Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yejxpeq-Y9LL5Ih4_bUB5ibF52M.roa
File: yejxpeq-Y9LL5Ih4_bUB5ibF52M.roa (raw, json)
Hash identifier: 6ah46y1oV+DsHGiCJi+i5/BgqTJ8BLQqHwRMT4jBvHc=
Subject key identifier: C9:E8:F1:A5:EA:BE:63:D2:CB:E4:88:78:FD:B5:01:E6:26:C5:E7:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C01E6552FC990620F93F27B1D01700BF8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yejxpeq-Y9LL5Ih4_bUB5ibF52M.roa
Signing time: Fri 24 Nov 2023 15:15:21 +0000
ROA not before: Fri 24 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:e6:55:2f:c9:90:62:0f:93:f2:7b:1d:01:70:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9e8f1a5eabe63d2cbe48878fdb501e626c5e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:25:f9:d7:0a:85:7e:18:8a:8e:ae:d4:55:
6d:a6:0b:81:99:30:00:d9:6a:14:65:29:9e:a2:2f:
f2:23:ac:e0:ae:74:55:e2:16:0c:70:c5:ed:3c:62:
e2:10:14:6d:00:9f:ef:97:97:0f:4c:67:f7:95:b3:
3b:24:60:2a:fd:3c:be:bc:66:0d:3d:25:2e:b7:28:
80:9d:3e:d1:48:f5:a5:39:f8:fa:9a:10:9f:27:6b:
db:09:f7:0a:dc:0e:05:32:91:79:57:3e:ef:28:76:
7a:ba:2c:0c:c9:26:0c:e8:97:dc:9f:7e:fe:db:b3:
f9:d4:24:1a:be:72:76:02:1d:f9:2c:15:7d:f7:ba:
b0:1c:32:ed:63:d8:5d:a6:fd:96:60:4d:f7:7a:3c:
7b:68:68:8f:f4:3e:42:51:ee:a6:59:6d:ea:fc:91:
c9:d8:88:e9:82:1c:44:72:f2:01:61:ed:e5:45:7e:
ab:0e:cd:2e:cc:61:c9:5c:dc:45:b0:09:5a:28:40:
bb:6a:a3:7f:5e:0f:d7:67:fa:c7:21:ce:0b:59:9c:
be:f4:4a:c7:de:66:43:af:e5:0d:17:df:fd:fa:25:
47:96:bf:e4:fa:6b:1b:07:52:71:b4:96:5b:50:97:
0d:d9:f2:9e:9e:19:22:94:22:6d:29:92:a1:c9:9f:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:F1:A5:EA:BE:63:D2:CB:E4:88:78:FD:B5:01:E6:26:C5:E7:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yejxpeq-Y9LL5Ih4_bUB5ibF52M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:1e:e5:0e:95:20:bf:16:d0:50:60:11:ab:cb:92:e8:5c:2f:
fc:42:d6:96:b7:d6:ba:b7:80:3a:f9:14:d1:b9:b8:51:95:76:
d3:b4:56:0b:61:90:65:16:57:75:87:10:40:f0:a5:28:ea:48:
93:fe:fa:59:5c:74:22:bb:b4:2e:95:3d:48:ff:d3:43:57:3b:
08:f3:e0:b6:e1:b5:b8:22:92:2c:22:98:40:91:c3:68:b8:6e:
05:2f:16:0d:c1:2d:23:a0:98:6f:17:4d:27:c2:a2:bf:91:d1:
b7:77:43:0c:12:7c:87:db:ac:4b:39:a8:5b:db:f2:de:56:ad:
d2:c1:1f:51:18:15:f6:86:1e:87:1c:60:37:b7:ee:c1:65:55:
2e:9a:db:3a:55:33:8c:09:d5:42:3d:a8:9b:a7:18:17:88:e9:
b7:72:3b:a6:13:3e:c9:5d:ce:a5:2d:f8:6a:b8:dd:72:61:24:
eb:fd:a8:a5:4c:c9:0e:16:15:0f:0d:33:2c:e3:07:ce:46:e3:
94:03:7e:2e:72:1f:bf:fd:5f:fd:1a:bc:c2:ea:cf:e6:73:fb:
98:d3:3a:b4:a3:81:ad:31:8f:07:13:67:1c:32:11:6f:0f:bd:
ab:db:ac:a7:d4:cb:0b:9c:3f:e0:8a:37:56:66:22:b8:ff:3c:
48:1d:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:37 2025 by rpki-client