Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YOUzhrEhRtt6f8aVeHaUpRc1h_A.roa
File: YOUzhrEhRtt6f8aVeHaUpRc1h_A.roa (raw, json)
Hash identifier: g/2QGAEcF35twCN5kg069WlmcNv523uXxEgUqBZ1r8s=
Subject key identifier: 60:E5:33:86:B1:21:46:DB:7A:7F:C6:95:78:76:94:A5:17:35:87:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B89F0B7437D70E814BABDC79428DF2A39
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YOUzhrEhRtt6f8aVeHaUpRc1h_A.roa
Signing time: Wed 01 Nov 2023 08:12:16 +0000
ROA not before: Wed 01 Nov 2023 08:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:f0:b7:43:7d:70:e8:14:ba:bd:c7:94:28:df:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 08:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60e53386b12146db7a7fc695787694a5173587f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:90:e8:c0:41:68:80:bb:80:7c:66:e5:2e:
1c:9a:3c:77:de:09:87:5f:af:74:8c:85:cb:77:ba:
46:45:b2:7b:15:b0:97:fd:df:94:54:f1:2c:62:ea:
fe:b9:38:3a:de:e9:4c:9b:c1:63:51:36:9f:bf:7b:
3a:29:a9:7c:00:38:d6:e1:e9:73:6b:93:09:2b:d2:
80:b1:7d:8c:8b:6c:58:28:d4:28:4b:ca:4f:6b:88:
35:e8:7a:99:7d:22:21:ca:14:33:3a:b0:5a:4a:e0:
82:01:71:57:87:df:d7:f9:7f:7f:5a:c8:51:14:68:
42:a7:0e:b6:83:62:37:79:a4:8d:09:12:b7:12:b9:
eb:78:e2:7c:e0:53:7f:04:90:a0:9d:14:94:9c:86:
5a:2c:67:41:2b:a8:5f:66:ed:0d:18:94:72:08:63:
5e:1f:d8:b1:f1:f2:68:b6:ad:e5:54:c8:17:c4:72:
ed:3c:f9:6f:30:8f:36:c6:ea:9a:9e:18:77:e4:af:
d5:9b:cb:9c:70:b2:49:02:3a:16:3d:08:f1:f9:ba:
9a:69:10:0a:43:b4:6d:be:fc:44:a8:e2:21:6c:78:
27:54:6e:86:66:8b:f5:4b:5e:2b:0f:73:27:35:2b:
a1:31:85:62:89:81:bc:3e:e4:b6:32:46:a0:4a:1c:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E5:33:86:B1:21:46:DB:7A:7F:C6:95:78:76:94:A5:17:35:87:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YOUzhrEhRtt6f8aVeHaUpRc1h_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:82:9c:f2:54:22:c4:84:8b:82:41:1d:c7:4c:fa:2e:0c:d2:
bb:07:f8:dc:6d:53:2d:52:53:e0:b6:51:33:99:f5:cf:d1:8a:
cf:41:32:b0:7c:f9:d7:48:57:dc:74:da:21:29:b4:ef:ab:7c:
ff:10:4f:4b:c9:1c:7a:b5:80:bd:81:45:4a:ea:2c:98:92:6c:
a0:cc:cd:69:48:cf:1a:fd:2d:95:11:cf:36:13:c8:95:ac:8a:
80:aa:39:df:85:2f:05:8b:f4:13:46:8f:f9:54:68:aa:2e:87:
36:d7:cd:92:c3:99:de:29:e0:b6:dc:5d:dd:53:fa:56:d6:1a:
eb:5b:a6:8d:bd:4e:09:93:2c:62:ff:f6:89:85:da:a5:d2:6b:
c7:f5:ac:35:7d:c0:59:b5:e6:09:83:48:08:2d:12:b9:d1:04:
81:35:6d:37:53:15:70:9f:a6:00:af:d1:3c:b2:96:6f:1b:a3:
df:b6:2d:e1:8d:c6:4a:aa:f2:52:64:46:4b:a1:6d:54:2c:6f:
e4:58:c6:47:6d:63:5f:70:d1:1a:71:27:29:47:ba:98:95:0b:
87:d4:5a:33:84:98:7e:7f:1e:6f:df:92:ab:1c:2c:63:ae:c5:
e4:02:48:26:70:84:19:89:c9:eb:2b:ea:5a:8c:60:16:f3:8b:
48:9f:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:02:21 2025 by rpki-client