Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y8yXpuh9HR6owHDJaZxgJoiiaxc.roa
File: y8yXpuh9HR6owHDJaZxgJoiiaxc.roa (raw, json)
Hash identifier: lTzmyXUaHiXWdBSmSQelhMQ4MlgF0IKJvoyYbo3xPGo=
Subject key identifier: CB:CC:97:A6:E8:7D:1D:1E:A8:C0:70:C9:69:9C:60:26:88:A2:6B:17
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC07524AA38AA5A18ED247EE0ACDECBCA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y8yXpuh9HR6owHDJaZxgJoiiaxc.roa
Signing time: Sat 23 Sep 2023 05:13:37 +0000
ROA not before: Sat 23 Sep 2023 05:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:75:24:aa:38:aa:5a:18:ed:24:7e:e0:ac:de:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 05:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbcc97a6e87d1d1ea8c070c9699c602688a26b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:5b:49:64:29:7e:af:f4:54:3f:33:d2:a2:
b9:18:a1:4e:2c:35:2b:4b:67:76:48:1a:4a:3f:f1:
a8:1a:53:41:ce:b1:99:5e:b7:ab:5b:a1:e9:6a:dd:
5e:26:c3:5f:20:1e:1a:a0:f7:e7:4c:92:b4:99:4a:
70:0b:78:26:b6:58:87:e4:31:03:7d:6b:12:5b:f6:
e6:be:31:bb:05:a4:86:91:8c:57:fe:15:7b:7e:49:
b5:58:4f:1a:2e:11:7b:3c:64:fc:b5:68:c3:38:1a:
d9:bf:2f:ce:28:89:a8:7e:96:2e:19:6d:64:4f:14:
c7:d4:fd:cf:94:0f:63:48:d1:8e:96:20:ad:a0:ef:
3d:37:ea:51:0a:cd:fe:09:a0:d8:7e:b6:94:f9:ae:
94:f8:05:42:d2:3d:ba:a9:c6:1c:d4:0b:99:27:cd:
3b:cb:4d:d5:15:22:c7:1a:0e:20:e5:ac:55:14:da:
2b:e1:43:82:99:db:d0:7d:1b:bb:7a:04:a4:ae:7c:
1d:78:b6:93:32:db:eb:df:29:f0:6b:61:a1:af:66:
21:4d:a6:15:70:01:de:54:89:d0:76:e3:a5:46:79:
47:55:16:b1:6a:e1:08:a6:01:88:b2:ac:49:25:a4:
c3:d8:95:f4:0b:b4:76:18:13:dc:24:11:5f:b9:7b:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CC:97:A6:E8:7D:1D:1E:A8:C0:70:C9:69:9C:60:26:88:A2:6B:17
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y8yXpuh9HR6owHDJaZxgJoiiaxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:6b:68:33:91:0a:87:07:13:ab:ee:64:09:4f:70:ae:0d:d4:
8c:ff:80:20:25:3f:67:fc:fe:ae:3b:7d:25:59:07:70:58:07:
8b:28:15:87:95:e2:84:87:30:1c:eb:78:e7:95:c0:73:34:10:
7f:9b:f8:d9:0f:e3:b9:9b:dc:0c:dd:3f:7b:c6:2a:16:42:0f:
51:3b:20:8b:06:7f:fe:57:7d:e4:7e:1a:bc:00:9d:b0:8c:da:
d7:c2:a7:80:9a:8f:a5:ac:83:a6:e8:a3:fb:62:8c:d3:f4:66:
3b:0c:77:8c:f5:ce:99:30:ff:7d:36:d5:45:6a:cb:09:af:63:
93:89:02:4b:a0:95:74:70:0f:fc:8b:e9:66:db:50:7d:8a:be:
c1:8a:22:06:63:83:f7:2f:84:46:bf:e0:e8:f7:b4:eb:b5:8c:
0a:20:7b:22:ec:ad:2b:fd:c2:22:a6:b6:8e:77:d2:80:fa:4a:
22:34:a8:b9:e6:aa:62:21:d0:99:b6:55:fa:39:2b:af:c7:f0:
96:bc:06:14:c7:2b:28:cf:d8:b5:58:fb:b1:81:68:29:54:64:
ee:ee:20:cf:5b:09:ee:69:48:d9:21:e9:b6:b1:4e:6d:0d:e3:
d2:60:60:67:86:65:93:88:68:2b:a5:c8:8d:68:4c:df:12:1d:
68:30:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:43 2025 by rpki-client