Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dYEx2ZQj9Wcn-m2Ghp31UJWCYYs.roa
File: dYEx2ZQj9Wcn-m2Ghp31UJWCYYs.roa (raw, json)
Hash identifier: QH0Xp0NEPturlMxKPtXUnEZnSbNa1afg27916rLbGd4=
Subject key identifier: 75:81:31:D9:94:23:F5:67:27:FA:6D:86:86:9D:F5:50:95:82:61:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD987C0DE59BC8B6B9E6B099D29E86760
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dYEx2ZQj9Wcn-m2Ghp31UJWCYYs.roa
Signing time: Thu 28 Sep 2023 02:04:27 +0000
ROA not before: Thu 28 Sep 2023 02:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d987:a04d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:87:c0:de:59:bc:8b:6b:9e:6b:09:9d:29:e8:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 02:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=758131d99423f56727fa6d86869df5509582618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:85:2f:9b:cf:6c:3e:91:22:f0:0d:12:db:
24:67:aa:ec:ad:b5:6b:b2:a5:1a:01:33:3a:bc:eb:
0f:bf:92:5a:3c:d5:fa:18:b1:83:ad:ee:f3:42:f6:
27:40:ce:55:73:7b:39:df:aa:06:d9:0e:ad:7e:60:
22:e7:56:8f:e9:6a:a6:a8:de:07:d5:9a:cc:25:3f:
08:c8:bd:c9:d7:44:65:6d:7f:7c:47:15:13:dc:6c:
50:51:96:0c:09:7b:bf:a1:1f:a3:88:78:3f:72:f5:
38:ae:66:8e:80:9f:06:0b:de:fe:cf:61:c1:19:f1:
a4:9c:89:bc:b2:7d:e7:94:16:b2:93:16:b4:53:6c:
7d:69:c3:0b:b2:52:bf:d0:00:da:c0:d6:64:77:6f:
65:5f:ef:2a:c0:5b:2f:6b:85:47:2a:73:f1:6b:be:
de:df:fc:7c:0e:12:d7:92:2f:85:11:d7:40:46:98:
73:e6:73:3e:89:c0:bb:b8:35:38:e4:17:a3:67:9d:
c0:e1:e2:57:55:94:bc:ed:3a:ad:7d:9b:e7:aa:cc:
be:46:e1:c6:ce:12:db:51:8c:cd:75:93:45:22:09:
ed:fe:aa:f7:54:47:82:05:8b:1d:55:75:17:1d:42:
b3:17:8f:0c:a0:f6:68:ce:47:ca:95:c2:44:51:eb:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:81:31:D9:94:23:F5:67:27:FA:6D:86:86:9D:F5:50:95:82:61:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dYEx2ZQj9Wcn-m2Ghp31UJWCYYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:2a:9e:b3:f1:30:3a:6e:a8:ef:41:08:70:34:b1:98:56:f4:
9b:0a:e4:a6:b0:b7:72:e3:37:20:6b:d0:e5:b9:62:27:37:c7:
dc:01:1c:cd:0d:8d:58:94:aa:74:1a:d3:84:f5:69:b3:09:ef:
3a:bb:05:99:c6:12:72:b7:34:cb:c4:bb:20:ca:4d:26:96:d9:
ae:16:cf:6c:1b:e8:43:ac:15:16:76:aa:68:6d:f9:b7:d6:5f:
c1:28:bc:b9:ce:3e:d6:b8:07:d9:47:c5:a3:16:42:ba:be:ea:
67:1f:3c:37:c5:85:48:09:c5:6c:93:f2:25:56:93:6f:a5:18:
3d:26:5c:1f:37:f2:e6:7e:6c:13:8c:3a:66:db:d8:54:aa:63:
d2:1a:84:d1:de:ce:30:35:eb:94:bd:41:49:7e:7f:d3:51:3d:
e8:b4:aa:3d:8b:f1:ae:b7:28:27:e3:20:f9:bd:9e:06:e5:33:
5c:c4:c7:f3:8c:a6:1e:9e:f1:9f:26:ac:5e:6a:c5:be:29:ce:
9f:f1:db:e4:2e:b0:9d:e7:15:22:c8:96:dd:69:07:0c:1e:c0:
74:cb:da:1c:10:54:ff:ff:c0:10:9f:c7:4d:75:1e:ad:e3:8a:
d0:fd:fa:ba:95:97:87:ac:62:02:88:8c:87:bf:9a:c3:b9:02:
eb:d2:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:34 2025 by rpki-client