Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yh-Fl-dQECpxQ1waHxky5JxTAeE.roa
File: yh-Fl-dQECpxQ1waHxky5JxTAeE.roa (raw, json)
Hash identifier: 3kr92wxkfJ31O50Fed8tzKeL4zI+Hz8v9tEeCESr4Dk=
Subject key identifier: CA:1F:85:97:E7:50:10:2A:71:43:5C:1A:1F:19:32:E4:9C:53:01:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C21E089712BD4539C989B3A30D899B451
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yh-Fl-dQECpxQ1waHxky5JxTAeE.roa
Signing time: Thu 30 Nov 2023 20:16:52 +0000
ROA not before: Thu 30 Nov 2023 20:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:e0:89:71:2b:d4:53:9c:98:9b:3a:30:d8:99:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 20:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca1f8597e750102a71435c1a1f1932e49c5301e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:6f:ed:98:25:a0:bb:a5:ae:02:10:76:c3:
6d:41:d0:5d:02:8d:a8:1f:2c:e1:87:74:31:e2:78:
68:bc:34:9b:76:d5:24:3d:60:4c:2f:14:2e:8b:9c:
81:f4:85:44:75:ce:1f:bb:84:c9:94:93:ea:39:34:
0c:4a:a2:35:9a:b1:7c:22:fb:3f:3b:57:a4:48:c3:
3f:24:1c:11:99:d4:41:18:43:78:62:5d:fc:c3:33:
21:b5:35:19:1e:5a:37:f1:7e:b3:50:30:24:3c:34:
bf:84:fc:cb:c7:06:3f:98:2f:12:7a:a6:a4:5e:62:
35:69:69:5d:25:fb:ff:4c:b5:f7:e9:5b:e4:3d:06:
1f:ca:39:ce:b9:8c:66:a0:0f:dd:c8:ee:50:00:f8:
7b:a9:a1:a1:6d:1f:38:0a:a0:08:7d:d7:e5:24:82:
ff:b5:44:35:13:37:de:25:39:c2:60:39:4c:1e:d4:
bd:c9:c1:55:8e:a1:58:e4:f0:62:12:21:8d:eb:9f:
72:d0:cc:f1:5c:2e:51:33:08:d2:d7:d0:06:aa:66:
8d:d7:a6:ed:09:d4:5e:86:87:08:21:54:12:ea:a8:
94:8a:db:3a:0b:86:0c:b6:1a:8d:64:80:e0:c8:09:
1a:38:dd:86:1a:87:7f:f9:7b:25:ef:85:b4:d9:f2:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1F:85:97:E7:50:10:2A:71:43:5C:1A:1F:19:32:E4:9C:53:01:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yh-Fl-dQECpxQ1waHxky5JxTAeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:db:08:6a:7f:38:26:d1:91:b2:86:21:c9:fb:91:51:b6:c5:
48:55:52:f8:4e:6d:9a:60:e9:44:0d:df:f2:7b:3c:86:b4:2b:
6c:4a:00:43:fa:f7:23:22:c7:26:8f:84:60:ba:e8:a9:4d:89:
bb:25:97:73:3e:93:d8:40:5d:71:32:a6:d4:a9:e3:ba:02:3c:
dd:17:6a:9d:bc:ea:25:ef:cc:68:40:ab:ef:e2:6c:af:b2:77:
5b:c6:95:bf:ae:a3:62:a8:28:d6:35:69:34:f7:87:34:32:36:
db:68:9f:99:65:b3:ab:e4:ce:4c:a6:8a:b3:e3:f9:eb:a5:8e:
e3:6f:8b:f4:70:ae:fa:9c:4f:a1:a7:25:f8:ea:1f:5b:fa:80:
c4:b7:68:d4:16:b5:a1:25:6d:47:f1:13:ad:07:6e:98:a2:60:
8a:3f:8a:39:ff:50:a0:3e:61:43:b8:f9:7c:3d:f3:7f:13:78:
b7:3f:6f:c8:30:9e:fb:74:5b:6d:d2:d7:5f:db:5c:e6:3c:29:
47:69:ed:71:7c:91:61:a6:a1:9e:9c:95:55:65:21:35:b2:40:
23:9a:10:47:50:26:67:5f:8b:31:04:5d:b0:dc:d4:6c:e4:69:
ac:0d:af:01:18:52:46:f1:5a:0f:d9:69:29:09:43:d4:38:24:
20:3c:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:03:32 2025 by rpki-client