Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZPZp8fPHaYnPUIyCL7MSXby6bs.roa
File: YZPZp8fPHaYnPUIyCL7MSXby6bs.roa (raw, json)
Hash identifier: m4NFzZsBaUcLzhsGvjP48ADtPdw2GAnD8mtyZSDyuTE=
Subject key identifier: 61:93:D9:A7:C7:CF:1D:A6:27:3D:42:32:08:BE:CC:49:76:F2:E9:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4D35CDAAC34D024E1DC57D944CE21E35
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZPZp8fPHaYnPUIyCL7MSXby6bs.roa
Signing time: Sat 09 Dec 2023 06:13:40 +0000
ROA not before: Sat 09 Dec 2023 06:13:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:35:cd:aa:c3:4d:02:4e:1d:c5:7d:94:4c:e2:1e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 06:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6193d9a7c7cf1da6273d423208becc4976f2e9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:7c:0b:5b:0d:87:65:23:c9:59:67:bf:48:
ad:ad:a5:b9:6a:1f:ef:7d:18:a9:1d:7a:d0:73:85:
9f:5a:dc:32:4d:91:6c:85:ef:20:0f:0e:8a:7d:de:
2a:f5:15:b7:47:47:68:4b:c1:79:a8:4e:2f:73:8d:
ff:1d:5b:3a:f0:ca:ac:b2:09:8d:25:1d:11:8f:a4:
e3:d4:2e:5b:d5:3f:a5:dc:f0:8a:8d:2d:6d:d6:9f:
67:59:13:fd:40:95:87:1f:61:4d:5a:db:07:e3:c4:
35:f3:ab:69:b3:f0:55:b3:8a:93:03:8c:d8:f6:bd:
2a:a3:14:2d:1c:7f:d9:ee:a4:25:05:f1:00:3a:20:
fe:70:2a:00:9f:5a:1c:30:c9:eb:87:2d:e7:c9:7b:
eb:ff:46:da:33:31:b4:71:75:c6:ff:3c:47:41:26:
bd:48:72:29:31:1b:4e:48:75:d7:61:84:43:c8:8a:
09:ec:63:17:d4:60:d7:8e:71:c6:01:eb:2b:ad:9e:
d1:9c:bb:90:0c:0d:c2:68:4b:fa:be:b5:ea:07:c9:
78:05:48:01:99:84:f7:33:98:7b:6a:43:4e:7f:f8:
0a:e2:d5:0b:9e:fe:9b:36:df:bb:3f:e9:00:04:55:
d6:2c:77:19:d9:94:d0:a1:bc:50:80:e6:97:59:6f:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:D9:A7:C7:CF:1D:A6:27:3D:42:32:08:BE:CC:49:76:F2:E9:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZPZp8fPHaYnPUIyCL7MSXby6bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:66:99:fa:24:cb:80:32:c9:5d:e4:ab:3d:aa:6b:1c:f0:53:
02:e9:79:a4:5c:f9:5f:eb:87:32:15:59:34:85:7d:aa:a9:7c:
17:12:58:dc:37:a2:6a:45:7e:2e:7a:16:30:1a:42:a3:4d:69:
c0:7f:5f:88:a1:6c:57:ec:42:e0:41:6b:6e:f6:9a:80:91:dc:
59:cc:b7:43:da:60:c0:ac:52:ec:da:da:81:1b:0c:40:21:32:
64:42:8e:7b:e8:fd:86:79:1a:02:6e:2b:0e:1c:ee:ea:c0:d3:
03:62:dc:66:e1:b4:86:8f:70:ba:59:8d:b6:f5:bd:9a:0a:06:
4d:93:18:b2:03:51:63:6e:04:3f:4c:0e:61:69:3e:18:7e:6c:
69:60:2b:60:a1:f8:b1:3d:7c:21:ce:b4:73:5d:0e:68:d0:cf:
5c:a9:5a:2f:85:99:4f:e5:02:f9:a4:d1:e1:05:33:6e:c2:68:
16:80:6e:a2:9b:be:bc:b3:b7:95:40:d4:47:00:e2:70:8d:76:
cd:fd:77:f2:10:ad:8c:57:c3:79:c1:5c:60:0c:00:54:e4:0b:
df:37:de:ff:7a:9f:1c:88:37:c7:cc:0d:bd:a3:d5:0f:a5:dc:
8e:84:d6:3f:43:d9:83:1c:1c:d4:1c:94:be:bf:03:c5:9b:c5:
89:78:00:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxNNc2qw00CTh3FfZRM4h41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA5MDYxMzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTkzZDlhN2M3Y2YxZGE2MjczZDQyMzIwOGJlY2M0OTc2ZjJlOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUd8C1sNh2UjyVlnv0itraW5ah/v
fRipHXrQc4WfWtwyTZFshe8gDw6Kfd4q9RW3R0doS8F5qE4vc43/HVs68MqssgmN
JR0Rj6Tj1C5b1T+l3PCKjS1t1p9nWRP9QJWHH2FNWtsH48Q186tps/BVs4qTA4zY
9r0qoxQtHH/Z7qQlBfEAOiD+cCoAn1ocMMnrhy3nyXvr/0baMzG0cXXG/zxHQSa9
SHIpMRtOSHXXYYRDyIoJ7GMX1GDXjnHGAesrrZ7RnLuQDA3CaEv6vrXqB8l4BUgB
mYT3M5h7akNOf/gK4tULnv6bNt+7P+kABFXWLHcZ2ZTQobxQgOaXWW/TewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGGT2afHzx2mJz1CMgi+zEl28um7MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWVpQWnA4ZlBIYVluUFVJeUNMN01TWGJ5NmJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMNmmfoky4AyyV3kqz2q
axzwUwLpeaRc+V/rhzIVWTSFfaqpfBcSWNw3ompFfi56FjAaQqNNacB/X4ihbFfs
QuBBa272moCR3FnMt0PaYMCsUuza2oEbDEAhMmRCjnvo/YZ5GgJuKw4c7urA0wNi
3GbhtIaPcLpZjbb1vZoKBk2TGLIDUWNuBD9MDmFpPhh+bGlgK2Ch+LE9fCHOtHNd
DmjQz1ypWi+FmU/lAvmk0eEFM27CaBaAbqKbvryzt5VA1EcA4nCNds39d/IQrYxX
w3nBXGAMAFTkC9833v96nxyIN8fMDb2j1Q+l3I6E1j9D2YMcHNQclL6/A8WbxYl4
ACE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:21:15 2025 by rpki-client