Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyfujBna8FGfGLfDISNP6g22QEk.roa
File: kyfujBna8FGfGLfDISNP6g22QEk.roa (raw, json)
Hash identifier: adsRoxSbOduGbv8mSlDOW5Jlmt8h5t4PXNvSJCMUSRM=
Subject key identifier: 93:27:EE:8C:19:DA:F0:51:9F:18:B7:C3:21:23:4F:EA:0D:B6:40:49
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B443A31AF64A8CF1192529F8D973EF92A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyfujBna8FGfGLfDISNP6g22QEk.roa
Signing time: Wed 18 Oct 2023 19:19:06 +0000
ROA not before: Wed 18 Oct 2023 19:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:3a:31:af:64:a8:cf:11:92:52:9f:8d:97:3e:f9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 19:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9327ee8c19daf0519f18b7c321234fea0db64049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:17:41:8b:33:49:f5:68:41:86:3f:e0:13:92:
b8:51:b9:6c:78:6f:4c:4e:f4:25:3f:06:13:da:90:
5c:42:c9:40:fb:d7:ff:f9:89:b6:d6:b6:09:cc:c8:
d5:a5:5d:3e:c3:a7:91:6d:8c:42:32:92:c4:e2:70:
0e:a2:97:c9:c5:ad:8c:46:00:71:74:54:67:e3:59:
f8:e0:ed:b9:65:7c:ac:5a:04:b4:73:d9:f5:b1:35:
f5:85:1f:89:a2:23:b6:f4:39:9d:ce:aa:3b:70:3d:
c8:19:db:c8:7d:37:ff:36:6b:ea:48:94:b9:be:90:
59:04:a2:ff:96:5a:81:42:a7:d7:b8:b0:82:9e:ff:
76:d1:77:7e:c3:5a:60:3d:d0:c7:92:b6:b6:f4:2f:
9e:31:bc:87:56:3e:cf:40:69:c3:ff:79:bc:ef:17:
c3:83:fa:31:f6:36:b1:8a:0b:80:da:89:23:0d:a5:
7c:4c:f9:55:b2:e7:9f:66:8e:5d:9b:8a:d8:7d:52:
c4:57:b3:30:fe:ce:94:72:5c:d8:42:93:10:9f:b5:
45:f3:13:f9:ed:bc:58:6f:fe:31:d2:97:c2:dc:ad:
b8:a8:b1:fb:6a:8d:5a:cc:c1:af:ed:15:40:5d:71:
43:19:54:a2:46:3f:f5:6f:7d:44:d2:ab:24:ca:55:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:EE:8C:19:DA:F0:51:9F:18:B7:C3:21:23:4F:EA:0D:B6:40:49
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyfujBna8FGfGLfDISNP6g22QEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ae:ee:ce:9e:83:df:a0:a2:bc:a4:d2:aa:ce:f7:cc:54:6a:
20:f2:e6:3a:91:31:69:3c:77:e3:95:4b:af:88:cb:51:f0:27:
e4:1f:c5:27:a4:77:3f:8b:eb:a4:37:2a:85:ff:0c:c7:af:b3:
5a:ad:59:72:f6:4f:60:00:77:c3:82:5b:d6:0c:74:4d:0a:c7:
1d:a6:fc:c8:ac:62:22:ac:fb:6e:9c:6a:0b:34:ad:c2:43:67:
19:8f:cc:7b:04:64:bc:6f:7e:33:b3:17:38:01:f1:b9:76:1e:
9f:f1:82:42:83:56:3e:f8:fd:3b:bd:b4:5d:b3:d5:17:b2:a9:
41:b9:5e:53:27:e5:50:08:3f:d4:cb:1f:e7:3a:47:86:89:3c:
77:05:91:08:8b:0f:d2:03:e5:21:ac:f4:f8:d1:c0:bd:a0:cc:
82:21:9e:47:45:fc:b1:58:3b:ae:0e:87:aa:c3:63:db:a7:5f:
6b:68:70:7c:4c:9b:4f:98:83:72:12:53:07:77:be:43:8e:dc:
a5:47:ed:1b:c8:3a:41:d8:10:df:35:72:62:25:2b:c7:b7:fc:
04:99:52:f7:4a:9d:67:5b:35:31:0f:e1:b6:c1:df:85:2c:a3:
9e:7a:ac:7d:27:01:ac:2a:d8:84:22:a8:64:8b:70:93:3a:61:
3b:f9:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:07 2025 by rpki-client