Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yOcXfYIiBleam86e0thbnObVuVw.roa
File: yOcXfYIiBleam86e0thbnObVuVw.roa (raw, json)
Hash identifier: jmpIlTYapVF/j0WD/BDgczXTxTL1sd8reRL2pYyHmYU=
Subject key identifier: C8:E7:17:7D:82:22:06:57:9A:9B:CE:9E:D2:D8:5B:9C:E6:D5:B9:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB4D9D786FB12ED671E136F3BAA8C9FFE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yOcXfYIiBleam86e0thbnObVuVw.roa
Signing time: Thu 09 Nov 2023 16:10:57 +0000
ROA not before: Thu 09 Nov 2023 16:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:d9:d7:86:fb:12:ed:67:1e:13:6f:3b:aa:8c:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 16:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e7177d822206579a9bce9ed2d85b9ce6d5b95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:68:67:5d:a8:d9:68:84:44:05:7c:96:2a:
f4:d4:cc:20:57:b5:2a:15:70:fd:bc:6e:63:07:86:
d6:f1:cd:fe:66:84:f6:b9:95:be:50:4a:7f:44:91:
39:b8:5d:64:17:f0:e8:73:1b:a4:3a:3d:d2:a6:22:
49:2d:52:3c:7b:64:c9:47:8c:00:2d:b0:d0:69:6e:
f0:27:8b:00:be:a5:20:0c:89:0d:c7:7e:7a:13:9b:
cf:bf:02:00:19:ae:52:b1:92:33:01:40:d1:e9:8d:
f0:c4:e5:81:93:49:f9:f7:5d:7c:30:41:0b:07:7d:
58:7a:ef:b7:af:40:ac:99:ba:30:2e:80:21:93:78:
b6:a0:3a:ef:a2:2b:c8:6a:29:ae:9b:e7:28:e3:3b:
5a:0f:f4:69:e8:0b:a1:bf:7f:68:2c:b9:39:96:c9:
f4:7b:ea:e7:52:32:28:b3:81:55:7f:42:0e:a2:23:
7d:77:74:ce:f5:47:3f:e2:6f:51:12:44:d3:a8:e2:
b6:ac:3b:cd:ed:e3:48:05:bf:69:21:2c:f3:42:8b:
28:44:c6:77:02:1e:3e:91:e9:59:e1:12:7d:ff:e6:
ce:c9:98:fd:94:7d:da:a2:37:f7:f9:9f:eb:b6:f7:
ef:8a:10:4b:b5:7f:7c:b5:e8:c8:f6:b4:60:87:7f:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:17:7D:82:22:06:57:9A:9B:CE:9E:D2:D8:5B:9C:E6:D5:B9:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yOcXfYIiBleam86e0thbnObVuVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f9:ee:b3:7a:68:04:2c:c3:7d:88:f8:d8:f0:ad:6c:ef:c6:
5c:cd:09:36:41:6a:4c:13:fa:cb:9c:16:61:23:91:b3:68:3a:
32:d9:1a:64:36:21:58:11:cf:c2:ef:b8:db:dc:e9:3b:94:b6:
a8:52:08:ff:54:35:0b:84:36:13:9c:c5:ec:11:7f:60:4c:de:
97:94:0c:d9:e4:fd:2a:bf:df:ae:5c:af:8f:19:ba:82:38:40:
b0:ea:73:e1:df:ce:9a:23:1d:79:42:32:90:c0:74:8c:b6:c3:
55:bd:47:24:03:6e:2c:9a:58:e3:da:19:8e:e4:3b:cc:dd:97:
98:31:4a:c0:2e:be:61:00:44:a6:61:3f:5d:71:f2:47:f8:a6:
cb:a5:a6:ad:f4:8a:78:07:93:59:3f:51:9c:8a:8b:a1:05:44:
f3:6d:c0:8d:de:2e:4a:ee:e8:af:79:36:1d:e1:2c:88:18:86:
64:4c:c2:62:25:b6:92:13:0b:17:70:09:8b:e1:e7:3f:92:e2:
c3:89:21:94:34:83:82:ee:0a:fb:7d:2d:c6:8b:29:f9:cd:87:
46:e7:f6:fa:01:60:52:43:5c:ca:0f:2a:aa:38:6e:31:1e:e5:
aa:c3:96:4a:82:d5:de:de:6b:81:22:7e:c7:9e:02:32:93:0a:
80:66:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:56:51 2025 by rpki-client