Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YtUy8N39a78LXvyBm_NDoU8I9O8.roa
File: YtUy8N39a78LXvyBm_NDoU8I9O8.roa (raw, json)
Hash identifier: n64c1XJcI42ESOb9bv9Y8qG3eDX0kZLFXuu7XitDmWQ=
Subject key identifier: 62:D5:32:F0:DD:FD:6B:BF:0B:5E:FC:81:9B:F3:43:A1:4F:08:F4:EF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B574A1A041862D6A6B3CDBF60FB6702F5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YtUy8N39a78LXvyBm_NDoU8I9O8.roa
Signing time: Sun 22 Oct 2023 12:09:15 +0000
ROA not before: Sun 22 Oct 2023 12:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:4a:1a:04:18:62:d6:a6:b3:cd:bf:60:fb:67:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 12:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62d532f0ddfd6bbf0b5efc819bf343a14f08f4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:93:c8:b5:ee:42:3d:3d:3b:3e:5b:ad:30:
0d:2e:5f:b6:ae:6b:41:da:ab:be:93:93:46:b6:31:
26:c5:f2:8c:d0:c0:a7:cc:bf:9e:96:73:e5:61:52:
8f:76:dc:9e:37:22:11:b2:90:0a:47:29:9b:be:db:
ef:35:30:11:21:e4:10:65:3b:f7:30:45:df:00:11:
6a:18:72:e6:a6:15:ef:52:42:4a:1c:63:3e:56:6e:
d9:03:ee:ec:c8:31:8f:27:fc:b8:1e:9c:b1:71:5e:
f6:56:59:40:d4:5e:85:c4:25:66:55:fb:8c:3a:14:
cf:a6:b3:32:61:20:9c:ea:65:36:ff:13:73:b1:20:
4c:d9:26:71:5d:a3:72:a8:73:9a:28:db:1f:0d:3c:
98:91:29:af:1e:6f:ba:1c:b5:57:05:91:79:a1:99:
ef:63:37:c5:6d:22:e4:ea:9b:c5:ca:78:19:29:c2:
9c:b8:fa:f7:cd:2c:b8:6d:f5:d4:e9:3c:a7:ad:8a:
cf:dd:24:98:00:bc:1c:ab:83:29:19:ba:49:9f:f6:
e7:4c:38:81:d0:79:1a:45:f3:e3:08:4d:01:c1:e7:
a5:c0:e1:e6:2e:37:3e:44:c6:c0:a5:bc:fa:f3:aa:
16:3a:73:a3:99:c9:e4:9d:86:8a:ad:ca:c8:4a:d4:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:32:F0:DD:FD:6B:BF:0B:5E:FC:81:9B:F3:43:A1:4F:08:F4:EF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YtUy8N39a78LXvyBm_NDoU8I9O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:92:3f:97:33:99:a1:0a:18:d9:da:b7:4e:32:ca:8c:e1:70:
0d:49:09:11:73:8b:52:9a:87:89:6b:d4:fc:bc:a3:ad:b7:eb:
e9:5f:57:aa:9b:c4:02:85:76:69:c8:54:d1:94:87:1c:c2:03:
c8:65:a3:da:8a:43:8b:7b:0d:2c:26:a4:1c:c7:54:23:10:a3:
82:41:10:9a:c6:85:27:38:00:28:8c:61:cf:e6:99:d8:c8:f8:
7e:8c:28:09:2d:13:b0:4b:f8:4f:9b:26:61:53:b9:d0:3c:1f:
d0:dc:7a:35:8e:f5:9c:a1:05:60:25:30:2c:aa:67:1a:a9:be:
d6:3b:44:0c:4a:c4:94:c9:5c:08:f9:fa:8f:52:16:35:10:af:
4d:5b:6c:cf:5a:11:61:02:7b:d8:67:83:9c:19:01:24:8b:61:
04:43:f8:37:52:9d:d1:05:10:66:4d:24:3c:5c:66:8a:db:2b:
f0:63:a6:ea:f8:46:6e:8d:98:03:8b:2a:c2:b9:10:82:4f:63:
b6:82:22:e0:03:d0:00:93:0d:c3:b5:cd:58:7f:19:cf:a3:83:
04:a1:0c:e2:f4:e6:9f:c1:f6:82:34:c5:3a:b3:60:52:91:71:
8a:a3:45:5b:e9:48:5f:57:77:9c:50:5e:54:cd:7d:36:8b:03:
f8:b6:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:05:33 2025 by rpki-client