Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYyZT4sflB9vAL5eHVdjRrfYXTg.roa
File: sYyZT4sflB9vAL5eHVdjRrfYXTg.roa (raw, json)
Hash identifier: Ms0FZnIxgjG+v2hm4kkUgQcl8poGB0ocenad5WU+p1A=
Subject key identifier: B1:8C:99:4F:8B:1F:94:1F:6F:00:BE:5E:1D:57:63:46:B7:D8:5D:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B867FFA9D90E67908D25CC7F084D760FB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYyZT4sflB9vAL5eHVdjRrfYXTg.roa
Signing time: Tue 31 Oct 2023 16:10:16 +0000
ROA not before: Tue 31 Oct 2023 16:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:7f:fa:9d:90:e6:79:08:d2:5c:c7:f0:84:d7:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 16:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b18c994f8b1f941f6f00be5e1d576346b7d85d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:59:1b:ba:e3:b6:df:4a:cd:db:45:4f:8e:
90:38:0f:3b:8d:8a:9f:24:4d:22:0b:c6:59:b4:22:
b6:d3:e1:dd:eb:75:54:54:8e:0a:d3:90:19:85:c8:
2a:4b:81:b8:73:a0:76:09:4f:71:5e:fb:0b:9f:8f:
e9:43:d9:6f:8f:e6:14:6e:7d:f1:87:b6:91:f2:36:
43:9b:52:98:0b:62:a8:17:d8:55:3d:5b:06:98:c2:
dd:6e:9c:0f:15:bf:10:30:7b:28:6e:ad:a0:77:d2:
d7:04:d4:e0:85:23:fc:48:b9:d1:78:29:92:b2:7a:
80:69:8f:11:f5:1b:dd:c5:fe:7b:56:0b:c8:f7:36:
31:04:42:6d:1f:d0:5f:d1:a1:a0:44:01:53:52:f4:
de:e1:0d:8c:0b:09:e2:59:bb:69:e3:a5:c1:d5:a0:
ac:c1:39:af:cc:da:f1:b4:42:f2:31:bd:b9:23:b7:
05:87:56:9e:f0:36:93:2e:35:73:c0:35:e1:4b:c7:
c0:60:73:fe:42:ce:3b:fa:62:fc:6f:f2:8e:4e:94:
b4:f2:b1:dd:e0:c6:f7:69:31:c6:85:27:3a:ef:bb:
8d:29:94:75:ea:6a:d9:88:b9:3e:26:85:4a:02:8d:
33:83:a6:58:64:a2:0c:6a:b0:f0:77:39:0d:62:fe:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:99:4F:8B:1F:94:1F:6F:00:BE:5E:1D:57:63:46:B7:D8:5D:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYyZT4sflB9vAL5eHVdjRrfYXTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:60:36:0d:bc:f9:4d:6b:c2:55:bb:53:db:40:d8:db:f8:71:
28:8c:74:47:ea:ee:d2:83:2d:fc:b8:96:b8:4c:ae:85:f8:13:
f0:7d:df:8f:56:de:f7:8d:5e:86:fb:fc:e7:80:f2:c0:71:72:
26:34:28:c0:8d:2f:66:93:d7:ea:99:4a:f3:86:5a:27:fc:df:
50:63:cd:31:28:3e:0c:f9:d9:d7:80:be:10:51:4f:99:90:96:
9a:a6:d7:dd:7c:a5:27:97:ee:fb:e4:37:31:70:57:cb:78:d3:
06:e7:40:89:84:f2:54:3c:08:e8:5d:d8:b7:c2:d6:39:38:c6:
b4:17:a1:fd:0f:f5:b0:29:7e:fb:c8:6d:69:bf:9d:85:bf:92:
8a:40:01:56:e1:6a:8e:a2:90:94:43:38:da:84:d3:db:40:c2:
66:75:ba:8e:1a:2c:fb:85:05:6d:a2:a7:3b:77:80:af:fa:db:
68:c4:c8:cb:95:a6:bf:41:b1:0f:7d:9e:d7:5b:4e:88:87:25:
c8:53:bf:2e:92:31:66:e0:38:b9:16:3d:bd:b4:35:b8:8b:69:
1e:3d:ee:3c:5e:c1:a0:7e:f5:04:c6:43:f3:01:5d:bc:cd:7d:
2b:26:2d:5d:60:d5:b3:2a:04:38:f3:61:d7:a3:70:74:ca:0c:
1b:5c:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:29 2025 by rpki-client