Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YJoQ531ZC34eUHkR_Z1nP6Vxzd0.roa
File: YJoQ531ZC34eUHkR_Z1nP6Vxzd0.roa (raw, json)
Hash identifier: 0I1OMNbkEI88ZDIY7TnywP5rTLjYJWXWle9oUbzcQeg=
Subject key identifier: 60:9A:10:E7:7D:59:0B:7E:1E:50:79:11:FD:9D:67:3F:A5:71:CD:DD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C68E45FB6C5A1BD881C9D293409289690
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YJoQ531ZC34eUHkR_Z1nP6Vxzd0.roa
Signing time: Thu 14 Dec 2023 15:14:06 +0000
ROA not before: Thu 14 Dec 2023 15:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:e4:5f:b6:c5:a1:bd:88:1c:9d:29:34:09:28:96:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 15:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=609a10e77d590b7e1e507911fd9d673fa571cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:0c:aa:d7:4c:a5:83:81:c7:7f:0d:6c:63:
42:3e:d6:b6:e3:22:ad:00:56:70:54:a7:43:bb:2d:
58:40:04:be:a1:33:f6:7d:8f:f9:e8:ef:9a:06:b3:
80:ae:2f:b1:97:62:e4:37:09:03:b2:ed:1a:97:62:
95:b0:7c:48:d1:bd:22:1e:9c:67:19:3b:fd:97:8d:
60:26:c0:f5:ee:96:57:36:7f:fd:3b:4e:bb:bd:d1:
7d:3b:f4:5f:74:5e:27:95:2c:53:b3:48:71:68:e1:
4b:22:bc:5d:fd:80:c3:b3:e8:98:9e:e8:c3:ce:cf:
d8:82:33:dd:91:75:a2:93:f9:97:4d:c6:15:2d:ed:
1c:17:7d:45:0b:af:bc:ac:59:a1:d2:02:fc:ca:2f:
93:b4:e8:18:31:1a:7a:85:82:e1:40:3c:56:13:cb:
cc:81:96:da:67:00:6c:e2:3a:0d:e7:5b:25:91:4b:
2c:d7:11:cf:69:b5:79:db:3a:34:dd:f9:3d:7a:5e:
09:40:30:1a:ea:ce:5d:ec:aa:0c:76:b6:7e:81:fe:
1f:0e:88:01:bd:bf:c2:c3:72:20:ed:86:9a:c0:e6:
72:d5:fa:04:80:7a:31:f4:28:42:16:83:c9:7d:14:
0d:3b:dc:1f:07:ea:12:63:06:76:51:bc:1b:24:93:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:10:E7:7D:59:0B:7E:1E:50:79:11:FD:9D:67:3F:A5:71:CD:DD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YJoQ531ZC34eUHkR_Z1nP6Vxzd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:22:71:01:ee:6c:6f:1c:cb:37:01:42:77:06:17:78:67:81:
81:42:87:f9:aa:44:33:ae:cd:8d:ce:f3:68:86:b4:f3:0f:66:
ca:9b:3a:c1:6f:43:19:3d:0c:f3:8e:a9:a7:e3:79:3f:76:61:
3d:24:b4:e2:b8:0c:b9:8b:b6:68:1a:4f:8d:77:a6:87:46:5b:
17:82:08:26:44:79:e6:bd:40:e5:b4:c6:f2:4f:7c:77:ce:03:
06:f4:45:95:2f:a6:9a:8f:04:88:ad:4c:0a:bb:44:fd:b6:bc:
34:51:cf:70:8b:ea:0c:a5:cb:4d:99:11:48:5d:d8:29:79:f2:
4f:87:5d:8a:aa:84:11:d4:58:22:51:11:8f:4e:b6:be:14:56:
2d:7c:dd:a7:7f:e0:68:9c:84:87:84:3b:27:13:b4:00:c9:8e:
90:43:57:e6:bb:60:7b:b3:c1:52:c3:64:44:b0:22:1d:4b:a9:
26:de:2f:75:09:83:be:21:08:eb:00:8a:1b:97:b5:f1:41:0e:
9a:f6:85:63:9d:78:04:7d:48:c6:6c:b6:04:4f:72:d6:a9:f1:
7b:eb:5e:12:b1:08:e5:f8:3a:15:29:81:8d:00:bd:ef:4b:eb:
8a:2d:18:f3:65:d4:ec:b0:ec:d7:8c:08:0f:e6:be:65:c4:d4:
4f:f6:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:54:20 2025 by rpki-client