Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YnLMo9VRg0_m1BOx4LvlcTYZSEU.roa
File: YnLMo9VRg0_m1BOx4LvlcTYZSEU.roa (raw, json)
Hash identifier: eFxtj4csQyZqJD2Tr8MJy8z+tUORniNarKQxSTbuEk4=
Subject key identifier: 62:72:CC:A3:D5:51:83:4F:E6:D4:13:B1:E0:BB:E5:71:36:19:48:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B330CC0EA555B44F27E3DEFC7172C0EC1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YnLMo9VRg0_m1BOx4LvlcTYZSEU.roa
Signing time: Sun 15 Oct 2023 11:15:55 +0000
ROA not before: Sun 15 Oct 2023 11:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:0c:c0:ea:55:5b:44:f2:7e:3d:ef:c7:17:2c:0e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 11:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6272cca3d551834fe6d413b1e0bbe57136194845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:08:cc:ee:07:be:a8:02:a3:aa:cc:ce:11:
2d:ba:fc:1d:32:42:ae:a0:2c:f8:b3:22:9a:6b:dc:
b9:05:23:d8:e0:27:b3:0f:f0:13:81:6a:97:04:57:
8a:5f:fb:df:8e:28:c6:6e:aa:f9:5d:34:0f:29:cf:
62:b2:95:c3:9f:6e:72:5b:f0:c4:d9:fb:e7:b5:21:
d4:13:c3:28:52:e0:5a:04:bc:28:5c:bb:0e:a7:09:
58:90:65:97:56:e4:e3:5b:cd:15:8d:9d:c9:82:f1:
5a:48:00:08:40:b4:c1:c9:fa:ba:ae:d2:df:6a:b7:
aa:2f:d8:f1:fb:bf:3a:8c:51:53:8b:a0:68:96:a0:
06:76:8f:fb:f0:1d:a1:be:57:b9:fd:bd:b5:7f:98:
93:de:53:07:d3:17:27:9c:02:3a:64:62:24:4e:1a:
0c:4f:c4:84:e6:41:09:42:f9:d5:65:a0:c6:a9:42:
73:24:28:78:a1:26:bd:c5:a4:50:e8:2f:1c:a9:c2:
f6:e1:a5:b9:44:39:53:6b:ec:ea:d8:f8:45:33:af:
3f:94:6c:70:cc:c4:1a:e8:09:21:e6:0d:bf:5c:c9:
10:34:ab:5d:86:45:5b:38:e7:75:c1:3c:5f:f1:1b:
7f:2c:e6:ee:f5:73:3d:2a:44:0f:d6:33:20:56:d1:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:72:CC:A3:D5:51:83:4F:E6:D4:13:B1:E0:BB:E5:71:36:19:48:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YnLMo9VRg0_m1BOx4LvlcTYZSEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:49:40:47:bc:53:a7:b4:e3:c7:65:4f:98:84:ab:b6:8e:8e:
26:ca:bc:5a:55:fc:03:4b:22:95:3d:a7:03:29:2c:ed:67:04:
c6:08:72:a8:b8:3e:5e:bb:8b:14:c3:30:8f:7d:07:3a:db:b7:
73:8b:83:54:d6:26:91:85:a7:5b:c2:f2:24:26:64:f3:ea:2e:
5c:77:eb:76:0f:c7:8e:37:34:96:fc:4f:22:bb:c5:67:72:b9:
af:13:3e:96:a8:43:c7:f7:78:cc:db:6c:cc:88:b0:69:f3:97:
90:67:d8:0c:d7:f6:15:dc:60:4a:28:7b:07:6d:79:80:29:a9:
0e:cc:33:c9:d9:0b:6a:f1:98:f6:cd:1a:48:33:20:39:cf:fc:
6f:3f:db:e2:d4:75:1b:39:ae:27:4d:95:dd:c9:b3:36:98:aa:
5b:87:77:75:d8:ca:de:50:ed:8a:62:f6:53:c3:ef:2c:9d:74:
62:e3:8f:c4:d5:a9:84:f1:8a:e8:f0:9b:7a:bb:92:61:fe:36:
5c:b4:7d:69:1d:32:6e:db:ed:2c:a8:04:7e:4c:3c:a0:ca:d2:
76:b0:21:4d:13:b5:ce:f2:dd:d9:f9:4f:d2:6e:25:dc:27:0f:
ce:c1:16:a9:3d:b9:04:81:c8:0f:ae:86:07:0d:d4:71:a6:51:
b0:99:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:06:36 2025 by rpki-client