Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YxU3BOArk1btqLpgUAso0xCK5MQ.roa
File: YxU3BOArk1btqLpgUAso0xCK5MQ.roa (raw, json)
Hash identifier: FhHvJLJng8ZiSZSM+naSZCmt4JIeiHBqN9uSR6XtguA=
Subject key identifier: 63:15:37:04:E0:2B:93:56:ED:A8:BA:60:50:0B:28:D3:10:8A:E4:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF0852335700422C91E47CB66C4A03565
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YxU3BOArk1btqLpgUAso0xCK5MQ.roa
Signing time: Mon 02 Oct 2023 13:12:51 +0000
ROA not before: Mon 02 Oct 2023 13:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:85:23:35:70:04:22:c9:1e:47:cb:66:c4:a0:35:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 13:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63153704e02b9356eda8ba60500b28d3108ae4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:01:a1:3f:a2:50:8f:09:9f:18:c0:fe:7f:
b1:9a:58:38:11:65:43:7c:4a:6e:2b:aa:02:1b:41:
97:5d:c2:73:68:21:ec:a1:30:66:b6:1f:79:0b:e1:
0b:dd:d6:b3:f4:5f:1a:15:e3:b3:35:6d:e9:f6:aa:
26:a4:d1:6f:1b:a6:23:dd:bb:aa:9c:70:02:a1:05:
9d:a7:77:bc:7d:f0:9c:64:45:9c:07:4a:77:bb:cd:
65:76:52:43:cb:c2:e5:81:e0:d9:ba:e1:2d:86:e3:
c5:55:31:47:d1:f3:95:35:19:e5:09:40:1d:2d:69:
d3:2c:0a:fa:3c:fc:b6:b1:78:3b:bb:45:e7:10:06:
06:8e:14:a4:0d:65:72:c4:d0:3d:64:6b:2c:7c:ab:
79:f7:6f:5f:21:08:72:2b:f8:57:c1:24:3e:67:b9:
96:d1:dc:08:99:eb:5d:a8:8c:a5:e1:08:40:a5:40:
b4:b2:0c:99:5d:8e:9c:0d:32:cf:e0:b2:57:29:b4:
8d:27:07:65:af:c5:a2:23:c5:a7:de:89:b3:0b:02:
e8:35:55:aa:78:78:ca:6b:f7:6a:69:36:52:c0:23:
1a:25:d2:ad:1d:07:14:e9:fa:51:0e:7e:94:f9:3b:
65:4f:a0:1b:40:db:35:25:70:7d:03:58:a9:7e:19:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:37:04:E0:2B:93:56:ED:A8:BA:60:50:0B:28:D3:10:8A:E4:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YxU3BOArk1btqLpgUAso0xCK5MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:1e:ff:e1:16:06:ac:43:26:5c:58:c8:54:7b:08:4a:0f:df:
bc:e2:13:1b:e3:4a:f2:1a:d3:01:1b:4e:d5:13:62:46:e4:f5:
c6:24:02:14:92:d6:30:f1:50:25:5d:20:2b:a5:1c:97:a8:f3:
ae:b3:b7:eb:7d:fe:02:0f:2b:d0:ec:92:48:df:1f:72:f7:2c:
f6:6e:0d:62:e6:d8:2d:3d:ff:23:75:da:72:f9:96:f3:c2:9a:
ca:3d:a9:db:79:50:cd:6d:88:ff:1e:4a:56:41:e4:06:80:70:
89:1f:96:56:b8:d6:1e:17:c0:2f:b5:70:98:03:12:79:ce:54:
9f:2d:ec:54:6b:9f:20:33:cf:92:8e:f0:25:a6:5e:a1:ce:1c:
1c:3a:df:34:05:a9:1d:df:8a:cc:51:7e:c2:b1:67:b5:64:55:
aa:bf:f0:f4:b8:2b:81:3c:93:dc:2a:70:d9:dc:d8:48:a5:f4:
0f:76:4e:23:cc:9b:88:d3:24:59:9e:75:42:96:80:b7:17:80:
dc:72:c2:ed:74:00:4c:99:17:64:d6:6d:db:e4:ad:95:2f:1c:
a0:a1:9b:13:8c:64:b3:fe:d2:62:d9:1e:e6:a1:19:61:d7:07:
52:a7:28:b4:29:ec:56:2f:a0:c1:35:1c:15:da:34:70:1d:09:
87:c3:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:35:07 2025 by rpki-client