Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0yh1Ik3xZssZD_Yg2hcktujbPw4.roa
File: 0yh1Ik3xZssZD_Yg2hcktujbPw4.roa (raw, json)
Hash identifier: UqnhjIPs9i/HaZNE93l3lBniB0Ri6YDB/1ooysX4Ktg=
Subject key identifier: D3:28:75:22:4D:F1:66:CB:19:0F:F6:20:DA:17:24:B6:E8:DB:3F:0E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1048557D4B728207D6856B57CBB0D11C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0yh1Ik3xZssZD_Yg2hcktujbPw4.roa
Signing time: Mon 27 Nov 2023 10:17:05 +0000
ROA not before: Mon 27 Nov 2023 10:17:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:48:55:7d:4b:72:82:07:d6:85:6b:57:cb:b0:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 10:17:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d32875224df166cb190ff620da1724b6e8db3f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:2e:11:c8:91:18:74:be:8b:d1:f1:a1:75:
96:3b:2f:bf:52:42:ae:08:d0:9e:54:bb:d3:24:e3:
00:89:2c:63:07:ec:5d:9c:a0:5d:2d:e4:6a:8d:69:
e2:13:9c:93:17:4a:dd:d8:ea:89:6e:31:a1:7a:9c:
39:3e:91:76:c8:16:fa:56:60:41:c1:d2:0a:18:1c:
57:e3:f1:a5:39:79:25:41:b7:d5:e3:d9:9a:9c:12:
44:87:40:6c:25:97:fc:bf:da:87:0f:e4:ba:a2:33:
4d:ef:8d:8c:89:6c:57:b5:ce:b1:07:61:15:74:88:
1c:3e:f2:9b:11:60:38:5f:71:99:b7:76:67:53:41:
48:9d:22:8b:5a:28:44:86:24:76:d7:d2:4d:db:11:
de:87:cd:33:ab:3d:a4:d7:e3:c3:0d:31:a2:d3:ad:
e5:c0:2d:d2:c4:41:2a:c4:37:e8:4a:a9:f6:6e:78:
f8:31:f9:64:c5:ea:4e:65:ac:24:ea:ff:c1:65:5b:
57:d3:31:e0:e0:3b:25:13:16:c8:b5:b0:de:49:44:
0b:aa:d3:2e:00:05:e4:6c:dc:f7:ed:e2:61:a9:a2:
d2:db:6d:8f:d5:30:c9:1a:b1:2e:cc:9a:49:7e:94:
08:1a:3b:51:85:e4:20:0e:89:5b:d1:07:a8:76:5b:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:28:75:22:4D:F1:66:CB:19:0F:F6:20:DA:17:24:B6:E8:DB:3F:0E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0yh1Ik3xZssZD_Yg2hcktujbPw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:c2:5d:fc:8a:e9:07:5c:02:ab:88:7d:05:56:b6:bd:3d:ea:
de:df:97:f9:fe:4a:3e:e7:21:74:9d:35:3e:69:41:76:04:34:
28:49:cb:05:fb:71:fd:36:10:bf:f0:df:a1:7b:42:84:3b:19:
68:b3:27:a2:6b:d3:8c:eb:f3:4e:16:54:f6:ef:57:38:58:5b:
1b:1f:cc:b3:2b:9f:31:c6:9c:67:5f:01:ba:f4:e3:7c:ce:bc:
d3:02:bd:e4:28:e0:81:4b:f6:0d:65:65:b3:1c:c2:dc:6c:24:
38:51:0d:6e:a4:7d:60:73:b1:67:8c:54:ba:67:55:69:14:02:
67:c3:9d:0d:e2:b1:a1:0c:24:90:8d:86:6f:71:23:c2:ca:ce:
a3:67:22:b5:80:1f:88:77:3e:28:06:15:2e:f2:77:4a:42:52:
20:29:24:5b:78:3c:d8:94:79:65:2e:dd:17:56:d9:39:33:5b:
79:05:d9:d0:97:5e:21:9f:1c:82:bf:c4:23:36:3b:1b:f1:70:
2f:1e:96:a2:f4:f5:9d:94:ca:df:c1:95:b4:64:3e:7a:df:f9:
6d:d1:9f:38:5b:69:58:6f:33:83:ee:09:21:18:b8:dc:b7:98:
ba:72:86:b9:d1:23:c6:27:e0:a5:79:6e:8f:19:69:b4:bd:0d:
be:b8:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:38 2025 by rpki-client