Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YlTyKK5cYRvbjfqGpN-eAdpxIfk.roa
File: YlTyKK5cYRvbjfqGpN-eAdpxIfk.roa (raw, json)
Hash identifier: mlXxPJPXCjfqUocsLL3H8zmUufurAP1Zo9rIGGgZm84=
Subject key identifier: 62:54:F2:28:AE:5C:61:1B:DB:8D:FA:86:A4:DF:9E:01:DA:71:21:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C728B617DEE6579354B4011DD73C1C40B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YlTyKK5cYRvbjfqGpN-eAdpxIfk.roa
Signing time: Sat 16 Dec 2023 12:13:06 +0000
ROA not before: Sat 16 Dec 2023 12:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:8b:61:7d:ee:65:79:35:4b:40:11:dd:73:c1:c4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 12:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6254f228ae5c611bdb8dfa86a4df9e01da7121f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:eb:ad:2a:34:06:92:1e:37:58:85:bb:51:
b6:5f:9a:7d:0f:09:4b:38:77:5b:c9:2c:e5:f9:a6:
00:e0:9c:bd:cf:0e:c6:3b:79:45:93:50:74:c5:6f:
15:eb:43:81:0b:1f:37:00:1f:29:7a:cf:e8:6f:44:
9c:dc:c1:f7:c0:fd:13:23:28:c8:4f:74:39:df:a3:
88:3b:21:2f:e1:e8:88:64:8e:cc:9e:2a:f2:57:b9:
d7:08:48:cf:84:7a:9c:0d:b0:45:2b:91:7d:b8:1b:
d5:06:24:6b:ee:a4:5c:82:6b:06:8d:2a:08:d5:8a:
6a:2e:88:1f:c7:5d:cf:7d:44:ac:3b:f4:40:60:d9:
15:28:cc:41:dd:74:74:f0:7f:96:93:83:6d:b2:0d:
4c:83:e4:83:02:18:78:8f:b4:29:59:5b:97:e8:5e:
d9:8e:88:dc:1e:51:f6:4a:ac:03:0f:c2:fb:f2:07:
d9:4e:60:ab:a0:b3:8e:c3:2b:bc:a5:ba:d9:83:3a:
36:bb:0d:23:02:68:8c:a0:ce:1b:f5:31:a5:8c:3e:
15:fc:b6:a9:57:b8:3f:1f:58:ec:4e:2d:73:98:94:
69:d7:c6:4f:bf:1d:ef:2e:de:26:80:aa:ce:59:7e:
fc:54:f3:bb:cc:8b:31:cf:4b:91:f5:9f:bc:8c:65:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:F2:28:AE:5C:61:1B:DB:8D:FA:86:A4:DF:9E:01:DA:71:21:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YlTyKK5cYRvbjfqGpN-eAdpxIfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:c5:1f:9c:89:b4:0f:35:38:52:27:19:ae:3d:27:a3:a8:cf:
9e:ab:fd:03:cf:c6:d4:f1:55:fa:58:8f:c6:37:ef:39:0b:f8:
e0:dc:3c:c9:4c:07:3a:6d:22:0b:2d:e4:77:b1:e4:9d:f9:09:
ed:84:b4:97:c7:49:d5:cf:54:18:fc:36:59:83:4a:af:ed:98:
97:80:8f:6e:4c:aa:ad:58:e8:8b:f3:cd:f0:c8:a4:b9:25:02:
bc:91:cc:eb:dd:20:2a:f5:80:f3:e7:cc:92:6e:de:22:e0:e1:
af:e4:61:8a:3e:12:c0:6d:86:b3:31:a5:c1:24:9a:b5:bc:37:
38:1e:88:e2:d5:43:2a:83:99:23:94:9e:a5:8e:dc:8f:ff:7f:
6c:5d:23:41:1e:7b:1a:3f:71:d8:8a:bb:41:dc:f1:09:fc:bb:
f6:53:11:c2:7a:a8:59:d0:77:c4:0b:bd:43:4e:e7:97:71:7c:
81:96:d2:e3:8a:a3:14:71:bd:f8:a3:18:d1:af:f9:0d:d2:01:
8c:ae:41:c9:75:e4:3e:e8:3c:64:78:8f:91:0a:93:fd:1d:90:
06:b0:d9:92:36:9a:4e:e1:dc:fe:2b:71:c6:19:2a:4a:71:59:
74:dd:d8:8f:da:98:2e:15:34:ae:6a:57:b5:65:98:d8:3d:bd:
44:9d:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:01:11 2025 by rpki-client