Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Bslt_ycno_v_T255wJe2jeHYM04.roa
File: Bslt_ycno_v_T255wJe2jeHYM04.roa (raw, json)
Hash identifier: OFRdPoTGnPUjc9aL0M0vqEqyaUq4olALrHFhXKrQPsk=
Subject key identifier: 06:C9:6D:FF:27:27:A3:FB:FF:4F:6E:79:C0:97:B6:8D:E1:D8:33:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6A2D011BF8BEAB073BB4DA0FA8CC19D3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Bslt_ycno_v_T255wJe2jeHYM04.roa
Signing time: Thu 26 Oct 2023 04:10:16 +0000
ROA not before: Thu 26 Oct 2023 04:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:2d:01:1b:f8:be:ab:07:3b:b4:da:0f:a8:cc:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 04:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c96dff2727a3fbff4f6e79c097b68de1d8334e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:db:07:d9:07:22:f9:c9:2d:0c:a4:9a:dd:
aa:25:3b:07:1a:a3:60:d0:4a:66:bf:d8:c5:78:4f:
b8:93:47:05:c0:82:38:52:a9:73:de:0c:bd:ea:de:
46:20:25:8e:c0:2b:09:37:45:4e:ab:d0:4f:58:87:
01:93:b9:89:57:e2:26:45:f3:11:54:77:a1:03:1c:
d2:b7:95:a2:c6:3c:56:b3:48:58:cc:56:ff:55:dc:
14:da:08:a8:1c:1b:82:cb:ad:08:de:45:9d:f1:43:
e4:74:82:f1:34:49:90:d1:23:76:0b:ea:33:d9:73:
c2:78:3d:a5:a5:92:56:02:f6:2e:3f:e5:f7:75:16:
20:d6:5b:a8:79:6f:d9:b2:c5:b0:c9:f0:df:8d:72:
53:42:59:f5:29:cf:b0:54:48:eb:f8:90:31:c6:da:
4e:de:32:a4:08:dd:63:e4:e2:1c:43:54:49:cf:b9:
33:b1:5f:06:d6:8a:18:b6:65:46:e4:7a:fa:e5:53:
1f:c3:45:b5:96:90:54:25:05:86:f9:b1:64:63:d3:
d3:da:24:2d:88:57:ec:e4:de:0c:1d:7c:d1:5f:61:
bf:55:a5:5d:96:51:f8:96:ea:7d:e9:89:e9:6a:10:
78:e1:4b:53:d3:d7:8e:29:51:c4:43:f4:96:6d:46:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:6D:FF:27:27:A3:FB:FF:4F:6E:79:C0:97:B6:8D:E1:D8:33:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Bslt_ycno_v_T255wJe2jeHYM04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:62:c1:ed:31:02:fa:47:91:72:2a:b3:42:c2:ed:fd:ef:ac:
e9:39:d7:4d:b6:53:c1:7f:69:cf:3a:1b:f9:0e:93:a9:67:a6:
77:0a:f1:23:fe:d0:c0:c6:a3:c6:3b:a6:9e:59:32:d1:6c:c7:
fb:f9:e2:a8:19:2f:c8:b1:41:ef:1b:f5:6e:91:c3:4b:2d:38:
f9:bb:30:ad:0f:b0:c1:2c:1a:0f:5a:55:90:42:e1:c6:95:c5:
c1:fb:6d:1c:7b:bc:9a:90:a7:dd:9c:d0:26:da:f7:c9:0b:a9:
3a:c7:78:3b:58:79:1f:a6:a5:c3:ed:ad:4f:e5:2c:6b:16:d4:
e8:3a:aa:1d:04:d5:bd:bf:8a:40:84:95:8c:f1:60:fa:04:a4:
e4:4d:94:59:84:63:27:8e:76:31:80:2e:15:2c:97:a5:e5:e7:
b1:b6:cf:9d:2c:a8:ee:6d:e2:9a:bf:ef:6e:58:b2:9e:b0:98:
b8:c8:62:94:b9:8d:26:aa:e6:16:08:4d:0d:25:62:4c:8d:f0:
33:e0:df:24:9a:0e:e8:4d:8a:e3:d0:32:fe:ce:a6:a0:8f:24:
26:01:45:3d:f3:79:08:7e:09:86:23:bb:90:03:b6:72:76:aa:
97:30:67:9d:a0:06:c0:cf:b9:f1:00:66:22:32:15:92:e4:b8:
ae:a3:21:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:45 2025 by rpki-client