Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yYpuW4c6aN8XAGyFg4vLn0aunGg.roa
File: yYpuW4c6aN8XAGyFg4vLn0aunGg.roa (raw, json)
Hash identifier: C1nvyeSmTjitCeugqLIE5ZTVGihRczSK7r95+oERe6A=
Subject key identifier: C9:8A:6E:5B:87:3A:68:DF:17:00:6C:85:83:8B:CB:9F:46:AE:9C:68
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3AF351136019D96ECC8D803BCA4F12F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yYpuW4c6aN8XAGyFg4vLn0aunGg.roa
Signing time: Tue 17 Oct 2023 00:05:06 +0000
ROA not before: Tue 17 Oct 2023 00:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3af2:a418/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:f3:51:13:60:19:d9:6e:cc:8d:80:3b:ca:4f:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 00:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c98a6e5b873a68df17006c85838bcb9f46ae9c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:b1:7b:1e:6a:c4:bb:bc:14:bb:63:10:84:
f1:2f:27:d0:4f:69:11:bc:6a:ce:d3:70:ad:4f:04:
8d:97:47:8b:9a:0a:ad:0c:ea:b4:b9:c2:4c:41:ed:
19:8f:9a:e4:3e:ef:88:e2:35:ad:2f:41:37:e1:2d:
3f:d6:61:63:8d:f6:f9:2b:96:51:ac:05:03:c9:a8:
33:64:43:52:af:60:56:d7:00:e5:e3:cb:92:3d:11:
0d:95:23:29:c2:88:e1:8f:7b:29:da:d7:75:f9:2c:
9c:94:83:54:f7:91:36:ac:5a:34:7b:a5:d4:da:5f:
3d:60:7c:97:a8:11:fc:86:3e:06:d6:2d:f0:fe:3f:
cb:69:41:90:81:b0:0c:bb:bb:12:78:f6:2e:1e:ad:
6b:62:78:76:5e:e6:90:10:85:c2:f1:ab:2c:15:a4:
aa:ef:4e:db:86:f8:c9:33:45:ea:83:fc:30:b1:20:
ec:92:7f:66:d0:bb:d9:e7:64:cc:80:7d:6b:94:7c:
8c:51:30:22:42:22:2f:f0:cc:45:c5:96:ac:cf:cb:
9a:08:c9:87:ce:73:e9:b9:19:a1:65:61:a2:7d:cc:
60:9f:26:02:8a:b4:b0:b1:20:3c:36:22:57:93:a3:
50:5b:30:59:a5:dd:02:c7:bb:1b:a6:3e:f5:17:d2:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:6E:5B:87:3A:68:DF:17:00:6C:85:83:8B:CB:9F:46:AE:9C:68
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yYpuW4c6aN8XAGyFg4vLn0aunGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:21:a4:0e:86:4f:2b:91:1f:77:54:6b:f2:43:2b:72:af:f7:
a5:a2:be:2b:4b:3f:9c:37:a0:5d:5d:d4:32:5e:6c:de:5b:f9:
0a:d6:d9:03:7e:7b:9b:dc:40:28:26:e2:b8:56:38:34:d0:9c:
8b:db:39:3a:c5:26:eb:8a:6c:e9:6c:69:53:a3:20:eb:72:13:
5c:f2:3c:e3:fc:df:de:eb:ed:c1:84:94:59:4f:9e:04:ab:a3:
27:a3:47:2a:2d:4a:b1:d2:3f:af:83:3b:81:7a:c8:b8:c3:a6:
80:0e:6d:c6:db:d7:e6:94:bf:0b:17:76:f3:70:fc:dd:b8:3b:
73:61:55:e8:67:3a:05:32:76:d1:1d:ed:0d:36:d0:7a:e2:01:
a3:40:c5:da:5d:ae:8b:05:3a:0f:53:ff:85:32:83:2d:a9:1f:
73:30:06:5b:82:95:9f:f1:d6:1e:c8:54:fb:7f:cc:08:fe:05:
35:27:c0:b0:6d:75:cb:9f:01:a2:8b:0c:6a:7b:d1:ea:8b:09:
b8:44:60:32:dc:51:eb:fa:24:79:cc:7e:ef:0b:f7:f2:4f:d3:
31:7b:5d:a9:ea:42:b2:a7:96:e2:c4:c8:09:5d:cf:65:b6:fc:
1e:3c:3c:cb:38:05:12:50:56:00:de:23:b0:c3:2d:e9:d1:6c:
37:01:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:00:08 2025 by rpki-client