Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YKmX3tRVlXmPONr3K43GsQMlZgY.roa
File: YKmX3tRVlXmPONr3K43GsQMlZgY.roa (raw, json)
Hash identifier: VIsAOnoK3wSlSUSm/Bg1OtcoYsA3/cVmRY3156Q26Tc=
Subject key identifier: 60:A9:97:DE:D4:55:95:79:8F:38:DA:F7:2B:8D:C6:B1:03:25:66:06
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4B7F4301B5DACF58D90580392521D28F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YKmX3tRVlXmPONr3K43GsQMlZgY.roa
Signing time: Fri 08 Dec 2023 22:14:40 +0000
ROA not before: Fri 08 Dec 2023 22:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:7f:43:01:b5:da:cf:58:d9:05:80:39:25:21:d2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 22:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60a997ded45595798f38daf72b8dc6b103256606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:5f:84:36:a7:0f:da:5e:6b:4a:ad:aa:ad:
bc:5a:81:8f:50:2e:04:fc:88:4f:63:94:96:da:2f:
8f:70:47:48:51:ea:75:6c:b7:7e:51:aa:87:b9:76:
8d:98:3b:a3:45:c0:08:34:ca:ab:e5:79:94:51:75:
c5:2a:4d:d3:df:9b:d2:5c:92:41:3a:f6:7e:7d:d6:
a9:30:a3:68:2b:be:88:1b:2b:94:47:81:60:df:3a:
fe:b3:b1:8a:8f:13:81:7c:61:32:d8:cf:28:dc:81:
65:c6:24:f2:4f:02:fe:b9:2b:f5:7b:2f:3b:44:7c:
fc:25:69:4e:44:8a:b9:35:2a:98:70:6d:51:1e:ce:
b4:87:23:c5:00:2c:85:cf:aa:50:85:03:e8:f5:e2:
b0:e1:22:9d:43:2e:04:29:5e:f2:f2:c1:d6:4d:b5:
82:c2:32:11:98:0a:50:a1:e3:a3:88:ab:2a:be:89:
32:e2:af:77:f4:fe:f1:03:f8:ab:7a:e1:5a:c2:71:
a9:bf:1d:ce:63:c1:99:09:f8:4a:36:0d:88:b1:f4:
60:85:0e:a0:ae:ca:44:5c:06:32:d3:e3:05:26:05:
9e:c4:02:8d:a5:65:0a:40:26:ef:c5:8f:f1:dc:96:
be:a0:ce:3c:0b:6f:48:c8:0d:93:59:aa:b4:e1:ee:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:97:DE:D4:55:95:79:8F:38:DA:F7:2B:8D:C6:B1:03:25:66:06
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YKmX3tRVlXmPONr3K43GsQMlZgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:09:2f:c1:bc:4f:a0:5d:90:69:b3:d3:02:29:35:96:4f:af:
60:4b:8c:64:26:a5:b3:5d:e9:d4:fd:20:25:f4:87:f5:93:b6:
fd:69:0a:78:2f:45:34:ce:af:e0:90:be:32:7a:07:35:50:f7:
d6:32:b8:71:4d:b0:3d:53:08:e8:fc:ba:04:b8:53:ab:f5:78:
c1:90:b3:22:d9:40:e4:97:bf:4b:bc:4a:51:75:b3:b7:ec:d8:
93:31:b0:0f:e0:ba:7e:91:ed:aa:cc:67:37:db:db:f1:0d:29:
af:e4:e0:a7:17:89:6b:bc:4e:67:f9:ec:16:83:69:8d:30:24:
56:df:34:be:b7:cf:0a:c0:ce:ba:27:70:d9:c6:92:ff:88:05:
5e:a1:20:d2:bd:35:05:00:46:34:75:9e:12:b2:bf:a0:b2:8f:
ce:dc:06:cd:7e:95:77:2d:ba:16:35:2b:6f:11:37:0e:08:b7:
80:9d:db:fd:a9:03:0f:be:6e:7a:e0:44:e6:64:b8:d3:7a:50:
1d:3c:2e:0c:32:ff:8a:d8:a3:7e:7e:84:e2:00:ea:4c:67:11:
80:84:23:16:fb:dd:3d:af:df:74:67:5f:7e:b2:90:d0:76:c4:
0e:b8:be:38:37:2d:44:e0:70:86:f0:02:4d:ef:68:81:33:99:
4a:fa:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:33:28 2025 by rpki-client