Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yX1mpvCphZ6gZPUaRhExeCtlZ-Q.roa
File: yX1mpvCphZ6gZPUaRhExeCtlZ-Q.roa (raw, json)
Hash identifier: sb6JXSJ/0Kb4p0gOJ4dhC4FazTklhp5lftvs74w/PG4=
Subject key identifier: C9:7D:66:A6:F0:A9:85:9E:A0:64:F5:1A:46:11:31:78:2B:65:67:E4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B44A63AB9651268D8931A46193876A063
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yX1mpvCphZ6gZPUaRhExeCtlZ-Q.roa
Signing time: Wed 18 Oct 2023 21:17:06 +0000
ROA not before: Wed 18 Oct 2023 21:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:a6:3a:b9:65:12:68:d8:93:1a:46:19:38:76:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 21:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c97d66a6f0a9859ea064f51a461131782b6567e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:33:55:9d:17:a6:8b:04:bb:c9:87:a0:11:
04:fb:0c:14:6e:b3:81:4b:fa:eb:08:6d:23:76:73:
2c:2c:e9:4c:62:92:10:a7:97:f4:d3:9c:c1:b5:7b:
a3:1d:9b:f7:71:8b:71:5a:7d:31:72:a6:72:9b:fb:
18:85:64:37:94:05:5e:ca:1c:7d:30:69:ef:45:28:
5e:9a:22:43:89:f5:3d:53:42:86:43:6c:1a:d7:bb:
ab:71:49:1f:7b:80:a7:16:4f:e7:03:91:a3:8a:ae:
4d:31:0b:4a:5a:a9:2f:4c:91:0e:b3:eb:59:41:88:
ed:0c:0b:3d:ff:e7:c7:74:97:d6:77:0d:a2:64:f3:
43:f6:86:72:f3:d1:8d:ce:c2:aa:22:3b:9f:b4:c4:
d0:b1:28:1b:19:e1:7f:22:21:f8:51:32:2b:f2:a6:
1f:da:5f:c2:aa:d1:80:45:46:f2:80:32:99:21:33:
d4:01:8f:3c:7c:80:3e:26:6a:20:db:ab:93:d9:d8:
55:11:b7:01:31:15:d3:b8:36:06:e2:36:07:0f:df:
53:fc:1b:de:7e:ff:01:67:60:c4:38:dd:9c:e4:3c:
1c:ab:af:ce:e0:a8:f3:8c:51:a0:8f:c8:4e:4c:c3:
fd:52:2c:f7:b7:66:38:11:ad:dd:13:32:49:51:f7:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:66:A6:F0:A9:85:9E:A0:64:F5:1A:46:11:31:78:2B:65:67:E4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yX1mpvCphZ6gZPUaRhExeCtlZ-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:ba:40:3e:7a:f5:81:85:58:27:24:e0:c5:5c:69:22:2b:33:
37:8a:92:fc:40:b8:0c:af:ae:71:c2:40:2d:d8:f9:ab:95:f7:
9f:26:cd:64:25:01:97:cd:4d:97:8e:cf:f7:a3:91:21:9a:c1:
87:b4:f6:53:ee:14:b4:0e:6d:88:94:ba:68:80:0c:fd:a5:70:
cb:e3:c3:3d:8f:93:7a:61:64:fa:01:1e:0c:2a:9b:79:ab:a5:
5d:5f:91:e4:2f:c2:90:e1:9d:2a:0b:2f:cc:fc:b7:a0:bb:4f:
7e:ea:20:e5:ab:a0:d3:5c:e2:dd:8e:fa:4b:fa:bc:ce:8d:fd:
a5:05:08:0f:cb:80:57:c4:0b:5e:fa:86:32:a3:cd:17:72:c4:
12:08:2a:6f:c2:77:0d:9e:b0:cc:de:7a:dc:c8:2a:0c:46:70:
78:fd:1f:c8:b7:47:a9:5a:19:35:7c:c6:b0:99:59:ed:df:e9:
ce:8e:de:ea:ba:77:5a:e0:dc:db:56:9e:38:27:97:23:6b:f2:
46:e4:22:38:2a:33:c9:6f:8e:31:b0:44:67:16:dd:72:bb:db:
bd:de:51:59:0b:4b:76:3b:a6:09:0e:61:39:a4:52:8b:25:05:
fe:52:a7:48:6e:63:9a:d7:ed:10:12:39:b0:7b:19:56:64:f3:
d7:60:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:35 2025 by rpki-client