Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y1nUladNBBk7TvmM14rYf-W9AZw.roa
File: y1nUladNBBk7TvmM14rYf-W9AZw.roa (raw, json)
Hash identifier: 7Z8da2dnJzbohKbHYQYdn5FjWUrCI04lJdhZtv7f95o=
Subject key identifier: CB:59:D4:95:A7:4D:04:19:3B:4E:F9:8C:D7:8A:D8:7F:E5:BD:01:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3379B54CD3DC2E755E1AF2AB88B780D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y1nUladNBBk7TvmM14rYf-W9AZw.roa
Signing time: Sun 15 Oct 2023 13:14:55 +0000
ROA not before: Sun 15 Oct 2023 13:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:79:b5:4c:d3:dc:2e:75:5e:1a:f2:ab:88:b7:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 13:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb59d495a74d04193b4ef98cd78ad87fe5bd019c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:6e:1e:79:8d:e4:17:c6:69:f8:7e:97:17:
57:32:dd:df:b2:ef:09:ef:d5:0a:4c:6b:81:07:af:
44:6e:1c:7c:36:b5:ef:c1:5c:cc:f8:9b:ff:f3:0c:
f5:0f:9d:7e:b4:5e:b6:c9:a6:63:45:1f:10:de:0d:
d5:41:2e:a4:f2:13:b5:2f:6c:6b:05:23:98:d3:88:
f2:5a:ba:fa:4b:cd:96:30:c1:45:4d:bd:88:e5:43:
16:57:8c:70:9b:94:19:ca:7f:a3:57:c5:0e:1a:c8:
42:f3:9e:90:0a:a5:c8:dc:5e:be:ce:2e:56:36:9a:
1c:0b:a2:e5:9a:5c:1a:b2:46:b7:47:7e:ef:7d:da:
de:f5:f6:a4:71:21:0c:b5:6e:9d:eb:da:21:63:83:
59:d6:a7:95:fa:44:f4:32:ea:a4:d5:21:27:91:78:
02:67:94:ef:7c:8a:5d:8b:64:56:b9:ca:5b:ba:fb:
88:da:a5:03:3e:f4:b4:e1:7d:f0:d4:69:45:b6:8a:
38:34:12:e0:f7:4a:da:8e:47:20:ca:3e:c3:1d:cb:
b1:7c:f4:31:f0:20:7c:59:bc:95:fe:6d:ba:7b:a2:
83:61:a7:e6:a6:2c:73:4e:71:66:68:62:3c:17:6f:
16:bf:8c:a5:88:bb:e5:b4:02:d7:40:32:f5:24:94:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:D4:95:A7:4D:04:19:3B:4E:F9:8C:D7:8A:D8:7F:E5:BD:01:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y1nUladNBBk7TvmM14rYf-W9AZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cf:1a:13:4a:f5:29:80:5a:93:67:b0:de:99:05:36:10:54:9f:
ef:c4:5c:9f:4f:5e:21:1a:8e:4d:20:84:36:eb:9f:12:8c:1d:
bd:20:bb:cc:de:78:d0:36:36:41:f4:98:e9:32:7b:50:7d:e2:
35:55:af:50:18:53:bf:e0:0f:d6:1e:2f:06:11:56:a4:d7:7c:
4e:e0:17:7e:d3:8b:80:e3:74:76:4e:bf:1e:17:75:73:45:08:
2c:a8:4e:e9:7e:a8:85:22:76:bf:f7:04:68:f1:e9:e2:ec:ae:
b1:a2:e3:21:19:22:5f:2d:b0:f9:32:5d:7c:0a:10:05:32:f8:
7e:28:71:95:b1:9f:d8:07:4f:4c:e5:f2:40:03:a0:01:56:e3:
0a:e2:cd:7f:a4:40:5a:85:42:0a:a2:27:96:8d:7d:f4:5b:55:
0d:e9:cd:8e:8b:1a:ef:00:95:16:ba:3e:fb:0e:9f:dd:bf:e9:
6a:f2:08:82:23:37:2d:d1:f2:b8:e7:d9:e5:5b:ce:45:55:b6:
61:38:e6:86:3c:ef:e5:b0:bf:6b:22:53:ce:48:1a:f7:d4:95:
fb:f9:db:e1:e0:15:59:8e:d5:f1:cd:1f:fd:6e:02:30:10:81:
d4:eb:fa:bd:ac:cf:be:2b:7b:18:db:e3:ea:1c:a6:8b:57:25:
80:1e:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:32:22 2025 by rpki-client