Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YtjIs2S2VXupa4nwCx3btbj20i4.roa
File: YtjIs2S2VXupa4nwCx3btbj20i4.roa (raw, json)
Hash identifier: 1BOc5LikTa3XOPQJm96WMDBwIySc8ueTpkswBORKImc=
Subject key identifier: 62:D8:C8:B3:64:B6:55:7B:A9:6B:89:F0:0B:1D:DB:B5:B8:F6:D2:2E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1BDA5BCA1626236CFE5BECC33C26E976
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YtjIs2S2VXupa4nwCx3btbj20i4.roa
Signing time: Thu 18 Jan 2024 09:15:11 +0000
ROA not before: Thu 18 Jan 2024 09:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:da:5b:ca:16:26:23:6c:fe:5b:ec:c3:3c:26:e9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 09:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62d8c8b364b6557ba96b89f00b1ddbb5b8f6d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:52:a1:51:c7:65:04:4d:eb:aa:30:61:7c:
13:e3:01:80:f6:19:62:b3:9e:20:71:10:4a:18:ad:
bd:57:35:2c:b9:17:f2:3f:dd:63:0e:4e:5b:a4:00:
e6:7c:6e:7f:28:bc:92:61:50:87:66:e1:b5:0a:fb:
9a:46:55:a2:35:81:43:7b:4b:c2:9d:d4:5a:6c:25:
7b:be:46:e1:bc:df:37:33:0b:63:28:3b:37:ef:7e:
aa:b3:a9:eb:4a:61:87:9c:66:72:c2:2f:0c:c5:ab:
9d:12:64:2e:b4:62:9d:d7:6c:6b:2b:78:85:67:d8:
9b:19:9f:4c:6d:5f:ed:e4:da:8a:31:fb:0f:41:fd:
45:d9:9f:14:b0:1a:45:e5:98:73:c8:9c:8a:2c:55:
6f:67:e0:63:a3:ed:95:4e:10:03:1c:2c:9f:53:86:
6d:3e:66:fe:bc:2c:14:90:f6:96:11:5e:89:6e:ce:
31:4b:39:b8:70:3f:cb:8e:89:fa:b1:73:af:79:38:
4a:66:3e:44:65:4c:40:b8:ae:ff:96:88:64:d0:bb:
e3:58:64:57:26:18:5e:ca:fa:6d:91:fc:88:af:55:
36:c3:d5:2b:4a:2e:29:6b:86:fd:f6:89:72:6e:c3:
3b:eb:05:79:dd:5d:45:85:f3:1e:6c:d3:51:c4:b5:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D8:C8:B3:64:B6:55:7B:A9:6B:89:F0:0B:1D:DB:B5:B8:F6:D2:2E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YtjIs2S2VXupa4nwCx3btbj20i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:42:6d:69:4d:eb:35:d6:57:ba:9e:65:24:aa:61:2d:f8:fe:
f4:8f:1d:d7:ac:a4:fa:8c:e9:7a:9b:27:65:10:9f:c0:2b:09:
7f:b5:2e:eb:8c:2e:94:4f:e2:67:b2:7e:0f:7e:1a:ae:34:a9:
0a:e0:20:4c:84:a1:a0:80:e8:1f:dc:2e:2f:98:ad:b3:e3:83:
c6:b4:3d:7b:ba:fe:4e:e1:1d:a6:f0:a9:fc:f1:e6:cf:cd:d4:
c7:42:02:49:f1:6e:7c:9e:48:08:8e:71:ce:95:01:9a:ad:ca:
bd:11:ff:64:03:80:24:c5:e3:f5:c7:81:8a:cb:f9:8e:1c:ce:
d7:79:88:69:2b:64:36:01:19:a8:96:c2:87:a3:43:c6:fe:32:
fe:8c:d3:a8:a2:c7:c9:73:7d:18:fd:49:da:d4:84:12:c7:d7:
6a:d4:91:2b:0e:10:02:94:6c:d9:17:b7:72:a0:48:bd:ca:84:
a4:1d:ce:dd:ad:c2:e3:dc:e7:e7:a8:55:92:de:93:94:21:cc:
08:09:1d:2f:6e:6e:f6:fd:da:86:8c:27:d0:f1:c2:28:41:87:
c4:65:ed:0a:b5:74:ad:5e:34:51:40:a3:d4:7a:86:4f:16:8f:
71:f9:ae:a7:3d:8c:0b:28:16:bb:d5:08:c7:aa:c4:3a:ef:88:
fe:68:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:43:19 2025 by rpki-client