Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YRTC0Pxq6i8yjD7ICPRH1CvTLXg.roa
File: YRTC0Pxq6i8yjD7ICPRH1CvTLXg.roa (raw, json)
Hash identifier: x67GNlirqi7jNw8NvaXPhPaaiOD3t6e0UV29FujDl5M=
Subject key identifier: 61:14:C2:D0:FC:6A:EA:2F:32:8C:3E:C8:08:F4:47:D4:2B:D3:2D:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC6A3AE4D9473D2E6D2718C646E31B6EB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YRTC0Pxq6i8yjD7ICPRH1CvTLXg.roa
Signing time: Mon 13 Nov 2023 03:04:57 +0000
ROA not before: Mon 13 Nov 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c6a3:4a35/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c6:a3:ae:4d:94:73:d2:e6:d2:71:8c:64:6e:31:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6114c2d0fc6aea2f328c3ec808f447d42bd32d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:e1:8b:7c:a5:84:3d:14:4c:a6:d3:2e:b8:
ca:36:38:5c:de:c6:41:63:3f:a2:81:e9:dd:61:2a:
52:9c:c7:8a:ac:62:b6:e5:0a:28:e3:08:b9:51:b3:
ee:69:0b:1c:12:d7:1f:e2:6b:d0:a2:a6:40:64:1e:
3f:bd:30:b2:e5:37:91:10:15:18:8f:0a:88:64:30:
83:09:9f:b9:4b:93:94:a1:c0:b7:f7:54:ff:bd:34:
a7:91:64:9b:a8:78:c3:66:1e:c1:52:0a:f5:8a:c5:
9b:41:5c:14:68:17:2f:86:bb:0f:31:c3:06:8d:1a:
a2:4f:9a:2b:b3:de:d5:a6:6d:24:55:be:da:27:75:
bb:50:cb:a7:94:3c:5d:11:82:22:f6:96:56:47:c7:
58:67:19:e1:b8:27:85:ff:b5:da:73:e8:b2:d2:b0:
cf:94:48:02:6e:6c:1c:7b:28:b5:ea:ce:61:2f:3c:
ca:60:c4:1b:6a:3c:40:1d:bb:b2:99:e3:4a:e1:74:
6e:52:98:f3:6c:7a:3d:77:98:ba:e3:c0:84:25:cb:
bb:fa:a2:21:d1:ad:0d:ee:95:21:57:7d:e7:04:1a:
e1:bb:d3:05:e7:e8:0d:da:d9:d4:91:8e:00:74:33:
51:84:9d:30:dd:55:41:8a:1a:6b:8d:6f:be:da:22:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:C2:D0:FC:6A:EA:2F:32:8C:3E:C8:08:F4:47:D4:2B:D3:2D:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YRTC0Pxq6i8yjD7ICPRH1CvTLXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:0a:f9:97:ca:c3:12:08:3f:bb:54:d8:8b:35:08:02:9c:2a:
9a:87:da:5e:ae:11:99:7f:ae:1d:04:27:62:f9:60:c2:4a:f5:
66:09:21:0d:ee:94:79:12:d3:c7:23:5a:00:69:12:93:9c:3b:
b0:0a:83:35:39:70:74:7e:b5:77:66:a3:5c:40:d3:79:7b:20:
ef:0d:b4:4d:f8:ae:b3:2d:c7:eb:70:9a:f0:28:c9:b5:5c:d6:
ee:d8:fa:57:f6:1b:ef:3e:8d:54:5b:47:96:07:67:48:17:be:
57:e2:41:58:43:6c:46:1a:3f:ad:13:51:1b:d1:c8:35:98:ea:
99:32:f5:d3:8c:6e:de:df:0a:3b:aa:77:23:13:2a:27:b1:83:
bc:e2:47:da:7b:ea:d4:b8:2f:3b:a0:ac:ad:d0:95:c8:b6:07:
2f:64:de:16:6f:be:25:92:0f:c9:1c:b1:dc:46:e4:5e:4c:7b:
51:33:b1:07:a6:53:87:34:c0:44:a3:6c:d3:79:b9:dd:26:4f:
89:00:fd:09:cd:c1:e6:f3:98:a1:18:16:26:5d:3b:2e:0f:aa:
94:ff:d9:45:79:b7:b8:9e:43:66:e6:0d:72:0b:b7:2c:71:bb:
29:d5:ec:c7:b6:5b:b5:a8:34:4c:06:12:7e:e5:f3:3b:95:1b:
36:2b:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:18:45 2025 by rpki-client