Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yHzsfk1gdK-SY9m1OmleH-zCqng.roa
File: yHzsfk1gdK-SY9m1OmleH-zCqng.roa (raw, json)
Hash identifier: 9kCtR9MxGQgH/B7Xv/fuUtEi1K6TfwU6u3p4eqtVSQQ=
Subject key identifier: C8:7C:EC:7E:4D:60:74:AF:92:63:D9:B5:3A:69:5E:1F:EC:C2:AA:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B397F9CEDE7559F4F6F2D256703C12D24
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yHzsfk1gdK-SY9m1OmleH-zCqng.roa
Signing time: Mon 16 Oct 2023 17:19:06 +0000
ROA not before: Mon 16 Oct 2023 17:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:7f:9c:ed:e7:55:9f:4f:6f:2d:25:67:03:c1:2d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 17:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87cec7e4d6074af9263d9b53a695e1fecc2aa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:f0:bf:d6:d9:a7:9e:ec:8a:a0:2f:b9:49:
6c:ae:e6:87:07:7e:bf:9d:8d:cc:33:d7:dd:14:1a:
49:6a:9d:58:61:4e:21:19:5b:56:5b:d7:23:61:64:
60:3b:3b:c0:7a:b4:46:fc:07:59:78:12:1b:3f:84:
7d:bd:72:72:49:02:ff:39:98:8e:1e:3d:99:92:34:
f3:9e:ab:27:f7:bd:f3:7e:ff:4a:88:f4:79:65:d8:
0b:16:e1:80:f2:74:ad:b4:50:77:b7:ce:a2:8e:f2:
96:df:4e:6a:7c:60:ae:5a:d4:80:14:21:64:50:1a:
f9:f5:fa:a4:f3:c6:8a:02:79:50:3d:83:3f:20:f0:
2a:2f:a8:10:37:62:e8:41:b8:7e:8c:1a:ce:36:1a:
6b:45:10:93:40:45:3e:71:e1:e0:c1:79:0e:82:fc:
72:5c:fa:20:ac:02:00:d9:f7:c4:97:e7:9e:0f:5f:
90:7f:80:dc:04:b6:75:7c:a3:11:2a:ba:35:04:b8:
d1:a0:6c:1f:d5:d5:4b:4f:86:9d:9c:d0:2d:02:d4:
30:6d:f6:42:d4:f4:67:c0:ae:95:ec:0c:a3:e7:09:
be:ab:13:7c:c5:e5:73:2c:c6:c8:a9:ce:97:29:da:
e4:37:85:dd:97:b7:97:59:82:dd:a9:e3:15:d6:ca:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7C:EC:7E:4D:60:74:AF:92:63:D9:B5:3A:69:5E:1F:EC:C2:AA:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yHzsfk1gdK-SY9m1OmleH-zCqng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:a8:45:3a:b8:d7:03:8b:ab:7c:37:53:a6:f5:bb:10:03:12:
fb:12:40:61:5e:18:bc:6b:50:38:17:74:8d:00:73:9c:ef:f3:
9c:88:ed:de:ab:3e:e6:06:3b:d4:d7:1c:89:10:20:c0:f5:a7:
08:cc:43:27:57:0e:7f:1d:d2:53:b1:b0:08:a4:61:74:4d:7f:
4e:4d:bb:1a:02:39:52:a6:3c:3d:c0:33:93:92:a7:e6:84:58:
6a:57:54:28:91:14:fd:79:b7:8f:28:04:ec:89:99:d8:0a:65:
8a:a6:64:99:09:5f:a6:1b:00:eb:3c:bb:73:c8:02:27:21:64:
fc:28:43:9e:de:d3:42:db:46:55:b9:7e:67:a3:e8:11:0f:29:
79:d1:2e:f6:1b:2f:f0:f5:b8:bd:23:f6:e5:e0:57:57:a8:d7:
1f:ac:81:a5:ef:18:0f:1e:86:bd:8b:8b:7e:74:61:c8:a2:f8:
47:e6:ef:28:d0:96:62:04:e4:6a:5e:d4:14:33:bb:c8:d0:41:
15:cf:71:af:85:18:13:3f:f1:11:67:62:e7:77:b6:0a:1c:a9:
82:92:05:32:51:78:1a:4b:b6:17:80:ab:a6:c3:83:94:6d:ef:
7d:f2:98:69:20:7a:e8:35:fc:96:77:04:e6:39:85:0e:cc:fb:
3f:ee:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:00:41 2025 by rpki-client