Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyXTCHB57cRwCy3DaBQLNsr0Gn0.roa
File: kyXTCHB57cRwCy3DaBQLNsr0Gn0.roa (raw, json)
Hash identifier: 68nxl59WcwlH4crDb74K05PAUxX+zE1ugRAcEf8bjwQ=
Subject key identifier: 93:25:D3:08:70:79:ED:C4:70:0B:2D:C3:68:14:0B:36:CA:F4:1A:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF2A40B871A00013769137D94BA36EC52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyXTCHB57cRwCy3DaBQLNsr0Gn0.roa
Signing time: Mon 02 Oct 2023 23:05:51 +0000
ROA not before: Mon 02 Oct 2023 23:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f2a3:415f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f2:a4:0b:87:1a:00:01:37:69:13:7d:94:ba:36:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 23:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9325d3087079edc4700b2dc368140b36caf41a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:ef:bf:30:04:8c:14:9a:7a:22:e8:3b:8f:
ad:39:82:3b:cb:2b:d3:1b:7c:11:89:a1:b5:dc:31:
25:28:40:34:9f:83:48:68:7b:21:1b:ff:b8:fd:c7:
19:32:3c:ba:08:bb:14:78:74:55:7b:d8:6c:40:20:
60:32:ab:d4:cf:93:3b:97:19:7d:2e:27:43:a6:92:
87:b7:74:72:90:c8:f4:bd:ed:a8:83:4b:1a:e5:ea:
66:22:9b:33:42:10:27:e9:a6:fd:64:3c:0e:36:40:
e0:f7:ea:86:fd:2f:97:30:3a:a9:8c:39:20:9a:c9:
29:1f:d2:bf:a6:f7:e4:24:bd:a5:97:ea:5b:a6:c2:
13:74:96:d9:a2:58:65:7e:1d:bf:a2:aa:60:8d:ab:
4b:06:b1:3a:c5:72:82:3a:0d:14:16:2c:26:02:61:
57:a4:97:1b:bc:99:f3:65:12:0a:16:6e:c2:83:0a:
02:ee:36:b9:2d:66:70:c8:be:82:09:9f:16:45:90:
f5:cf:1e:f2:a1:79:29:1b:9b:c5:60:cf:92:a2:85:
b6:8d:03:c2:5c:b0:41:ef:13:99:07:dd:7d:ad:9b:
14:d0:6a:68:db:fa:36:34:96:86:0d:5c:cf:91:8b:
ce:b1:f1:10:c1:d8:df:1a:9f:f2:5c:e1:37:ff:1f:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:D3:08:70:79:ED:C4:70:0B:2D:C3:68:14:0B:36:CA:F4:1A:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyXTCHB57cRwCy3DaBQLNsr0Gn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:f1:e9:c5:35:9a:a5:cb:13:84:8f:55:29:d1:0c:c6:c9:d3:
69:0a:3f:7a:77:49:ae:62:1f:e6:81:fb:e5:a3:42:24:c8:c1:
c8:13:4d:29:3c:2f:1d:35:cc:b9:ab:cc:85:bc:fe:30:f8:f2:
62:75:9f:ee:f5:1f:2b:fd:f6:67:71:1c:64:ca:ed:4a:af:89:
ca:ca:23:ac:21:11:10:64:3e:74:8e:85:1b:a7:b3:e2:2f:d1:
fa:ad:eb:6b:29:22:74:92:ae:fc:6f:24:6c:bd:10:fb:ee:5b:
dd:60:a3:ea:3d:1d:e6:d4:37:39:54:ca:2e:c3:91:ab:35:88:
f9:7b:58:4b:8c:9c:19:a2:b6:fe:fc:c8:20:7d:07:79:01:9c:
a9:1c:95:81:d2:18:ab:df:dd:c6:c8:a1:a9:1a:cf:95:28:1e:
77:6e:14:14:c6:09:f5:53:49:6d:db:8a:3e:21:2b:05:32:0f:
fc:af:1f:f6:6c:2d:eb:74:73:83:c4:61:42:35:81:6a:9e:57:
db:9d:af:ea:ae:86:43:45:f1:3c:98:da:8f:5d:8b:c1:a6:a8:
8e:34:19:38:cd:9a:17:0b:99:7a:9d:77:4c:34:9f:d7:e9:d3:
f1:3f:90:38:9d:7e:59:e5:2f:ca:b7:51:2b:02:30:a3:1c:d5:
23:3e:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:36 2025 by rpki-client