Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yvesH1ARKaH4BPCkDndqtNQo2YY.roa
File: yvesH1ARKaH4BPCkDndqtNQo2YY.roa (raw, json)
Hash identifier: ZfgWSDPAZDsAJ7rnHgo66eq1l2awmX3Oja457BdArps=
Subject key identifier: CA:F7:AC:1F:50:11:29:A1:F8:04:F0:A4:0E:77:6A:B4:D4:28:D9:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5C3B299F715FD1B033261AD70706FFA2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yvesH1ARKaH4BPCkDndqtNQo2YY.roa
Signing time: Mon 23 Oct 2023 11:11:02 +0000
ROA not before: Mon 23 Oct 2023 11:11:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:3b:29:9f:71:5f:d1:b0:33:26:1a:d7:07:06:ff:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 11:11:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf7ac1f501129a1f804f0a40e776ab4d428d986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:35:ff:b4:12:98:67:a4:e3:1d:74:19:0b:
5f:b9:1d:a3:73:42:86:b7:d2:43:79:f5:04:90:08:
9e:39:9c:f7:41:69:c0:63:c9:3f:ac:b0:03:79:11:
f6:77:fb:99:c7:9c:ae:22:90:25:3c:5d:28:60:8d:
3d:32:ce:c4:a1:eb:ad:24:4f:90:53:50:39:c8:29:
a7:5e:47:e3:ae:78:f8:42:49:21:4f:27:b5:60:12:
f4:4e:bf:1f:d1:18:f4:b0:d3:98:6d:a7:e9:0e:2a:
25:84:6e:6a:a3:89:41:71:46:21:fe:0f:d6:0a:c7:
39:25:ee:f2:54:10:46:4d:0b:34:7a:f9:4e:58:8a:
90:98:07:a3:f9:6d:b1:4c:40:aa:a9:75:b6:e4:7c:
84:c1:61:dd:47:79:9c:1e:54:15:bb:6c:66:c3:d1:
d3:e4:0e:fd:ce:06:d3:cb:da:d1:02:92:ec:11:9e:
51:c8:6b:2a:58:5c:e9:70:bf:89:f9:9d:8f:e0:19:
eb:69:1d:e9:8b:d8:31:86:67:8c:1a:4c:14:67:81:
1e:38:e3:7a:c3:14:b8:37:e3:5a:5a:61:58:8c:61:
55:23:a1:c5:47:f2:fe:a3:27:79:88:d5:76:9e:9e:
bf:72:5a:ef:36:ab:a0:32:c4:6d:c4:a3:26:0c:f0:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:AC:1F:50:11:29:A1:F8:04:F0:A4:0E:77:6A:B4:D4:28:D9:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yvesH1ARKaH4BPCkDndqtNQo2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:3f:88:5b:69:10:af:05:8a:9c:86:38:58:9d:45:4a:f6:94:
bb:af:b1:33:a9:cd:ca:1e:70:a3:36:94:32:1f:d7:54:73:da:
3f:5a:60:be:1a:bf:01:60:23:e5:cf:9c:24:53:4b:2e:82:e3:
64:d1:c8:0f:4e:ca:34:73:02:21:7e:30:78:78:18:84:fb:21:
0d:1d:62:65:c3:de:6f:36:7a:a8:65:4e:88:45:0e:87:72:94:
96:1b:60:09:99:13:c3:d8:cd:e3:45:b9:c0:d1:5e:fa:36:1d:
a9:28:e2:74:98:43:8c:12:10:c2:7b:f6:65:9f:f6:8a:c7:c3:
79:2b:58:64:15:21:44:32:53:a4:de:27:a4:17:2a:14:58:7f:
59:67:33:b8:e4:b8:c6:6f:4d:d7:d0:42:92:70:40:1d:07:78:
57:9f:81:60:a2:dc:c0:6a:6e:68:19:ce:a9:83:e3:53:35:f2:
aa:c4:cf:23:96:ea:90:5b:96:5f:1b:75:76:35:ae:5e:b7:d6:
d0:5b:d8:e5:85:c4:95:4b:e5:68:a0:85:56:df:53:95:2b:ec:
46:2f:84:00:f9:a9:51:9a:f1:00:3f:4e:7f:bc:21:aa:4d:4c:
eb:ab:39:5a:f0:37:3f:9f:1c:2c:d0:71:af:b7:22:0e:46:dc:
4c:50:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:48:03 2025 by rpki-client