Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yjGeu2G7hhWyYbIoeeh0Is4QZxc.roa
File: yjGeu2G7hhWyYbIoeeh0Is4QZxc.roa (raw, json)
Hash identifier: CrLiz6hmF5qeTEDSW/9yTWVdea9sOfBKUKq3bfGtzBk=
Subject key identifier: CA:31:9E:BB:61:BB:86:15:B2:61:B2:28:79:E8:74:22:CE:10:67:17
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF9BEF30C242D88BCA4595D87225B02A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yjGeu2G7hhWyYbIoeeh0Is4QZxc.roa
Signing time: Wed 04 Oct 2023 08:12:35 +0000
ROA not before: Wed 04 Oct 2023 08:12:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:be:f3:0c:24:2d:88:bc:a4:59:5d:87:22:5b:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 08:12:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca319ebb61bb8615b261b22879e87422ce106717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:86:af:4c:39:7b:a1:ff:96:43:c1:fc:c4:
c9:69:54:3a:fc:d6:f7:81:35:ff:79:f0:44:16:39:
c3:a6:18:27:84:18:96:9e:96:f4:f9:f9:43:e2:a8:
94:e5:18:11:de:c7:27:09:28:3b:45:9d:39:12:36:
0e:d7:63:20:61:48:35:56:11:ca:ac:65:c4:2a:ea:
b4:75:4b:e3:e5:5b:6b:30:fa:6e:4f:13:2e:c0:7f:
89:03:e6:3f:4b:6a:a5:cc:a3:49:29:92:a8:3d:99:
98:86:49:44:ca:d4:b9:83:cc:a9:3f:fc:33:2b:b9:
7b:3c:25:f7:86:35:a7:0d:54:78:ca:67:a9:41:32:
ff:64:97:54:b3:d3:e2:80:1b:f1:de:93:8c:c1:6c:
62:ec:81:b0:b2:47:84:6b:85:73:96:54:4f:f4:eb:
eb:24:4f:4d:17:d4:bc:49:48:74:45:c9:f1:0b:ff:
73:b0:7a:12:b8:10:fe:a6:9f:63:02:7b:1f:c7:b6:
c8:9f:5d:df:39:98:03:63:cf:c4:27:77:cd:82:e0:
38:be:f2:9a:8a:b9:03:99:4e:4b:16:8a:dc:2f:1d:
29:49:77:d8:d2:b2:a6:bf:1f:85:97:51:14:27:18:
ef:61:1e:c5:8a:14:b9:9d:eb:83:c4:4a:df:21:5e:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:9E:BB:61:BB:86:15:B2:61:B2:28:79:E8:74:22:CE:10:67:17
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yjGeu2G7hhWyYbIoeeh0Is4QZxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:7b:f5:7f:1f:ee:50:56:18:8d:81:9e:9a:af:26:4f:96:fe:
1f:1e:85:a8:6e:a7:5b:82:67:da:41:32:0e:6c:b3:a0:3d:ef:
e8:da:92:a9:6c:86:0e:47:73:4a:36:12:d5:8f:64:c9:f9:79:
ef:0b:50:ca:66:13:a2:fd:14:d2:73:c4:33:33:e8:bf:a2:69:
4a:6f:96:75:fa:4f:7a:ea:26:60:be:6a:a4:7b:4d:10:67:16:
da:76:1b:31:03:84:62:5e:8a:9e:05:12:99:bb:4f:a6:4b:1e:
17:c7:be:5b:e0:fd:18:e1:37:2f:e9:b9:bc:0c:c2:a7:88:5c:
68:03:81:1e:9f:1f:c9:92:a0:ec:68:f4:f8:c9:04:3e:9c:8c:
b5:cd:0e:f5:0e:0d:d2:39:5a:2d:c7:bf:b8:1c:63:54:7a:57:
7b:26:bb:fc:e9:52:ec:46:8d:0c:37:5b:af:78:86:68:00:93:
5a:dc:62:06:f2:27:aa:08:0c:42:85:f1:d2:b7:79:53:92:8c:
09:32:fd:83:6f:94:c1:67:e1:e2:2a:5b:85:6a:10:85:71:58:
47:79:b9:fd:ad:03:f1:62:af:97:09:25:0e:3e:64:f1:62:0b:
74:df:fe:b6:d2:93:db:d3:b9:68:7c:aa:06:8a:11:46:03:c4:
90:48:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:28:46 2025 by rpki-client