Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIZSLFfJtl2zj97faNJ85RKWHYs.roa
File: YIZSLFfJtl2zj97faNJ85RKWHYs.roa (raw, json)
Hash identifier: KhB7OfVy3yVGarrQaexP2jmxyL6Or6A+Y7I31NgXWas=
Subject key identifier: 60:86:52:2C:57:C9:B6:5D:B3:8F:DE:DF:68:D2:7C:E5:12:96:1D:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C175B7F8EB524FC08546E0BB8D4132B12
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIZSLFfJtl2zj97faNJ85RKWHYs.roa
Signing time: Tue 28 Nov 2023 19:15:21 +0000
ROA not before: Tue 28 Nov 2023 19:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:5b:7f:8e:b5:24:fc:08:54:6e:0b:b8:d4:13:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 19:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6086522c57c9b65db38fdedf68d27ce512961d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:3b:37:5e:1e:6a:ad:a3:f9:c3:dc:e4:8b:
36:b2:31:cb:86:2a:a9:0c:28:08:6d:3f:01:f4:d8:
a2:e9:77:6f:c6:e8:e3:35:d5:e6:d8:37:14:61:50:
67:6e:a3:c4:07:18:3b:83:b4:83:b1:71:74:b0:84:
61:14:04:4e:2f:91:09:b3:63:02:7b:5e:8e:f5:0d:
59:3d:e3:96:9d:c3:98:dc:9c:2f:45:d4:bb:21:fd:
a1:89:1d:ec:dc:ca:ca:76:6c:76:3e:98:8b:ea:15:
72:69:c5:cf:ec:13:51:a0:d8:75:b7:19:c3:8f:b0:
81:46:3b:e6:24:3e:46:b9:54:62:88:f0:09:9d:0d:
8d:69:93:3c:f0:ee:94:ad:2a:1b:9e:05:bf:9e:76:
99:41:b1:73:cf:ef:8d:d0:91:8f:b8:54:87:2d:07:
54:33:33:da:3d:d1:c0:bd:b0:08:12:69:66:3f:e5:
d7:e1:d1:c1:cd:5d:18:c8:b2:e9:03:d1:32:1e:9a:
fa:65:69:16:35:d8:ac:84:c4:17:6c:49:0e:03:08:
63:72:92:5c:88:8a:77:52:fd:87:1a:25:0b:f3:51:
72:81:0e:b0:f2:53:23:93:86:c4:99:eb:5c:73:ca:
0a:fe:51:66:d6:a9:70:a7:76:b6:6b:99:19:bc:73:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:52:2C:57:C9:B6:5D:B3:8F:DE:DF:68:D2:7C:E5:12:96:1D:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIZSLFfJtl2zj97faNJ85RKWHYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:e3:a0:37:27:63:a8:01:09:6f:c7:11:ec:12:80:2d:2a:97:
83:38:eb:12:41:35:8b:e4:7e:b1:08:97:3c:83:20:80:c5:76:
94:88:61:71:f4:a1:b7:04:dc:36:b0:84:f6:e3:ad:f1:4b:18:
87:e0:fa:45:ac:3f:60:07:2a:9d:f4:8a:b1:19:1b:38:dc:c0:
92:68:d2:52:51:77:3f:e9:8e:fc:59:18:04:7e:86:62:f2:05:
f9:b3:f3:97:98:d0:60:29:89:0e:0c:3f:24:92:4e:19:f6:89:
86:be:4a:26:dc:63:40:ec:ca:a8:19:43:8f:60:7c:f4:ea:f2:
e2:37:7d:ef:9e:c5:78:14:2f:4c:4c:19:7c:52:18:97:ef:26:
86:0a:ee:67:b5:8d:53:83:9b:d7:d1:9a:f3:ce:61:ee:27:29:
ac:cd:f4:79:19:a4:87:6e:4d:d9:35:b9:4d:1f:74:6d:14:da:
7e:c2:4c:b0:69:89:92:eb:66:4a:d5:95:8d:51:7b:8a:ad:49:
5f:8d:be:6a:56:46:2a:71:04:c5:d8:dd:54:43:5a:21:f9:5d:
0c:38:92:3b:1c:47:92:e5:4f:df:a9:15:94:37:83:ee:89:40:
a9:1e:6d:9f:aa:e6:01:21:31:94:d4:4d:b2:80:af:d3:79:eb:
d1:31:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:05 2025 by rpki-client