Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YkPW3Yz1nRIS1cBEltXTPsvmZvg.roa
File: YkPW3Yz1nRIS1cBEltXTPsvmZvg.roa (raw, json)
Hash identifier: Ypide0PdplejlfnFPxEllHgLDDvpQuCRDvu8JnciKn8=
Subject key identifier: 62:43:D6:DD:8C:F5:9D:12:12:D5:C0:44:96:D5:D3:3E:CB:E6:66:F8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD86856D08A573457089F4AFA3AE74DBB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YkPW3Yz1nRIS1cBEltXTPsvmZvg.roa
Signing time: Sun 02 Jun 2024 10:04:27 +0000
ROA not before: Sun 02 Jun 2024 10:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:d868:258c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:68:56:d0:8a:57:34:57:08:9f:4a:fa:3a:e7:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 2 10:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6243d6dd8cf59d1212d5c04496d5d33ecbe666f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:30:60:91:6e:1d:c5:ff:30:1c:84:fd:13:
50:53:1a:70:1f:6b:2a:27:b5:68:3a:27:3c:fd:71:
43:30:e1:ab:cd:f4:19:02:40:77:ec:9d:43:0b:24:
90:44:fd:b9:f4:5b:f2:f9:6f:f5:b4:90:49:65:30:
92:46:0d:13:b3:cb:7b:e2:19:90:2f:2f:69:ba:36:
ff:71:33:ca:a1:07:2a:40:0b:5a:d7:7a:13:b9:5a:
21:55:3b:55:65:bc:86:86:a7:26:ed:78:a9:92:52:
5b:bb:c2:0c:ac:d7:aa:49:4f:40:e5:27:2b:f3:0f:
95:38:8e:24:f4:db:c2:fe:f2:f0:a8:72:39:13:50:
0d:08:d5:91:02:5f:a2:46:07:a1:9e:9d:93:fd:6b:
a0:ca:24:9b:c2:31:f5:87:cc:8d:7a:06:ff:4d:73:
d5:43:92:a2:dd:42:57:95:c9:e6:55:50:29:c6:91:
4c:1f:80:3b:09:b9:14:cb:36:24:41:27:44:61:d2:
2d:ab:d3:0a:13:6a:22:a1:39:45:aa:28:ae:f6:58:
2b:98:c3:53:6d:7c:71:d7:cf:63:41:07:72:99:ee:
c3:d5:75:13:87:d4:1d:a4:4a:3f:78:ce:a8:07:9d:
71:2c:1e:6f:c5:0a:82:d5:67:ca:b5:41:56:62:7d:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:43:D6:DD:8C:F5:9D:12:12:D5:C0:44:96:D5:D3:3E:CB:E6:66:F8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YkPW3Yz1nRIS1cBEltXTPsvmZvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:92:af:4d:3b:cd:db:43:32:1b:47:03:a5:b3:39:f9:64:96:
80:a4:6b:f4:16:b0:07:86:54:e5:d6:23:86:f6:ce:c4:17:1e:
3c:20:19:03:1f:81:e1:cb:de:fb:1e:7f:60:15:f1:d0:ca:ba:
b5:97:c5:2e:54:f5:07:f7:47:91:10:16:02:71:b6:56:0f:b1:
7a:b7:cd:86:73:99:fd:66:b1:bf:d6:0c:e8:82:63:6b:6a:0a:
16:5a:ae:bf:62:bf:c5:13:cc:53:27:34:2f:87:aa:42:08:48:
7e:92:62:59:cc:92:a5:a6:d1:b5:72:5c:a5:b7:a4:16:c2:c6:
b3:62:7f:ac:eb:4b:fb:d9:ab:5d:91:0e:cc:b7:67:cd:43:28:
f1:91:16:f5:2c:79:a2:60:68:96:15:7e:a9:ee:8c:96:29:0d:
1a:69:60:5a:3c:d2:97:ba:ce:41:07:4b:93:4b:c1:11:ed:12:
ff:1c:6e:34:09:12:9c:90:18:7a:43:6f:b1:7b:b6:fa:7a:e1:
a6:f4:b6:23:6f:c8:8a:c3:f9:e3:db:53:d0:2a:a5:b5:71:4e:
be:54:8e:83:6e:8d:89:a8:48:64:76:b8:fe:65:0b:f6:c0:bf:
57:3a:41:be:ef:c1:6e:5e:a8:b7:5a:bf:e2:18:9f:a5:d6:b8:
99:b6:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:21:41 2025 by rpki-client