Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y3jWZr3mEGPnPsqKAvm5J7L4BNc.roa
File: y3jWZr3mEGPnPsqKAvm5J7L4BNc.roa (raw, json)
Hash identifier: /TNmP9PEWGVTQfCErNlq155K65ujQO3SAv95eqCIWSs=
Subject key identifier: CB:78:D6:66:BD:E6:10:63:E7:3E:CA:8A:02:F9:B9:27:B2:F8:04:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B47AA057598F293F827BBF273D5DDE2A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y3jWZr3mEGPnPsqKAvm5J7L4BNc.roa
Signing time: Thu 19 Oct 2023 11:20:06 +0000
ROA not before: Thu 19 Oct 2023 11:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:aa:05:75:98:f2:93:f8:27:bb:f2:73:d5:dd:e2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 11:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb78d666bde61063e73eca8a02f9b927b2f804d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:70:dc:c1:71:45:c1:d3:dd:0c:d0:a4:c5:
73:b9:23:9d:ce:eb:94:44:f0:cb:12:e6:0b:04:ba:
b9:1f:2c:8c:75:d6:06:97:e2:84:7e:4e:b2:b2:7c:
6f:9a:4b:5a:5b:ff:82:40:ab:50:fd:d0:0e:52:d6:
3e:2a:cd:c8:71:9c:91:f7:5e:17:ac:b4:51:4b:90:
c0:0c:ce:cd:12:51:6e:b9:55:59:11:22:79:2b:19:
25:7d:7c:0d:e0:0a:95:29:7c:8c:5d:1d:1e:e9:c8:
8d:51:8a:bd:5a:1d:e2:c0:d0:fe:08:d6:f9:2d:53:
ef:57:7c:c6:e5:16:e3:89:34:1e:90:ce:63:b5:d8:
19:8a:d8:db:bc:86:fd:95:d5:02:3c:d2:56:e0:63:
aa:a2:a2:15:98:d2:bc:53:61:45:62:86:ab:f2:db:
3f:24:40:6e:15:be:28:2b:f9:e8:d8:12:76:d6:54:
bd:5f:19:84:9e:30:55:91:dc:61:31:9c:43:20:42:
2b:f9:dc:8f:d9:b5:51:47:f4:57:4d:5c:68:6d:fb:
df:35:aa:57:ad:63:ef:eb:89:2d:ee:c2:b5:13:34:
ed:2d:f5:b6:b0:dc:12:96:25:73:4c:ae:e6:31:ca:
e8:f0:90:69:25:94:d7:84:00:df:ae:86:59:9e:55:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:D6:66:BD:E6:10:63:E7:3E:CA:8A:02:F9:B9:27:B2:F8:04:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y3jWZr3mEGPnPsqKAvm5J7L4BNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:15:44:6c:ca:ff:fc:d1:db:96:c1:58:06:88:ec:4d:d1:44:
be:0f:e0:20:85:34:46:b9:a6:b5:23:62:f5:6b:69:90:a6:cf:
3a:d1:ca:3f:ba:56:3b:a3:9b:88:5d:06:53:28:c7:ad:1f:3b:
33:26:fe:88:12:7b:8f:b7:31:c6:77:24:1a:d5:1f:cd:f1:aa:
70:ca:86:2f:e5:44:6d:b3:fb:71:c7:bd:37:ea:dd:7c:8a:2b:
9e:14:ae:e4:d2:87:f5:a7:fc:c3:21:94:b1:8f:6a:2b:5d:e5:
3d:f4:f6:72:29:20:16:aa:fc:54:c2:ee:95:b0:55:c6:b8:d7:
aa:35:45:37:e7:8d:ba:91:eb:1f:5c:06:96:8a:73:79:c5:cd:
7d:2b:97:8a:ca:3f:0a:d3:fd:4d:0a:b9:fc:75:8c:e4:04:02:
1b:39:65:e8:c8:fc:96:a7:10:98:ec:f6:07:ec:9a:9e:8d:a7:
b9:f5:29:23:09:fb:b4:c2:b1:14:ac:f5:a0:e7:c1:0f:67:90:
dd:78:b2:33:f6:34:2a:4a:42:36:6c:e6:14:86:c5:db:bb:71:
cc:2a:2b:25:91:e6:05:d4:cb:a5:c3:50:71:4d:3d:0e:7d:30:
27:bd:83:3b:de:8a:67:af:87:49:a5:2a:e0:45:1c:12:10:98:
a5:5d:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:52:14 2025 by rpki-client