Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y-DZ7TkU6Bjnzdo61fwnu7LHy2Y.roa
File: y-DZ7TkU6Bjnzdo61fwnu7LHy2Y.roa (raw, json)
Hash identifier: JsX5qmQm0oHaGaH6pRrpFddFaYzHjP621+KtP3MyxPI=
Subject key identifier: CB:E0:D9:ED:39:14:E8:18:E7:CD:DA:3A:D5:FC:27:BB:B2:C7:CB:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B57F638DEEBCB8A9553D0632B3C0345BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y-DZ7TkU6Bjnzdo61fwnu7LHy2Y.roa
Signing time: Sun 22 Oct 2023 15:17:16 +0000
ROA not before: Sun 22 Oct 2023 15:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:f6:38:de:eb:cb:8a:95:53:d0:63:2b:3c:03:45:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 15:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe0d9ed3914e818e7cdda3ad5fc27bbb2c7cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:51:fe:8a:49:e5:c9:4a:55:0d:6e:ee:51:
3a:86:65:e7:16:a7:6e:d4:d6:59:d8:d1:f1:4a:20:
0a:ba:1c:45:58:a7:73:a1:8b:1e:df:4b:93:16:d7:
0e:e8:cd:c9:20:4f:a3:2d:ce:0d:85:29:ec:08:f2:
fd:e9:a7:60:bb:a8:42:3c:3a:52:e0:6b:6b:6e:b4:
79:50:e8:4b:22:a1:51:70:87:b1:74:4d:f3:bf:fd:
4a:39:fe:0c:75:ab:d0:9c:b4:60:e8:8b:3c:b4:6d:
a4:17:1a:45:20:4c:ad:db:3d:df:d0:31:0b:54:26:
1b:45:0e:39:3c:a4:a7:d4:78:77:61:a7:ed:52:41:
7a:af:00:43:d0:92:fb:53:43:4e:48:75:08:e3:77:
f7:d5:c5:c7:35:34:a4:1b:f6:12:cd:9a:2e:ca:64:
af:f5:56:af:f8:d0:99:12:65:b7:b8:21:df:a7:a5:
d2:c5:b1:94:e7:1e:0d:6b:b2:87:ef:48:e7:29:02:
b8:7a:10:86:ce:1d:57:d0:d7:49:8b:a9:d4:d7:80:
c7:4d:90:d2:e7:56:91:0e:c2:19:42:14:2d:55:7a:
9f:bd:30:e1:7e:c3:5c:ed:d4:a9:76:1e:c1:ae:cc:
b9:93:f5:aa:23:25:3d:ab:ca:d3:0c:da:9f:d1:95:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:D9:ED:39:14:E8:18:E7:CD:DA:3A:D5:FC:27:BB:B2:C7:CB:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y-DZ7TkU6Bjnzdo61fwnu7LHy2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:29:74:20:fd:9f:5f:88:27:bd:82:be:5c:66:33:f7:9d:23:
df:a5:44:b6:8f:c9:ee:be:a9:7b:66:10:0c:92:4d:b2:b4:22:
cf:34:8d:33:ae:ba:7a:d7:03:ea:ca:fb:43:f6:8b:cd:c3:9e:
2c:14:da:8e:0f:46:57:27:a0:9b:44:88:64:1b:da:04:53:5f:
60:7e:99:d9:f8:ac:ee:0d:b1:88:8a:26:ed:ae:99:52:76:5d:
f5:3c:44:db:1c:1b:af:07:c6:04:78:ad:60:8b:6d:5f:5d:6f:
ff:a9:28:a9:80:7c:d9:aa:80:8c:fe:ac:a5:4e:02:fb:3a:43:
51:60:0d:cf:97:9e:41:6c:46:9a:db:af:56:1a:dd:3b:b0:aa:
90:62:76:ba:51:87:3d:6b:81:6f:2f:31:64:5d:68:cb:48:91:
32:08:87:c1:39:75:e1:f8:91:a9:06:ae:6b:a0:40:e8:d9:6b:
db:32:79:ea:4a:8b:a4:16:b4:1f:8a:47:a1:a9:20:94:83:fe:
a0:81:2f:f6:69:6c:18:34:bf:26:79:94:b6:3f:f9:b9:cf:b6:
34:1b:d1:83:9b:d1:6f:fd:de:e4:78:c6:50:e8:77:9f:df:75:
0d:7c:82:3d:46:84:55:98:65:6d:3b:ee:34:60:84:81:b7:34:
3d:8c:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:25 2025 by rpki-client