Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yrozumdz3zvfai1_-N5QCeF9zzs.roa
File: yrozumdz3zvfai1_-N5QCeF9zzs.roa (raw, json)
Hash identifier: eGhw+yqPPBczaxwdWdtzHWXOaZh+03GE9XY12HUFDx8=
Subject key identifier: CA:BA:33:BA:67:73:DF:3B:DF:6A:2D:7F:F8:DE:50:09:E1:7D:CF:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD72EE8829657EB24D61F81E43C7C9627
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yrozumdz3zvfai1_-N5QCeF9zzs.roa
Signing time: Thu 16 Nov 2023 08:10:57 +0000
ROA not before: Thu 16 Nov 2023 08:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:2e:e8:82:96:57:eb:24:d6:1f:81:e4:3c:7c:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 08:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caba33ba6773df3bdf6a2d7ff8de5009e17dcf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:95:60:ca:41:01:f3:cb:2c:e0:48:e0:55:
17:36:96:a6:22:b8:e3:ba:2b:d6:05:b1:0f:3f:3f:
35:67:a2:a2:0a:79:85:54:0d:0f:96:2d:a0:fe:0f:
f4:d7:0f:f5:00:77:b5:61:4e:65:b4:8e:47:8a:02:
7b:27:3c:9c:8c:31:a6:fa:72:89:4b:4c:5c:91:86:
57:a5:bd:e7:4f:19:f3:64:0a:be:c6:50:9d:71:d4:
2b:7a:8c:6e:35:65:97:5a:0b:57:e7:a2:d4:77:13:
98:51:68:1a:c0:9c:52:09:57:16:e8:33:0f:73:f9:
03:aa:31:e2:30:e4:55:ce:da:db:f1:50:91:82:0b:
54:8e:73:b5:c1:e2:e1:59:9c:b9:f6:a1:c4:11:93:
c9:c9:df:fb:53:59:56:84:e4:b3:52:be:37:66:be:
5e:b1:38:26:da:83:c5:34:d9:6b:c7:a3:7b:4a:b9:
8e:c2:eb:79:b4:6f:84:d4:41:a0:ea:7a:e2:49:c6:
bf:16:dd:28:57:a8:3e:38:14:d6:89:1a:31:40:5d:
78:9a:ef:6f:77:04:95:fc:5d:92:f7:99:1c:6a:78:
35:b9:d2:7f:8e:cf:b4:1b:88:af:13:15:a5:6f:10:
a7:be:4d:49:fb:87:bd:1a:49:44:48:01:e9:ce:73:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:33:BA:67:73:DF:3B:DF:6A:2D:7F:F8:DE:50:09:E1:7D:CF:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yrozumdz3zvfai1_-N5QCeF9zzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:5d:8d:05:2f:7f:5b:87:29:d0:f9:ee:c7:65:2d:d1:e8:7a:
bc:80:2b:24:cf:24:35:26:24:07:61:9c:3f:30:57:09:63:8f:
da:17:12:34:30:d4:ca:35:74:c0:a3:05:6b:66:dd:73:a1:f9:
e0:f6:59:0b:f5:73:7c:d6:0e:ed:9a:c4:e1:03:fd:8f:8e:bd:
f4:54:fa:b8:83:3f:a7:17:05:2c:77:2f:1a:af:ec:62:f5:39:
8e:26:c0:09:12:b5:64:65:2c:d7:cc:7b:6c:a4:3e:a5:f4:1a:
ef:00:01:7b:31:e5:8e:03:bf:cc:a6:d5:01:37:33:ab:88:e4:
2c:b9:a0:95:69:19:96:69:58:b7:43:6e:eb:95:96:bb:31:9a:
63:c0:7b:c0:d7:5a:c1:e1:54:2f:37:bf:8a:b8:bb:5b:0c:d6:
52:1d:e2:b1:c3:e6:87:bc:cb:83:7f:aa:0c:49:fc:56:72:55:
f1:99:ea:79:f0:9c:b3:ee:db:b9:4c:13:95:05:32:c2:e2:30:
96:1f:73:3f:bf:ef:68:71:59:f0:f8:79:d9:f6:6d:13:a3:ee:
32:37:7d:56:97:bd:92:43:f6:75:29:e9:40:a5:b4:9e:05:8c:
9e:d5:3e:ee:2c:51:62:25:ba:aa:04:4e:df:a9:fa:8a:b5:08:
42:6f:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:04:43 2025 by rpki-client