Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yawYC4xPgV984YfUAOhGaliyL54.roa
File: yawYC4xPgV984YfUAOhGaliyL54.roa (raw, json)
Hash identifier: zHP8Y2jjE2DyMoJ4/vCt8lv+VE5qT9/pJmawU9McEMA=
Subject key identifier: C9:AC:18:0B:8C:4F:81:5F:7C:E1:87:D4:00:E8:46:6A:58:B2:2F:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B69BF2391424CE3A80D8C987D3A9EAEC8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yawYC4xPgV984YfUAOhGaliyL54.roa
Signing time: Thu 26 Oct 2023 02:10:15 +0000
ROA not before: Thu 26 Oct 2023 02:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:bf:23:91:42:4c:e3:a8:0d:8c:98:7d:3a:9e:ae:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 02:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9ac180b8c4f815f7ce187d400e8466a58b22f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:ee:57:37:a8:23:21:c8:f2:3b:7e:9a:a4:
36:b5:11:6b:b3:e1:8b:06:34:6c:c8:01:67:a8:f3:
8e:6b:21:25:71:96:70:b0:d0:1a:a1:37:91:25:9d:
45:93:8f:57:13:92:b0:ae:38:63:7f:0f:1a:d9:05:
80:d5:62:7c:74:78:9b:b2:9d:e9:22:45:8c:2a:58:
5b:0a:22:36:1e:7b:ca:bd:be:06:d6:51:29:c9:da:
16:76:68:02:8b:0b:d1:51:f0:3e:c1:2d:c3:6c:42:
ab:72:a9:94:ee:b8:62:2a:9b:ce:06:39:b7:5f:28:
d2:f5:35:35:7d:94:6d:fd:5c:f5:97:60:4a:1e:7d:
01:ec:a3:37:64:42:4d:1c:9a:3c:cc:18:9b:ca:45:
fb:f0:ec:32:97:15:d6:28:e3:2e:39:ef:65:c2:c6:
95:6e:a7:f4:67:95:32:1e:4d:59:db:99:d7:cc:88:
3f:07:07:14:66:4b:dd:20:5a:78:f9:22:59:16:30:
78:3d:42:d8:a1:34:97:8d:bf:11:3d:44:15:eb:48:
b2:5f:ca:a9:f1:e2:9a:51:43:5f:d2:1d:e3:ee:75:
1a:c9:d7:3a:9c:ce:08:66:dd:10:d4:12:00:4f:86:
22:ec:51:7c:a7:8f:38:f4:a1:be:b0:66:8d:f0:fd:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:18:0B:8C:4F:81:5F:7C:E1:87:D4:00:E8:46:6A:58:B2:2F:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yawYC4xPgV984YfUAOhGaliyL54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:ec:a8:0c:9c:bf:93:ec:93:8f:1e:07:67:b9:42:24:42:19:
5c:f6:f6:de:c4:be:e7:f0:c7:fb:ff:d5:96:2b:ad:47:24:a5:
0e:63:ec:28:65:79:74:09:1d:f1:89:ff:d9:cc:12:c7:69:4e:
96:ae:0c:c5:43:09:90:68:41:ae:4f:b8:02:69:e1:41:62:d6:
48:10:cf:ab:00:d7:41:3f:a6:de:20:73:c6:6e:a9:a1:cf:44:
c1:2e:bd:29:6f:f0:90:72:27:62:65:98:a7:e0:f4:ac:7e:74:
2c:af:43:e4:47:fb:2c:7a:2e:3c:61:5f:b1:13:24:d3:a1:72:
92:e0:eb:0a:bc:6b:9d:0e:be:bc:72:50:f9:5e:66:d0:66:0e:
f1:81:bc:9a:05:af:b0:5e:3a:35:6a:54:06:f5:43:33:e7:42:
21:87:df:b9:f2:bf:45:c7:2e:4a:ef:bd:9e:30:24:5a:1a:c0:
dd:d2:8a:34:37:17:be:e6:ae:db:a2:03:50:6a:9e:45:06:cf:
be:b0:cf:97:79:bf:35:d1:4f:b7:cd:64:ce:7a:12:b1:f6:a0:
eb:87:10:1d:c7:99:4e:7a:fc:01:f3:34:0b:c2:81:07:26:5f:
54:bd:62:ce:b1:8f:73:0e:d0:b9:87:19:8d:af:4c:28:47:63:
9d:db:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:19 2025 by rpki-client