Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YxSeMBXGZ74d86z-YfNwW6BBbnA.roa
File: YxSeMBXGZ74d86z-YfNwW6BBbnA.roa (raw, json)
Hash identifier: f0Q7I8GRcHxSzyCmqWbM/zph5pYlrHL+9ce5pkuT5fQ=
Subject key identifier: 63:14:9E:30:15:C6:67:BE:1D:F3:AC:FE:61:F3:70:5B:A0:41:6E:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C03D5F732108878D7F40FEDFDC10CAC34
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YxSeMBXGZ74d86z-YfNwW6BBbnA.roa
Signing time: Sat 25 Nov 2023 00:16:43 +0000
ROA not before: Sat 25 Nov 2023 00:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:d5:f7:32:10:88:78:d7:f4:0f:ed:fd:c1:0c:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 00:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63149e3015c667be1df3acfe61f3705ba0416e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:f9:12:66:44:86:b5:4c:fc:90:05:d8:1b:
a9:bc:b2:08:72:cc:87:6b:43:3c:f0:c8:2a:eb:af:
32:99:57:b0:14:8d:17:d8:32:2c:2a:a5:42:e5:e7:
32:56:85:47:05:a8:37:2e:45:fa:e6:f9:cf:27:52:
14:ae:fe:1e:69:f0:cd:c0:e1:63:d9:f4:cd:b9:55:
19:e9:07:85:64:2b:a3:a7:33:2c:da:e1:7d:ce:2d:
27:a2:c5:5e:a4:ff:87:fa:0d:16:85:8d:0d:ce:a6:
23:20:42:38:f9:dd:87:5a:0a:16:65:17:d5:21:67:
a5:81:18:dc:cc:8c:d0:70:e9:95:97:b5:e4:3d:5e:
95:9f:e0:11:5a:c3:9d:5d:b5:ad:d3:0a:32:e7:2d:
10:76:f1:5e:30:b1:eb:6f:b5:fd:28:dd:32:6d:31:
bd:0c:50:3d:a5:91:0d:a0:0e:f8:f6:12:38:2e:3a:
5d:28:51:ae:61:f6:e0:bf:37:0b:a1:bb:1f:fa:03:
96:f9:02:d0:19:3e:e2:5d:f6:b4:f9:c1:b7:6d:51:
5e:09:d0:9c:8f:4c:b0:92:74:4f:5e:d0:40:25:39:
12:df:ca:50:08:23:88:22:21:0c:55:03:d2:a3:34:
6b:5e:d2:40:34:a9:b7:e5:80:5f:30:c0:18:5e:e2:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:9E:30:15:C6:67:BE:1D:F3:AC:FE:61:F3:70:5B:A0:41:6E:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YxSeMBXGZ74d86z-YfNwW6BBbnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:55:ee:8f:51:95:3d:61:db:71:ec:4f:1e:bb:57:ce:e5:8f:
c1:f3:08:2d:04:ff:54:a2:ec:04:66:e5:fb:27:50:52:d1:b2:
59:ea:93:3f:fd:9f:d9:4f:d9:85:28:15:7f:9a:ce:9d:4e:a0:
01:12:8e:d9:65:48:bf:61:f2:29:41:2c:77:a0:86:93:ea:28:
98:28:d2:15:9b:bd:a0:52:e3:08:8b:15:54:9f:63:db:f3:45:
91:b6:f3:17:ff:19:b6:fe:c8:74:8b:36:5b:c1:bd:a6:87:29:
fc:f5:62:ca:f9:ca:13:7d:54:bd:cd:ae:5e:34:8b:2a:8f:88:
22:54:8e:4c:b3:b7:a3:b6:7c:20:f4:6c:ce:3c:10:ee:c1:cd:
f5:24:6f:2d:d7:7c:eb:88:ba:be:f8:12:c1:38:a4:bb:c5:1a:
21:94:39:74:1e:f7:d2:87:30:0d:91:c0:78:45:4c:74:7c:b4:
05:7f:3e:e7:3e:57:68:e9:30:15:11:25:75:ca:9f:62:b3:89:
d7:3a:08:0a:bd:57:ff:2d:50:9c:db:f7:2f:34:0f:f2:d9:db:
fb:a1:8f:38:78:b3:62:0e:8e:b4:88:3d:db:fb:ca:22:9e:fb:
5b:54:53:d3:06:c6:01:c3:35:5c:42:21:cb:d9:e2:80:cb:7c:
df:6d:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:51 2025 by rpki-client