Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YFczwaKh13XNUtunEnC3OcXThrk.roa
File: YFczwaKh13XNUtunEnC3OcXThrk.roa (raw, json)
Hash identifier: kHRJkaxVBbR0oM+ORgdUkCq8My2KFOUtNBdckN2z0Gs=
Subject key identifier: 60:57:33:C1:A2:A1:D7:75:CD:52:DB:A7:12:70:B7:39:C5:D3:86:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6806C4D0C7E208465F8052E31033781D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YFczwaKh13XNUtunEnC3OcXThrk.roa
Signing time: Wed 25 Oct 2023 18:09:15 +0000
ROA not before: Wed 25 Oct 2023 18:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:06:c4:d0:c7:e2:08:46:5f:80:52:e3:10:33:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 18:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605733c1a2a1d775cd52dba71270b739c5d386b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:e9:68:7d:c7:68:23:bd:41:01:b0:e7:9d:
e7:71:90:c5:dd:28:fb:2d:0e:c5:c8:80:4f:44:2d:
4c:82:8f:9a:3c:7b:74:a4:ab:d3:a4:88:f0:0d:c1:
eb:59:f1:52:4e:af:66:a6:f5:cc:d7:e0:c0:c6:6c:
7c:ee:cd:0f:f7:8c:9c:34:38:66:d4:a4:66:8e:19:
bc:9d:eb:a5:c8:1f:84:0f:de:89:85:64:d7:43:33:
29:62:21:51:56:74:2f:ea:c8:1c:e9:cc:67:bc:b3:
14:a2:1a:c6:9b:2f:fd:6e:26:5a:d7:57:7f:9f:a5:
6a:90:8c:8f:d0:33:cc:e8:42:23:8c:0e:9a:b2:b6:
f3:9b:c3:a6:c8:a2:60:c1:c9:7f:32:e8:bf:ad:b9:
4f:69:d4:78:fc:5a:83:3a:70:80:83:4f:de:b7:6c:
f7:bf:10:30:76:01:4f:c6:bd:16:a6:25:d5:bd:d4:
1f:86:d1:1f:40:65:3f:fc:9a:3c:db:77:a3:8a:21:
18:27:eb:b0:85:64:64:25:02:db:bc:fd:48:af:54:
83:57:3d:59:e1:7e:e7:9d:bd:83:58:87:b8:14:cb:
5a:d5:52:6e:fc:da:3c:96:9d:11:e7:2d:3a:6f:08:
4d:b2:b0:a1:5f:1a:fa:18:8c:e3:64:9e:d6:b2:c5:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:57:33:C1:A2:A1:D7:75:CD:52:DB:A7:12:70:B7:39:C5:D3:86:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YFczwaKh13XNUtunEnC3OcXThrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:06:01:e9:90:36:b3:72:3a:19:dd:5f:9d:77:4c:4b:6f:b3:
77:29:d7:80:fb:66:03:01:35:ef:8a:af:80:17:83:f4:08:67:
74:42:d8:18:5a:df:1e:82:64:c4:74:46:44:a9:06:b4:26:e4:
fc:4f:dd:2c:64:e3:0e:e1:ce:eb:9e:58:cb:be:91:0f:84:23:
ce:33:89:a0:33:81:66:ac:03:e0:c8:0f:ce:ed:e9:b7:5f:84:
71:eb:a2:f3:ab:e0:d2:c5:68:64:48:7d:9c:15:34:1c:d7:41:
75:a3:f8:ca:c9:60:05:b0:fd:06:3c:9a:85:d0:4b:64:46:cf:
fc:6c:ce:94:2e:23:06:62:18:b7:f3:d8:12:b2:c9:ce:f6:4b:
33:72:5f:5f:17:34:92:54:e7:31:bd:a4:8a:e5:ab:93:8f:d6:
4d:a5:d4:ae:5f:6c:b1:d3:28:cc:d6:f9:3c:22:a0:a1:9f:02:
10:32:3e:d6:fd:ac:23:10:ed:b8:c7:30:38:ba:8c:10:d5:a4:
23:9f:b4:9a:24:44:eb:c6:db:6c:fb:d0:b8:4e:69:d5:f6:76:
4f:d7:5b:54:27:48:77:4a:9b:0e:83:0d:a3:44:6a:89:8d:d0:
14:f2:a9:ce:f3:bc:67:f6:89:f7:0f:81:4c:9f:ac:e7:40:65:
47:0f:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:58:27 2025 by rpki-client