Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YePMXLqTJTbm4d4QlnvhpSfe-kg.roa
File: YePMXLqTJTbm4d4QlnvhpSfe-kg.roa (raw, json)
Hash identifier: O9kaHIYxeQW+MRc2KgHbpqBvjvzBsPRQUIRC7R9dpJI=
Subject key identifier: 61:E3:CC:5C:BA:93:25:36:E6:E1:DE:10:96:7B:E1:A5:27:DE:FA:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0F6C1759A80EE07B864792A98E821B6E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YePMXLqTJTbm4d4QlnvhpSfe-kg.roa
Signing time: Sun 08 Oct 2023 13:13:43 +0000
ROA not before: Sun 08 Oct 2023 13:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0f:6c:17:59:a8:0e:e0:7b:86:47:92:a9:8e:82:1b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 13:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61e3cc5cba932536e6e1de10967be1a527defa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:d6:a0:a5:de:e4:8b:1e:8a:78:07:cb:18:
4b:43:28:2b:65:08:d9:85:20:91:6a:5d:9a:7b:02:
5d:c5:d2:7c:e3:ad:51:e5:2c:4f:4b:8e:cc:4b:70:
41:e6:78:5f:b7:97:e0:39:55:1b:b6:17:75:60:cb:
7a:dc:e6:05:84:19:eb:f9:c4:8e:28:f8:2a:bb:52:
93:b4:28:4d:79:7c:00:eb:24:b3:28:e1:51:f2:96:
c5:70:11:2d:ed:ab:48:5a:9a:ea:c9:d5:26:46:70:
a8:1f:2b:c5:a5:a7:48:2e:39:95:d8:fd:20:68:b4:
ab:e3:88:41:bb:19:79:d6:5b:4f:30:0b:0c:97:f1:
89:58:f3:9f:68:a4:1f:c8:f4:e1:ba:b1:f8:69:d2:
2d:52:01:fc:22:2f:07:97:60:86:6f:1c:d5:2d:8c:
66:21:d6:48:3f:95:fe:0b:42:b0:8d:e4:0d:40:d0:
1c:db:9d:bd:5a:5e:1e:5d:f9:22:96:5e:ac:ba:6f:
02:1c:56:cb:8e:e2:b3:98:cb:1a:cf:13:81:92:b9:
3f:4f:aa:9d:50:6e:46:1f:e9:d8:b2:46:aa:7c:0d:
02:b8:53:f9:ec:a0:5b:05:14:c3:1b:a9:07:0e:c1:
16:f2:26:2e:75:87:77:8f:7c:b3:69:63:55:49:02:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:CC:5C:BA:93:25:36:E6:E1:DE:10:96:7B:E1:A5:27:DE:FA:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YePMXLqTJTbm4d4QlnvhpSfe-kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:55:9d:c3:87:b8:a5:2d:80:53:fb:c3:7f:d2:b1:15:61:fa:
44:e7:ce:b6:c9:8b:48:70:49:93:d0:ec:b3:9d:da:38:aa:6d:
a2:d7:71:53:05:e2:8d:cf:ff:7a:b7:86:8e:b9:e6:18:7b:6c:
7f:ec:0c:d7:4a:d8:09:10:42:fa:74:86:91:30:87:ca:ef:8e:
51:f6:67:90:d5:70:bd:13:ec:3b:d8:67:c5:d0:b0:44:87:51:
c8:f3:35:29:8c:1e:b6:d5:4e:0c:c2:7d:bd:3d:dc:1b:1b:6a:
23:3c:13:7a:ea:ad:97:06:5e:67:dd:d3:c3:d4:fe:82:44:1a:
e7:d1:c8:95:2f:76:80:a1:61:f7:60:1c:69:6c:b1:8c:f0:83:
38:77:21:d2:30:af:85:e4:77:e9:4f:4b:ee:d9:3b:ad:09:66:
41:29:f6:80:31:9d:8e:6d:2e:55:ca:e5:e7:7c:27:1f:4c:04:
db:a7:d3:01:ae:e0:f7:ca:18:1f:98:bb:e1:55:6b:db:92:ee:
17:94:81:65:b3:3b:22:9e:de:b2:f3:2c:d3:6a:5a:52:c0:a7:
37:48:35:96:4e:29:f6:1d:d6:68:4d:44:cc:e8:a5:17:20:7c:
ab:fc:1b:26:12:90:8c:3c:8c:11:00:ff:88:1d:b4:fc:ae:63:
eb:78:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:57:51 2025 by rpki-client