Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y4rhQk0MUk4QzXvrOk__I-3g_5U.roa
File: y4rhQk0MUk4QzXvrOk__I-3g_5U.roa (raw, json)
Hash identifier: X6rfv6/sveBwgXKU8IEEVd2LUlCFlP2EK8D/hrLZ0gQ=
Subject key identifier: CB:8A:E1:42:4D:0C:52:4E:10:CD:7B:EB:3A:4F:FF:23:ED:E0:FF:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8204D2746C8882C716193DCFA753243F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y4rhQk0MUk4QzXvrOk__I-3g_5U.roa
Signing time: Mon 30 Oct 2023 19:17:15 +0000
ROA not before: Mon 30 Oct 2023 19:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:82:04:d2:74:6c:88:82:c7:16:19:3d:cf:a7:53:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 19:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb8ae1424d0c524e10cd7beb3a4fff23ede0ff95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:08:b3:a5:f7:24:7e:46:ba:bf:6e:ab:81:
8e:3a:a2:8d:6b:75:40:86:68:c7:17:3f:df:b1:41:
68:cb:0d:e7:14:d5:7e:8b:0f:38:0a:42:b3:af:35:
20:1f:28:fa:10:73:9e:e4:a8:4e:f2:2b:0f:31:8f:
29:89:e2:46:bb:2d:fc:42:82:d6:23:3e:47:b3:e7:
5e:a6:5d:ff:ed:8d:3a:c1:49:d5:93:be:e8:3d:11:
1c:b3:3e:bb:7f:05:01:7c:2a:9e:8b:2c:cf:c6:7e:
5a:be:fc:e4:d7:a6:b4:95:c4:15:0d:e7:d4:3e:b9:
11:d5:af:50:6a:53:df:bb:a2:c2:00:2e:5c:a7:84:
00:e0:dd:07:7e:48:23:c0:12:ea:fa:a6:7a:29:1f:
90:56:f5:a2:36:72:31:ba:b5:ac:d3:6a:06:71:68:
a3:8c:89:fe:03:64:26:ea:fe:ed:d0:b8:36:89:87:
31:83:35:a6:8c:1d:57:3a:e3:66:f4:8c:27:91:1a:
46:f1:40:4d:40:21:94:6b:c0:d6:16:7b:2c:20:55:
b5:86:e2:a7:11:1c:aa:62:5d:5e:dc:46:bd:df:b7:
7f:78:03:7e:2c:2d:67:fd:e2:56:8a:fa:d2:03:88:
d2:0d:6a:ca:92:3c:2f:aa:59:17:43:b1:e7:ed:ce:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:E1:42:4D:0C:52:4E:10:CD:7B:EB:3A:4F:FF:23:ED:E0:FF:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y4rhQk0MUk4QzXvrOk__I-3g_5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:8d:71:4b:11:0a:fb:74:27:38:f8:ca:13:ff:6f:ca:1c:df:
ce:04:19:79:1c:11:83:f2:e8:69:a8:0a:d9:2c:49:38:ca:fa:
45:44:99:26:4d:e1:0a:90:82:0d:b7:d7:df:b8:89:6a:f4:65:
48:fe:33:16:d5:35:da:83:75:a0:a7:aa:ef:cd:dd:d3:ae:e3:
5a:56:cb:5f:94:4c:a5:4d:c6:8e:7a:8e:ce:d1:b2:71:cc:ef:
8d:e8:eb:c7:ea:3c:ff:45:b9:11:69:47:00:b6:6b:e5:1b:c8:
20:11:ad:e3:7c:bb:4b:79:e9:bd:ec:9f:d5:76:66:89:f2:21:
ad:3b:b4:96:f7:0d:d7:f4:31:ae:db:e1:d1:be:cb:39:85:cf:
1e:be:b2:ce:12:8b:b6:bc:e8:ba:a2:37:d6:b7:9e:4a:2e:55:
7f:bb:74:7d:15:42:63:cf:f6:34:f3:d7:cf:8a:16:5f:15:54:
b6:5f:74:4a:21:a9:98:b7:62:38:9f:68:fe:b2:6c:3e:f8:ed:
e5:16:5d:22:e2:6c:59:2a:c9:00:32:57:4e:b7:51:fc:62:2d:
eb:26:85:4e:b6:d5:2f:43:02:c3:92:ce:5f:ca:4b:91:45:38:
44:a6:31:1f:e3:8d:87:cd:87:07:3c:eb:35:3e:00:8d:ea:b0:
4f:8c:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:13:17 2025 by rpki-client