Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yOHmjc6uepuyAcLdy5OyZUbqlZw.roa
File: yOHmjc6uepuyAcLdy5OyZUbqlZw.roa (raw, json)
Hash identifier: AljSwXJglW3Dd0g5wXRYE/v9OPJjkXHy/6m4zoEkh/I=
Subject key identifier: C8:E1:E6:8D:CE:AE:7A:9B:B2:01:C2:DD:CB:93:B2:65:46:EA:95:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9A7A1D99A34EA33D424CD83C3A80D157
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yOHmjc6uepuyAcLdy5OyZUbqlZw.roa
Signing time: Sat 04 Nov 2023 13:16:16 +0000
ROA not before: Sat 04 Nov 2023 13:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:7a:1d:99:a3:4e:a3:3d:42:4c:d8:3c:3a:80:d1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 13:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e1e68dceae7a9bb201c2ddcb93b26546ea959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:0b:26:e0:cc:4b:94:c0:8a:cf:f7:72:ca:
ac:d9:fd:82:32:3c:ab:2d:08:fd:01:cc:dc:20:31:
f9:f4:1e:90:e5:9e:d0:20:29:21:1d:55:09:88:92:
8f:ad:0c:ed:d9:2d:7f:15:6a:58:54:31:d7:f8:9b:
49:80:7c:24:d6:1c:70:c5:32:01:32:c1:02:72:60:
87:f0:bd:ff:e6:26:38:3c:b9:47:f4:15:7e:c6:1d:
02:2b:30:57:fd:ec:39:7f:e6:5b:7f:e3:90:1e:30:
10:9b:f1:aa:f6:34:a0:92:94:c3:9b:0a:57:6f:04:
83:89:b4:e1:97:a5:f7:c9:28:56:44:b5:75:1f:be:
32:56:4d:9a:15:9f:aa:af:f3:b5:9b:51:be:67:f4:
ba:37:99:18:a3:47:7a:b7:26:11:37:e3:b3:9e:5c:
ca:34:ec:93:c3:36:71:6f:be:1e:39:c6:aa:dd:7f:
f1:2d:d7:ac:67:b4:53:5d:0c:b9:a3:32:39:e2:2c:
78:0f:fa:ec:49:50:b5:5e:96:75:bc:11:9a:4a:91:
82:8e:ce:55:25:16:2a:a9:b1:90:f9:62:3c:91:90:
3a:c8:ba:28:05:2e:2d:32:9a:2e:e8:fd:8b:c6:0c:
1c:89:a2:8a:39:2f:9c:c8:43:1c:70:f4:ff:5a:c7:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:E6:8D:CE:AE:7A:9B:B2:01:C2:DD:CB:93:B2:65:46:EA:95:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yOHmjc6uepuyAcLdy5OyZUbqlZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:08:2c:52:7b:75:65:67:44:6e:cb:99:e2:55:bd:ac:b3:91:
de:eb:d8:cc:4e:45:cb:1f:24:6d:bb:8a:2d:d3:0a:47:6b:4a:
17:3f:22:eb:bb:4e:8d:c1:7f:39:9f:f9:81:7b:5e:13:71:3e:
02:7c:bf:8e:d6:63:8f:13:b6:13:63:b4:d4:99:34:ae:4d:fb:
d2:77:b6:2c:86:9c:1a:44:c1:d1:6a:ea:6d:cf:9f:cf:c7:7c:
a1:4b:bc:24:1a:1a:73:6c:85:fa:7b:f3:26:7d:4c:ef:84:73:
fd:8c:df:a4:f5:1c:13:ca:43:e0:af:2b:4c:cf:b7:5a:cf:8b:
af:68:eb:92:b0:0d:65:00:3a:78:ea:1a:88:3b:d0:a1:7b:78:
6d:2b:d9:42:7e:93:dc:91:ba:af:b6:50:25:84:ba:27:9f:ab:
1a:d2:92:37:1a:84:64:01:4e:11:d6:c3:c9:ab:cb:aa:30:0a:
36:da:67:1a:77:f1:48:ca:c8:bd:1d:54:53:2b:e8:af:ee:3e:
1f:09:8d:22:da:3d:73:d2:29:9f:ee:0e:83:cd:9b:5a:51:5a:
6c:f9:25:21:a4:90:81:3e:63:92:e4:53:44:ba:42:9e:de:fc:
84:6f:18:ed:cd:a5:42:b5:05:4b:78:12:dd:bc:fa:f4:4f:33:
d2:65:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:49 2025 by rpki-client