Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YXsoqNW2TYZhTId6samentffOWE.roa
File: YXsoqNW2TYZhTId6samentffOWE.roa (raw, json)
Hash identifier: mG2PmgNfduePXNrldY/azZFBoqW/rl7UX/NvRtg9aJs=
Subject key identifier: 61:7B:28:A8:D5:B6:4D:86:61:4C:87:7A:B1:A9:9E:9E:D7:DF:39:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEC3D6086BA217E536CDA5D99B43D1420
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YXsoqNW2TYZhTId6samentffOWE.roa
Signing time: Sun 01 Oct 2023 17:15:59 +0000
ROA not before: Sun 01 Oct 2023 17:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:3d:60:86:ba:21:7e:53:6c:da:5d:99:b4:3d:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 17:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=617b28a8d5b64d86614c877ab1a99e9ed7df3961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:b7:ad:04:eb:55:50:74:34:60:3f:58:81:
28:19:d4:4e:e7:9b:bc:7c:b6:5a:60:66:8b:38:d3:
e3:97:e5:62:3f:41:42:ac:64:13:f5:74:8c:e7:7a:
46:58:ff:11:0a:46:d6:15:a7:b4:c8:07:1a:b8:dd:
43:fe:99:31:40:47:22:3f:a2:c1:fe:bd:a8:e6:76:
42:10:ec:9b:c5:a9:ca:dd:a1:99:2e:b3:7d:88:c4:
c0:1d:dd:71:3c:f7:c2:db:63:98:e4:d0:07:90:26:
fb:fe:2e:fd:23:29:33:27:b8:df:9e:23:22:d0:cd:
74:47:ad:8f:bd:4f:6a:b9:1e:14:22:b5:0f:40:b5:
91:62:d7:e1:10:90:fc:6b:29:9d:ac:74:d2:7d:3d:
df:ea:7a:54:77:78:4b:ea:78:15:18:ae:ac:c6:87:
ad:93:e8:0e:3e:07:d1:43:4d:bf:ea:80:53:ad:3e:
6f:8d:3d:96:a5:ac:de:f0:43:2b:75:c3:8c:a6:54:
fc:ac:99:d9:c7:f1:f3:5d:b7:1c:c2:d5:b0:24:6f:
c5:62:f4:1f:f5:30:ad:2b:9d:6e:04:be:2d:25:57:
c7:f1:4e:15:5c:59:22:b4:47:31:5c:16:a1:ba:77:
8e:43:8f:48:f0:f5:6f:31:06:c6:7b:f6:7a:14:6f:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:28:A8:D5:B6:4D:86:61:4C:87:7A:B1:A9:9E:9E:D7:DF:39:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YXsoqNW2TYZhTId6samentffOWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:c1:9e:56:f3:5c:fd:96:8d:db:26:13:29:ed:60:6a:49:a9:
44:46:18:8b:ae:92:eb:0f:79:9c:89:13:81:89:b5:b0:2d:f6:
cd:bf:2f:f9:98:45:8f:fe:ec:83:74:a1:98:65:c5:5b:45:de:
c9:2a:aa:5b:29:ac:da:1d:58:3f:74:6d:ed:98:18:85:1e:85:
de:41:d2:2d:92:57:63:79:5f:8a:67:80:79:dc:51:11:2d:1d:
80:4f:fc:78:52:8c:4e:bd:eb:eb:ac:63:e6:8e:15:31:23:f1:
42:13:a7:47:6c:7d:f5:4b:70:48:d1:ee:90:82:dd:42:73:7a:
90:57:da:d5:e9:ce:e7:42:a4:bc:94:e3:74:d0:08:f2:f4:89:
e2:f4:97:25:96:67:ab:5e:23:09:a0:f7:b6:2a:e2:cb:76:84:
67:e6:15:98:41:7f:cc:b4:87:38:19:6c:ff:54:40:fc:ba:a6:
ba:4f:da:c8:2d:c4:ba:a5:aa:fd:1b:6c:34:a0:f1:f1:33:76:
d3:61:a0:15:3d:ac:b8:60:46:e4:2c:52:82:96:37:84:09:49:
58:d3:2d:d9:94:c6:6d:b1:58:95:47:55:f3:0b:5a:00:e6:8b:
3a:15:21:a3:a2:cb:b2:01:e9:0d:10:1f:03:dc:ea:1c:1c:f8:
ac:bd:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:40:27 2025 by rpki-client