Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/km_ylbjsOCLznJUPS_1_8mkJ9vA.roa
File: km_ylbjsOCLznJUPS_1_8mkJ9vA.roa (raw, json)
Hash identifier: kcII7AF/71kxmsgh0Z64wsfwQ6Ya4YG+6/zXUDMIgkw=
Subject key identifier: 92:6F:F2:95:B8:EC:38:22:F3:9C:95:0F:4B:FD:7F:F2:69:09:F6:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEB6290ADCAE75DF909851BAF340C7842
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/km_ylbjsOCLznJUPS_1_8mkJ9vA.roa
Signing time: Sun 01 Oct 2023 13:16:59 +0000
ROA not before: Sun 01 Oct 2023 13:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:eb:62:90:ad:ca:e7:5d:f9:09:85:1b:af:34:0c:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 13:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=926ff295b8ec3822f39c950f4bfd7ff26909f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:35:55:f4:d0:70:ce:da:a0:44:84:c8:56:
f5:a7:ab:b9:c7:95:a8:5c:2f:bd:88:ea:a2:c7:d9:
a3:0d:4c:28:59:60:35:1f:30:55:fd:88:94:e4:66:
3a:6c:0d:03:b8:0b:d4:1a:4a:81:89:4e:6a:42:69:
ce:98:b0:7e:c2:c1:ee:50:dc:c0:2e:1b:a6:33:28:
22:bc:6e:79:91:a7:a8:dc:81:29:91:b5:a2:4b:3b:
88:39:0a:e4:ae:15:ac:c9:13:6c:fb:30:39:33:02:
74:38:25:57:c6:e2:d9:1f:09:79:c9:f1:71:95:c4:
cc:80:ad:23:da:cf:a0:4d:c5:cb:66:da:2f:df:d1:
ad:ad:92:1c:06:91:d7:7a:60:ba:3f:b1:7c:ba:e6:
85:8d:af:8c:dd:8e:d7:d4:dc:bb:b1:54:99:8b:75:
e7:4c:be:c6:4b:65:d5:0c:20:13:b6:dd:96:9e:9e:
ac:dd:c8:5c:d6:27:b9:ad:83:6e:33:72:65:b6:c0:
cc:e4:ba:f2:b7:52:ba:f1:76:47:f0:14:f9:da:e4:
47:37:8b:89:39:08:7c:67:b9:da:7f:64:a1:22:c5:
f2:3e:c8:6a:28:16:f2:84:36:46:25:89:47:2a:9b:
2d:db:24:76:44:79:8b:2a:da:d2:8c:67:ac:d9:0d:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6F:F2:95:B8:EC:38:22:F3:9C:95:0F:4B:FD:7F:F2:69:09:F6:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/km_ylbjsOCLznJUPS_1_8mkJ9vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2f:db:9f:a2:51:92:0f:90:76:e1:c1:3f:bf:79:e8:33:a2:
c4:87:01:44:f9:03:11:03:4a:92:db:10:25:d5:e2:27:ed:2a:
18:98:91:e8:d1:74:74:6e:74:70:72:46:7e:08:2f:54:9c:75:
91:31:97:b1:28:3e:c5:c6:c5:ca:c0:b4:45:9c:b0:bd:72:0d:
4c:0f:ef:eb:9c:8a:c8:1c:9c:cf:03:a0:ed:54:ed:82:9f:80:
6e:b3:b9:f9:d6:d1:af:b3:48:9d:5d:2d:99:ad:9f:2d:ef:76:
94:59:87:97:54:b8:6e:a6:01:7d:1c:2b:86:08:93:68:7d:72:
2e:a4:64:9b:3d:ae:e5:c9:21:06:b7:e8:a9:c3:73:1d:63:e9:
47:20:3e:26:6c:e3:48:a4:f3:af:bd:05:39:8e:0a:de:35:a5:
b0:e9:27:7f:75:64:64:91:55:8f:35:f6:37:af:3e:34:d6:a7:
89:d9:1b:09:50:43:92:d6:a3:bb:90:44:f7:d2:dc:ed:94:65:
a2:20:44:eb:5f:21:de:da:80:5f:eb:54:21:74:ad:17:09:37:
b3:80:cf:85:7f:5f:25:5b:6f:3c:04:b9:1c:4c:3a:5e:66:ff:
a4:7a:e7:7f:01:99:c7:f4:94:05:99:60:46:a4:92:91:55:c4:
14:15:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:53 2025 by rpki-client