Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YmsIERpSNdKkyzBru_BPd0FO7R4.roa
File: YmsIERpSNdKkyzBru_BPd0FO7R4.roa (raw, json)
Hash identifier: kh9OqlhTNEDLxfc6+zqkkG9QyAaTEpr5WG6IVLkKDbQ=
Subject key identifier: 62:6B:08:11:1A:52:35:D2:A4:CB:30:6B:BB:F0:4F:77:41:4E:ED:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9D7A3E8D17C777F645632DC647175C4F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YmsIERpSNdKkyzBru_BPd0FO7R4.roa
Signing time: Sun 05 Nov 2023 03:15:16 +0000
ROA not before: Sun 05 Nov 2023 03:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9d:7a:3e:8d:17:c7:77:f6:45:63:2d:c6:47:17:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 03:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=626b08111a5235d2a4cb306bbbf04f77414eed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:52:33:20:16:e3:67:ba:66:23:22:6f:b5:
13:7c:be:5a:db:ea:72:61:78:71:e7:9b:19:39:68:
e6:7b:e8:b5:a6:f2:bb:8d:a6:49:f2:3e:dc:62:08:
62:ee:70:9d:aa:8f:46:36:1d:e2:9c:64:46:30:18:
74:3a:9b:20:a6:da:0d:65:9c:eb:a5:f5:a2:6c:f1:
c1:9d:07:87:2c:ad:44:b2:ff:52:76:fa:fa:c6:d5:
90:b1:ae:22:70:d7:c8:46:73:f8:b9:67:77:a5:12:
e5:04:0d:ef:97:79:77:70:5b:c2:6b:70:45:7e:b0:
31:d2:52:7b:41:09:79:98:ec:d4:5b:7a:57:17:ac:
7a:67:24:f3:0c:64:43:c8:15:73:5d:5d:aa:cd:3a:
17:f3:61:4e:27:11:98:00:ab:31:fc:8a:20:cc:9a:
d8:4b:63:50:78:48:73:ae:ce:4f:11:a2:88:d5:e8:
0a:15:9c:20:b9:41:97:e1:70:8c:90:96:47:48:69:
a3:c2:ff:0b:d5:d0:d7:5e:35:65:27:06:b3:65:f5:
60:ee:34:89:02:53:ca:ec:e3:b7:e9:be:14:10:38:
b4:6b:01:73:d7:60:a9:29:a4:0c:40:5e:05:bd:e4:
b4:f3:de:3a:af:a2:00:d5:27:58:f6:58:d3:31:12:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:08:11:1A:52:35:D2:A4:CB:30:6B:BB:F0:4F:77:41:4E:ED:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YmsIERpSNdKkyzBru_BPd0FO7R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:86:44:7f:1c:ca:eb:d4:9c:d7:f6:50:2b:3f:d0:ec:9b:8f:
41:96:8d:d1:b1:69:13:94:4d:32:f4:d8:94:d2:70:11:93:5a:
44:3e:60:a1:0d:3f:d2:be:67:5d:75:67:ed:c8:c9:22:59:8b:
da:50:52:49:f9:b7:14:78:08:a5:cc:87:2d:61:74:90:51:0d:
3c:47:0b:1a:4f:09:34:09:0f:76:d7:47:87:c4:c5:5f:0d:14:
6a:05:70:ab:52:da:4b:72:cd:34:0b:be:cc:ee:84:be:ac:aa:
c5:ea:e0:7f:67:ba:b7:0f:c4:cc:e3:14:c0:0c:ea:76:7f:df:
59:6e:05:9b:e2:2c:6d:a7:c8:3a:e7:e1:cf:08:24:c5:20:07:
80:c0:9e:7e:6c:6e:29:d4:8e:15:a3:71:4d:37:e1:89:26:cb:
73:10:31:1a:19:25:ff:b3:2c:b6:8e:ca:be:7c:4f:72:26:17:
d9:9f:6f:20:42:65:95:77:c6:4d:69:c7:21:e4:07:e3:d4:d9:
aa:eb:e5:d6:67:0a:79:37:8c:e1:dd:c4:35:5c:ca:0b:f7:c1:
ae:f1:84:f8:61:64:7c:fd:93:fb:c6:49:fa:11:a4:c3:d1:b9:
10:bc:0a:39:83:af:d3:cc:ee:08:ea:e1:c8:2a:34:36:6a:bb:
88:26:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:21 2025 by rpki-client