Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yu-rcqDMQeYR9tfEQaeQ-JWOjYw.roa
File: Yu-rcqDMQeYR9tfEQaeQ-JWOjYw.roa (raw, json)
Hash identifier: ENjUCz0lrca6ukRvSuEk/wVA1EzJcFGMzU2+Sz10ui4=
Subject key identifier: 62:EF:AB:72:A0:CC:41:E6:11:F6:D7:C4:41:A7:90:F8:95:8E:8D:8C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C66521B9D3CC8445DC203C18018B3F8C4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yu-rcqDMQeYR9tfEQaeQ-JWOjYw.roa
Signing time: Thu 14 Dec 2023 03:15:06 +0000
ROA not before: Thu 14 Dec 2023 03:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:52:1b:9d:3c:c8:44:5d:c2:03:c1:80:18:b3:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 03:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62efab72a0cc41e611f6d7c441a790f8958e8d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:83:7d:70:c0:1b:ca:f5:c2:2c:1c:d0:1b:
ee:c7:37:a2:66:9f:d1:b5:71:70:73:1c:53:d0:2f:
1b:92:18:7c:88:06:0d:a9:54:c7:a3:89:4b:c8:5a:
2a:12:f9:94:3d:f6:08:11:86:81:13:f8:bf:fe:4c:
06:fa:80:bb:a4:82:ec:b9:36:a9:a5:ac:bb:7f:df:
92:ce:c2:1a:6c:db:28:04:e3:fa:85:18:ff:f5:ac:
5e:65:f6:ed:0a:d6:bc:81:3f:a7:fb:1a:66:fb:2c:
96:7e:92:ac:f6:ca:45:ce:29:b3:ff:89:17:7e:9b:
b3:1d:85:7c:c6:ff:c1:bb:65:65:da:e9:c1:18:da:
5a:45:42:bb:75:7b:08:02:47:bb:79:7d:6b:29:3f:
e9:d7:bc:45:fc:16:10:f5:c4:66:5c:8a:7e:85:7b:
92:38:27:79:11:24:46:f4:93:bd:31:36:c6:e0:dd:
d6:94:f8:22:14:56:f2:57:e5:9b:6a:77:2b:13:42:
ba:9a:59:32:89:cd:23:8c:d3:b2:ee:b3:8b:a7:5f:
1e:83:d6:3c:2a:3f:bd:16:57:95:ea:16:74:bc:fc:
d8:87:f0:7f:75:2d:44:42:34:9e:85:f0:01:7a:39:
07:d7:6a:29:7a:63:d1:35:7a:b9:6f:a9:13:01:ee:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:AB:72:A0:CC:41:E6:11:F6:D7:C4:41:A7:90:F8:95:8E:8D:8C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yu-rcqDMQeYR9tfEQaeQ-JWOjYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:ed:92:a6:e4:52:fe:ac:16:8a:43:eb:11:5c:67:5b:0a:bc:
27:b0:bc:ae:e4:45:70:93:d5:c6:57:2d:be:7a:9b:b7:44:20:
97:6a:09:c6:98:d7:30:5a:6a:84:7a:c5:96:bd:bf:20:58:5a:
85:44:a6:63:4f:40:17:77:0a:02:6d:77:69:58:99:98:91:29:
e3:95:08:3c:dd:6b:ab:a8:f3:3e:04:fc:9f:7d:7c:41:45:29:
49:9e:9c:9d:2b:a8:ca:4b:d2:ce:99:aa:aa:1e:d4:91:3b:20:
55:bb:fc:1a:64:f2:2a:d1:f8:a5:80:0b:e8:5a:25:5a:28:54:
e4:95:43:6b:7c:a0:f6:65:97:fa:f5:6d:b7:73:97:7b:e0:7e:
17:47:32:a3:0e:ef:cf:b0:a5:0c:1f:90:08:1a:11:04:17:93:
bf:fe:e7:cf:8e:50:d1:9c:c3:ba:87:de:12:2f:34:85:a7:9e:
6f:2e:e5:57:2b:61:4a:2e:d6:5c:93:a4:b2:1f:95:9e:61:61:
05:eb:f1:dc:37:f4:5e:6c:2d:c9:89:f1:aa:03:48:f2:f4:dd:
ae:f0:ef:b8:b0:a4:38:22:16:18:d2:c1:c5:9a:86:53:9c:f1:
7a:88:d0:62:52:23:6b:ad:3c:fc:e7:a9:47:1d:6f:4e:6a:06:
f7:00:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:38 2025 by rpki-client