identifier: 60:83:05:EB:42:4E:14:D0:FB:DD:9C:97:29:60:A7:B9:BD:E7:DE:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B025716A6204ECB6FC80FCF008E912418
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIMF60JOFND73ZyXKWCnub3n3l8.roa
Signing time: Fri 06 Oct 2023 00:15:43 +0000
ROA not before: Fri 06 Oct 2023 00:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:57:16:a6:20:4e:cb:6f:c8:0f:cf:00:8e:91:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 00:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=608305eb424e14d0fbdd9c972960a7b9bde7de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:87:c0:3f:fe:2e:1f:9c:9e:0c:2e:14:b3:
62:c4:a1:c0:2f:50:1b:b9:7c:51:72:e1:dc:83:24:
52:b3:88:c4:69:cc:c5:d8:f8:1e:f5:ef:9f:81:f0:
31:f2:84:8a:c4:47:39:a6:ae:48:fd:c7:59:2b:01:
59:be:71:03:d9:5e:9d:be:74:13:89:98:e5:0b:8c:
ed:d7:35:80:1e:78:ca:52:4d:b8:11:a9:5f:38:b2:
51:a8:e9:f9:ad:ea:3f:a4:47:ff:56:22:29:d5:c6:
72:b7:87:49:3f:37:69:18:38:f6:57:c8:57:37:7a:
62:4c:6f:c6:d4:29:ee:5f:f2:d4:5f:8a:3c:79:a3:
42:32:dd:8d:a8:c0:39:97:e1:97:97:af:df:ed:41:
6b:f9:37:b2:8c:8f:a3:17:21:e2:7e:75:29:60:bb:
82:2e:58:64:af:91:bb:1f:20:79:f2:0f:9b:f8:a6:
34:c4:0f:7e:5c:34:e7:6f:71:e7:63:a2:f8:c5:c2:
3a:c1:1d:9e:c2:61:b0:9d:4b:65:46:82:d8:71:1b:
73:4c:c2:c5:ce:04:6e:3d:6f:6f:d1:18:7b:da:17:
f4:22:26:77:0a:f5:f2:3c:73:dd:cc:f5:6d:ac:76:
13:6b:29:4b:58:07:ef:8a:f9:87:00:79:82:31:83:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:83:05:EB:42:4E:14:D0:FB:DD:9C:97:29:60:A7:B9:BD:E7:DE:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIMF60JOFND73ZyXKWCnub3n3l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:51:07:34:55:d6:db:bf:63:22:4c:52:1f:66:a4:56:d4:51:
ee:84:9c:5f:24:27:66:52:1f:9e:d7:f0:69:21:ef:3e:b7:0c:
e4:c4:17:c7:b7:15:9a:96:3c:d6:50:b0:e8:d2:96:19:da:db:
70:17:ef:4f:12:b5:76:cf:b3:9c:53:05:7c:46:df:f8:62:5d:
8b:cd:ed:76:c6:98:01:27:b2:bc:9d:26:37:29:12:6d:a1:ea:
24:5c:e5:f4:cb:af:6a:69:43:f1:4c:75:b5:d7:e7:6e:a6:2b:
ab:fc:ef:ef:6f:3d:0b:67:c4:ec:35:1f:92:52:f9:11:85:61:
04:8e:2b:10:3d:85:13:b1:1b:7c:26:48:37:e6:46:db:7e:4e:
5a:ff:7a:1b:38:35:90:f1:43:41:e2:3f:07:3e:cf:69:97:3b:
8a:03:2d:51:29:41:f2:f7:5b:6a:5d:f7:78:0a:01:b7:b9:66:
23:1a:82:03:3f:ad:6b:3a:59:5f:d8:b9:51:6b:98:d7:53:e4:
c8:ba:a2:a7:f8:18:8b:d6:80:62:8c:0d:57:8e:6f:df:b0:ea:
a0:d8:c5:a3:43:98:fa:dc:d1:5e:61:bf:16:8a:75:1c:f3:e0:
ad:b4:48:c4:d6:e9:99:31:d3:56:75:7e:a2:92:95:a3:0d:f3:
ae:5b:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:33 2025 by rpki-client