Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jy4SC-_04DHX12QOSSUFAmHf3c0.roa
File: jy4SC-_04DHX12QOSSUFAmHf3c0.roa (raw, json)
Hash identifier: OXFLeOT2dWBrqd2yuSXfa/bnuKAIHE+IA6uQbLzQW8Q=
Subject key identifier: 8F:2E:12:0B:EF:F4:E0:31:D7:D7:64:0E:49:25:05:02:61:DF:DD:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE181E0D6C5E659F44280698BBCD08478
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jy4SC-_04DHX12QOSSUFAmHf3c0.roa
Signing time: Fri 29 Sep 2023 15:14:59 +0000
ROA not before: Fri 29 Sep 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:81:e0:d6:c5:e6:59:f4:42:80:69:8b:bc:d0:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2e120beff4e031d7d7640e4925050261dfddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:9f:e6:9a:54:e7:fe:37:c3:55:40:29:d4:
dd:3d:b8:76:a6:5e:a5:9e:7c:a3:f8:91:c4:b4:8d:
5a:64:1d:51:c7:d2:71:1e:25:dc:cc:8d:f0:2f:93:
44:e5:ac:14:2a:c5:d9:0a:90:ce:8a:bd:f5:53:d2:
20:4a:cf:60:e9:6c:ba:ca:3d:70:f7:3c:e2:31:ca:
84:48:89:11:0c:17:37:37:50:6a:aa:69:0a:b6:01:
9e:5d:3c:d4:db:d0:c3:a7:c2:e6:b0:e8:be:33:7d:
23:9b:ba:02:d9:93:07:13:f9:df:9b:30:82:56:43:
69:24:51:d6:28:d4:d8:5c:b4:15:58:5c:3b:0a:e5:
55:9f:35:bc:95:70:58:db:ad:16:4d:83:23:d4:53:
ee:6a:42:f9:3d:be:a0:fa:36:36:ee:00:1a:60:ae:
91:a2:2b:52:f1:1d:a6:de:d8:40:c9:71:37:84:15:
cf:35:05:e5:0c:f7:2b:34:40:5b:71:f4:8f:c0:75:
54:b8:a5:23:ce:3b:5a:aa:a0:a0:ff:72:42:0d:cf:
c8:5b:19:0d:0f:e8:74:cb:2f:90:d2:b1:15:84:5e:
bb:33:87:99:65:0c:34:f2:47:90:af:88:6e:fc:af:
9d:13:bc:c4:92:8c:88:3d:65:eb:4c:a5:b6:d4:ef:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:12:0B:EF:F4:E0:31:D7:D7:64:0E:49:25:05:02:61:DF:DD:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jy4SC-_04DHX12QOSSUFAmHf3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:32:46:01:71:e5:ec:3c:55:ac:7b:8e:e0:4a:eb:a1:87:d5:
08:7e:7a:33:a9:a0:b0:44:bc:69:3f:d9:d9:4d:99:da:96:b3:
cd:58:c9:a4:8d:c0:21:fb:4c:a0:45:e2:2f:49:10:dd:3b:56:
e5:7e:92:50:d9:27:ac:80:53:a3:df:b3:13:11:d7:a7:55:dd:
52:58:8a:56:69:4f:de:3e:35:6f:43:d6:24:2d:2d:70:9d:30:
74:7d:8b:65:75:09:bd:67:17:37:a1:9d:d8:91:c6:6a:70:df:
e5:16:e4:eb:33:76:3f:f7:44:65:41:47:f2:9b:61:2c:6e:95:
d3:64:a6:aa:1e:63:23:e5:a5:c3:b5:3f:64:07:65:88:1b:65:
aa:23:d1:4b:50:1a:c4:09:73:25:be:08:7b:e0:67:a5:1b:e7:
07:8a:95:cd:5c:2c:ff:4c:3d:9b:8a:01:fd:de:9c:50:2e:65:
34:5d:c0:c9:90:c9:bb:09:c7:42:40:77:b2:49:70:1c:dd:cd:
40:59:d7:e8:f7:93:d6:79:af:a3:60:66:02:33:db:b5:78:f1:
94:66:aa:8d:ca:a9:a1:43:a4:ce:bc:8f:f0:c0:db:a9:a9:1c:
67:54:65:2a:ea:c6:cb:5c:da:d7:f1:11:1e:09:01:00:1e:24:
7c:b0:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:23 2025 by rpki-client