Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYThy86I5y5l_YzEREJgbi44HMM.roa
File: sYThy86I5y5l_YzEREJgbi44HMM.roa (raw, json)
Hash identifier: CCssFbRJEy8SKRzUavQC4uBHv5LoTUeXCJu52p0Jp+Y=
Subject key identifier: B1:84:E1:CB:CE:88:E7:2E:65:FD:8C:C4:44:42:60:6E:2E:38:1C:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C02FA5782A464D8D550F7FA42BA4AA0F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYThy86I5y5l_YzEREJgbi44HMM.roa
Signing time: Fri 24 Nov 2023 20:16:50 +0000
ROA not before: Fri 24 Nov 2023 20:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:fa:57:82:a4:64:d8:d5:50:f7:fa:42:ba:4a:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 20:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b184e1cbce88e72e65fd8cc44442606e2e381cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:52:d8:44:09:83:28:9a:17:fe:84:21:23:
bf:54:5e:f0:a2:1f:1a:18:cd:6e:f8:f2:e5:85:c2:
8d:41:39:f9:dc:b7:d5:fe:d6:d2:78:4c:1d:87:fb:
76:90:64:70:7b:36:18:25:fb:11:89:25:04:3c:2e:
53:af:68:cc:71:84:20:05:29:a1:e6:05:98:10:a6:
42:82:41:b9:ef:05:d5:9c:b4:90:e6:7c:99:85:db:
4e:ef:68:d5:b8:71:97:ea:68:30:d6:5e:59:7f:c7:
84:8c:e2:62:e7:84:c8:4f:e3:47:98:4e:a6:8f:78:
16:72:8b:92:65:1a:60:c4:ce:8e:64:ce:06:ba:c8:
1d:a0:61:5b:6b:9a:25:9b:3f:28:21:f2:d2:54:f8:
12:3f:ef:dc:81:93:04:41:fc:9e:6c:29:52:6f:8b:
48:a1:67:4b:63:22:89:19:d9:36:bd:39:79:b7:0f:
81:82:9f:d3:ea:e7:1f:1b:25:2b:9b:02:e0:b1:1d:
48:bd:9e:88:3b:e8:47:f7:2c:52:5f:9c:1a:98:ec:
69:27:78:db:a6:c4:6f:d4:37:ed:79:b3:db:07:73:
1d:94:47:9c:32:01:89:b9:0f:1b:38:fe:fd:cd:66:
7d:64:74:8b:07:f3:48:77:04:d8:bc:8d:84:1a:41:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:84:E1:CB:CE:88:E7:2E:65:FD:8C:C4:44:42:60:6E:2E:38:1C:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYThy86I5y5l_YzEREJgbi44HMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:6d:a5:6e:fc:17:d8:9b:fc:46:23:95:a6:82:d7:43:03:52:
4a:9a:1d:43:5a:56:8b:b8:da:58:be:13:77:62:38:0a:85:d5:
a3:d0:bb:69:4d:3c:08:35:af:18:7c:de:0d:cc:19:f8:7c:a7:
86:d5:b8:f2:c6:f0:e0:f0:47:8d:c3:b6:c3:b8:60:30:36:63:
02:89:de:47:0b:37:2e:56:af:07:9c:08:41:76:23:60:92:31:
15:9a:12:01:37:dd:b2:6e:3d:cd:24:c8:00:95:92:ce:9f:b5:
03:bb:ab:0e:02:98:e1:07:77:ed:4c:b9:1b:8f:a7:6d:13:ec:
64:f5:bf:1a:1c:4b:43:59:da:ea:3b:81:03:e0:d2:03:71:cd:
ca:ff:fb:99:14:52:03:47:e5:fe:4b:ff:8e:9d:0e:46:85:8f:
5d:d6:78:52:fa:a2:d7:45:1f:06:b7:9c:67:24:97:9d:8c:27:
c0:df:74:51:46:94:7f:2b:4f:e2:9e:29:1f:14:2e:a8:95:ba:
58:24:00:bb:a5:cd:37:e5:8a:d2:41:6e:26:66:f4:e6:9d:b0:
9f:9b:90:46:2b:6e:17:62:7d:d0:70:cc:78:1f:5a:d3:51:17:
b7:a5:76:23:0e:cc:9d:2e:33:8c:b3:1e:7b:0e:6d:45:f0:72:
ea:ea:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:55:43 2025 by rpki-client