Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YbSPXH_y_XydB5BTQtecxH8l5B4.roa
File: YbSPXH_y_XydB5BTQtecxH8l5B4.roa (raw, json)
Hash identifier: RLLOUJlc9QoQXpFsUND2hlRN5AJWGieoYr5Uv8IbPSs=
Subject key identifier: 61:B4:8F:5C:7F:F2:FD:7C:9D:07:90:53:42:D7:9C:C4:7F:25:E4:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2405B1576FEFA834A088485B00974A05
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YbSPXH_y_XydB5BTQtecxH8l5B4.roa
Signing time: Fri 01 Dec 2023 06:16:41 +0000
ROA not before: Fri 01 Dec 2023 06:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:05:b1:57:6f:ef:a8:34:a0:88:48:5b:00:97:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 06:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61b48f5c7ff2fd7c9d07905342d79cc47f25e41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:73:39:70:93:6f:00:08:fd:6b:37:98:bf:
2f:54:c0:a1:e9:b9:eb:a0:97:e9:9a:73:d8:51:03:
9d:de:ab:e4:fa:fe:cc:5c:32:18:46:14:d0:d3:9b:
bc:25:64:1b:86:5e:4f:31:02:6c:3c:91:c0:01:e3:
ea:31:96:46:e7:94:a3:9e:3c:06:b6:9f:70:dd:63:
7e:5b:74:b4:90:c3:2d:dc:07:e4:2e:cd:1c:e5:0c:
42:da:4f:80:2d:72:56:c9:e2:05:60:0b:a3:d9:a3:
13:fb:d0:ef:8b:be:0c:46:71:bd:9e:e7:6d:24:3e:
17:a1:9d:fe:22:35:2e:4e:73:00:c5:b7:fb:ce:4a:
bc:8b:aa:1b:04:59:19:d4:99:6d:5b:fb:27:4c:f6:
d0:43:02:4e:6b:bd:d4:4f:71:48:73:2e:8e:31:47:
4b:3d:0b:01:3a:16:bd:02:b9:42:30:54:d9:ac:fc:
32:de:59:28:2f:09:1a:5a:ce:02:eb:dd:87:af:23:
03:6b:37:cf:ca:c0:4a:a4:28:c5:56:11:02:ba:10:
88:ca:89:ad:73:c3:70:db:82:e6:f2:ef:41:ed:08:
da:6e:cf:4d:0f:64:54:d3:45:49:cb:1f:23:8b:9a:
52:59:04:8e:ed:84:a7:12:0e:86:80:a6:f6:dd:3c:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B4:8F:5C:7F:F2:FD:7C:9D:07:90:53:42:D7:9C:C4:7F:25:E4:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YbSPXH_y_XydB5BTQtecxH8l5B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:2f:79:fb:a5:d2:99:7d:ef:55:d6:64:a8:89:76:35:a3:bf:
74:82:ac:49:40:a6:14:41:15:fb:18:8f:20:5d:27:61:7e:c3:
21:8d:05:00:e6:ec:c0:29:cd:4f:76:cf:8d:90:07:bd:50:af:
e4:d0:e0:1e:16:fa:00:74:2b:ce:3a:09:f8:ac:87:f1:ea:33:
49:16:e6:88:b7:21:84:5f:4d:52:48:9c:35:45:44:20:4d:59:
e0:9b:51:78:a2:63:39:62:6b:8b:11:8a:a1:97:d9:a3:0f:6d:
5a:71:f4:9f:d2:bb:d8:0b:5d:cc:99:b2:64:bd:f6:7a:82:0c:
4f:a7:91:ed:d6:34:5a:69:99:2f:92:7c:77:03:ca:e7:d1:63:
ab:16:6c:db:a7:88:85:bd:4b:df:6b:e1:50:59:69:bd:de:36:
bd:e4:75:71:d8:a5:96:af:f1:71:ba:d8:2c:43:9e:aa:ef:03:
31:8d:14:af:5c:ea:7f:47:0c:34:5e:5a:c2:49:b3:62:ee:8c:
86:6b:93:ef:1f:28:3b:e1:a8:d5:1d:e9:4a:8a:3f:a9:69:6b:
47:66:97:c9:9b:0c:d3:46:85:8a:98:ee:29:e4:87:a9:09:f5:
f4:9f:90:40:d3:46:2e:7e:0d:42:30:2f:09:3d:a9:78:90:5c:
80:31:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:09 2025 by rpki-client