Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZQOJ0L_ml8gssQi-qtZ0hmk76U.roa
File: YZQOJ0L_ml8gssQi-qtZ0hmk76U.roa (raw, json)
Hash identifier: fms1vZIBvPu4zyjRsyKwfdbX7Z0I+79eU31PT/3cM48=
Subject key identifier: 61:94:0E:27:42:FF:9A:5F:20:B2:C4:22:FA:AB:59:D2:19:A4:EF:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4F5A337AFCFAB2139B1388F27264220B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZQOJ0L_ml8gssQi-qtZ0hmk76U.roa
Signing time: Sat 09 Dec 2023 16:12:40 +0000
ROA not before: Sat 09 Dec 2023 16:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:5a:33:7a:fc:fa:b2:13:9b:13:88:f2:72:64:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 16:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61940e2742ff9a5f20b2c422faab59d219a4efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:a9:64:01:3b:ba:c7:81:ff:d0:74:39:24:
0d:ed:a0:b0:ea:87:05:cb:0b:01:00:86:cf:05:7f:
0a:06:18:77:14:2c:b9:81:37:60:ef:8f:8e:d4:78:
07:2a:a1:df:f9:18:97:a0:eb:77:00:63:7a:a3:4f:
28:77:b0:2f:b0:73:50:90:eb:2d:ad:74:66:69:b5:
9e:d5:76:13:49:83:20:45:7d:1b:1a:21:bf:69:96:
14:11:e1:30:52:d7:6f:76:86:9a:50:af:74:b7:05:
e8:40:12:86:e9:7c:9d:f0:e2:63:b4:bc:35:8d:53:
d9:ea:f4:a4:e7:7d:f8:0d:10:ad:06:4f:30:c5:5f:
cb:9e:4e:95:9d:bf:e5:3f:ad:0c:f6:6b:bf:cf:a7:
14:4a:94:1d:6c:46:a1:34:e5:49:ba:8c:75:e7:53:
ef:61:ae:3c:d6:ce:e0:30:37:ca:19:a1:91:29:f3:
0e:47:98:0c:77:5a:54:b8:ef:21:2d:0f:3c:e6:86:
f0:b0:eb:cf:e0:c5:62:a1:c2:96:ee:da:3a:a0:ad:
b1:4a:8b:5b:1d:ea:9e:30:8e:7c:fb:e6:18:e0:e2:
7e:a3:2d:5e:21:db:88:f1:8d:39:ea:0f:49:5d:e9:
ae:8c:61:56:b5:f8:6f:ad:3b:71:02:f8:9d:3c:3f:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:0E:27:42:FF:9A:5F:20:B2:C4:22:FA:AB:59:D2:19:A4:EF:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZQOJ0L_ml8gssQi-qtZ0hmk76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:8a:e3:19:fe:e6:0d:d3:24:8f:ed:73:b0:d8:2b:e6:65:67:
69:42:09:fa:10:82:ca:ea:41:26:5f:a2:59:08:2f:7c:9b:45:
c7:ea:5f:a4:65:69:43:e4:8a:53:6a:1c:12:56:5c:9c:0f:6e:
3f:e4:4b:ff:bb:3d:7d:a0:88:ef:64:3c:64:c7:e1:22:14:1f:
9c:9d:64:33:c3:36:bd:fc:31:b0:4f:64:e7:f3:19:f0:a9:fc:
44:84:c0:c0:87:f3:4d:ea:16:41:18:50:01:ac:7c:68:54:38:
76:1e:d7:8d:af:aa:a9:44:0c:bc:15:60:0c:39:fa:40:26:67:
31:7f:17:ec:f2:ef:08:ee:5d:a3:aa:0e:c3:41:a0:04:70:99:
52:95:37:e1:54:bd:6c:2b:68:c2:6e:cf:91:5a:ce:e3:42:63:
22:e6:69:c6:99:37:2c:08:fe:0d:78:94:02:d5:31:6b:e5:ad:
47:6b:cf:98:f5:67:3c:d5:ae:21:76:be:49:b7:2b:a4:4e:aa:
85:a9:99:55:49:74:69:8d:33:a3:a8:63:46:cf:a7:3e:57:23:
0d:ae:ab:7a:51:57:83:84:3a:82:e6:61:eb:8f:16:3f:7a:07:
ac:0a:dc:b3:1e:52:a1:29:27:7d:67:da:4e:21:7f:99:df:d3:
9e:8f:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:08:29 2025 by rpki-client