Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kYOykjXV_tkFzvwjxKEpEkk4JRQ.roa
File: kYOykjXV_tkFzvwjxKEpEkk4JRQ.roa (raw, json)
Hash identifier: ZrS9wWWyk2lSc8eo3NydTmRsH5JNIaKedW+hWGKXSgg=
Subject key identifier: 91:83:B2:92:35:D5:FE:D9:05:CE:FC:23:C4:A1:29:12:49:38:25:14
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7178AD4F4A0E7A7972B196C9EE5C5394
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kYOykjXV_tkFzvwjxKEpEkk4JRQ.roa
Signing time: Fri 27 Oct 2023 14:10:15 +0000
ROA not before: Fri 27 Oct 2023 14:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:78:ad:4f:4a:0e:7a:79:72:b1:96:c9:ee:5c:53:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 14:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9183b29235d5fed905cefc23c4a1291249382514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:4a:a6:54:37:4b:7e:59:98:3c:fe:35:66:
e7:53:b6:4e:65:75:86:21:a4:ad:ab:e4:03:25:a5:
ea:ea:df:41:13:9d:c8:3f:1d:9d:ef:1e:cd:c6:a0:
56:e0:98:22:fd:84:cc:ed:5a:30:fe:45:c7:64:a0:
65:a2:90:72:46:fb:f4:0d:30:a1:72:b6:b4:03:d8:
88:f4:d2:5f:6c:e8:0e:96:99:f1:fd:d1:f7:6f:4f:
96:63:57:a2:cc:b8:aa:a9:9a:b0:a8:e3:ca:f7:e6:
3e:96:5c:f2:5a:69:c8:7b:81:6c:81:8c:d9:41:79:
5b:cb:a0:2d:89:3e:7c:0a:b9:4e:e5:fe:19:1d:47:
1a:05:16:38:35:f6:81:1e:3d:8f:df:b9:78:03:f6:
44:89:46:08:d8:87:09:02:eb:50:36:b4:6e:c8:45:
09:a8:4d:ea:05:64:af:99:62:7d:7c:3d:d2:32:0a:
66:7c:7b:4c:ce:26:b9:a2:f9:6e:bc:07:2d:06:71:
04:e2:da:6d:ec:ba:19:8b:31:1e:1f:f3:e3:5e:51:
eb:02:9e:49:76:fd:1f:0d:59:cd:db:85:81:f7:6c:
8d:fe:54:d9:0c:33:f3:e7:57:a0:1e:57:b1:20:2e:
09:db:4e:22:4e:67:1e:a8:c5:5a:fa:e7:f6:b9:af:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:B2:92:35:D5:FE:D9:05:CE:FC:23:C4:A1:29:12:49:38:25:14
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kYOykjXV_tkFzvwjxKEpEkk4JRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:66:00:51:80:a1:61:d7:72:2c:08:2f:c6:51:e8:12:4c:f6:
b4:8f:5b:f2:ea:c2:e9:a7:26:28:e6:2b:4c:8e:50:8c:00:05:
e9:de:73:7d:64:93:f8:30:f5:76:ee:24:57:79:b3:ff:e3:60:
31:34:f0:fe:a0:39:5a:6e:bc:75:c9:26:4d:d8:ff:96:d9:df:
45:38:65:2b:31:5c:db:83:fd:c6:d6:b2:d3:f2:fb:b9:e1:e1:
f7:df:bc:44:f1:28:e6:97:1a:03:32:e4:0a:b6:a7:11:d2:72:
59:e6:1e:d9:04:e3:f6:62:09:d7:99:da:81:e6:a4:0a:cc:5f:
a2:64:25:ed:cf:3b:1f:b0:f0:4d:a7:66:f0:ba:d9:67:d1:4a:
54:13:49:0e:f4:a0:37:72:1c:77:b3:e8:b0:24:49:df:7a:d0:
23:ff:41:d4:e3:e2:30:f0:c7:07:f1:cd:d7:e7:96:31:dd:1f:
b1:4f:d0:33:c6:1c:ac:10:de:52:e1:e6:e5:22:dc:a7:d6:16:
d6:10:91:64:61:55:59:27:ab:f6:da:ae:d0:c9:d5:bd:83:83:
2e:cc:d3:4a:c3:d9:96:e7:13:8a:e3:0e:16:7d:26:f6:f9:53:
81:4a:2a:32:90:69:89:a2:54:05:24:49:cc:33:29:fb:31:c8:
00:02:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:06 2025 by rpki-client