Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y0laDv-wpNACmJ9l2yOc0u_R17s.roa
File: y0laDv-wpNACmJ9l2yOc0u_R17s.roa (raw, json)
Hash identifier: VKMjP5m8bX6EAnUoWW0XuqH+kNPYr2dPcznZWtZHOGw=
Subject key identifier: CB:49:5A:0E:FF:B0:A4:D0:02:98:9F:65:DB:23:9C:D2:EF:D1:D7:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0AE7A21238E40985F714C8D9CAEBD781
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y0laDv-wpNACmJ9l2yOc0u_R17s.roa
Signing time: Sun 26 Nov 2023 09:13:21 +0000
ROA not before: Sun 26 Nov 2023 09:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:e7:a2:12:38:e4:09:85:f7:14:c8:d9:ca:eb:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 09:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb495a0effb0a4d002989f65db239cd2efd1d7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:6b:60:78:92:81:37:db:3e:b3:b6:eb:05:
b9:e5:ce:84:3e:54:ad:41:c3:00:2d:18:84:f0:4c:
ae:7b:bc:af:64:a4:55:4a:a9:f1:fa:4d:fb:1e:90:
80:4c:40:a2:cd:4f:c0:7e:35:47:66:9f:2f:73:d6:
48:7f:52:09:eb:10:51:a1:68:b0:b0:44:8d:1e:df:
b9:2e:5c:8b:ad:31:94:11:21:4e:2d:c3:61:b2:73:
3b:62:3d:9a:66:a2:8f:c9:07:43:2d:06:bf:6a:fb:
ae:0f:16:70:70:d6:95:94:35:d1:e0:e3:e0:3c:c7:
0d:2f:e3:9d:e2:37:72:30:79:5c:d1:e6:7f:9d:5c:
bb:19:e4:cc:f0:df:5d:bf:8d:ba:be:39:e5:72:ba:
6b:07:2b:68:b4:5f:aa:ed:6f:56:20:cf:1f:bc:1b:
5e:46:1c:aa:06:a9:7c:88:f8:9e:1f:e6:9a:98:ea:
d3:6b:56:3d:54:5f:f6:ac:72:19:9e:8e:b8:f3:93:
7c:09:50:00:a9:71:41:fb:6a:21:51:8c:ee:28:06:
49:c1:e8:24:89:d0:08:7d:62:b4:ec:63:81:3c:7e:
9f:6f:22:f9:12:c6:37:8f:24:b3:f4:75:92:7f:66:
b9:fa:fe:08:89:1d:d8:45:e1:bd:ba:67:22:d7:7b:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:5A:0E:FF:B0:A4:D0:02:98:9F:65:DB:23:9C:D2:EF:D1:D7:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y0laDv-wpNACmJ9l2yOc0u_R17s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:aa:8b:73:34:02:5d:e4:a1:49:72:ef:d2:dd:ec:32:a4:50:
77:a3:da:7b:76:9e:6c:e6:7c:9d:e2:65:77:16:af:bc:0f:e8:
ca:4e:e9:9b:72:ce:3a:a0:13:4f:43:7d:65:fe:fa:5c:4d:eb:
a1:d1:53:ef:09:15:8d:99:86:80:aa:cd:ba:c3:c7:b9:47:83:
25:6f:1c:3c:a7:19:06:e9:bf:1e:c6:4a:0c:4e:5e:47:cd:81:
e6:6d:be:c4:c9:69:63:99:68:a8:08:7b:64:ea:ac:ea:ba:6a:
68:26:01:89:a5:ac:fc:6a:68:83:0d:0c:31:5c:5a:c2:19:c0:
60:18:d0:ed:a5:35:1b:0d:c9:5f:b2:5c:1a:b4:86:cb:0a:63:
b7:77:d6:8d:5b:23:9d:6c:2e:f8:32:82:97:b9:b1:ea:1d:74:
22:1e:3c:11:6d:5b:92:95:a5:f9:65:48:88:05:b2:38:88:cd:
8b:79:29:a7:88:4c:6d:1a:90:f8:d6:c5:03:97:2e:95:b8:99:
d0:28:fd:e0:29:04:94:6e:a9:71:9c:64:c8:7d:10:7a:8b:40:
cd:cd:e8:89:62:36:f6:7f:4e:c4:c0:bd:80:2f:74:d6:43:4d:
04:c7:9f:68:08:c4:41:85:94:63:29:ce:62:f3:75:91:39:12:
a6:fa:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:10 2025 by rpki-client