Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ykOM3IKwyikNH7csDowpyNELQ_c.roa
File: ykOM3IKwyikNH7csDowpyNELQ_c.roa (raw, json)
Hash identifier: FahTwYIgrc9iQNC1WUCzy7jsQT8rpeoPF/24Bge1ums=
Subject key identifier: CA:43:8C:DC:82:B0:CA:29:0D:1F:B7:2C:0E:8C:29:C8:D1:0B:43:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8875B044854661B6B083C6188FEF7072
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ykOM3IKwyikNH7csDowpyNELQ_c.roa
Signing time: Wed 01 Nov 2023 01:18:16 +0000
ROA not before: Wed 01 Nov 2023 01:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:75:b0:44:85:46:61:b6:b0:83:c6:18:8f:ef:70:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 01:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca438cdc82b0ca290d1fb72c0e8c29c8d10b43f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:c0:67:4c:56:e4:90:11:46:10:7c:de:cb:
65:f6:ab:61:cf:18:ec:57:18:13:ea:5e:0e:62:04:
31:cd:5a:6b:ea:66:a8:0f:d0:b5:21:95:e6:dc:f5:
a0:ac:e7:ad:0c:68:89:99:b3:06:1e:1f:52:5f:4d:
0d:14:0c:cb:28:3c:1a:a8:ad:83:87:a8:4e:5e:ef:
d9:ca:0b:85:62:43:7e:e0:fd:d4:f5:9b:93:79:ae:
a6:68:a1:e8:35:b8:94:40:d4:04:1e:b2:23:ba:88:
96:d2:c7:e9:bd:d8:ca:b5:bc:16:8b:0a:50:28:aa:
36:9b:06:86:ae:c9:83:85:50:2b:de:bd:bd:20:0e:
74:af:89:e3:32:5b:14:d8:d2:28:f8:4b:9f:9e:4f:
5c:5a:4c:5e:48:26:91:2f:01:ef:e9:48:bc:7a:7d:
b0:82:f3:c5:fb:70:c7:5c:ed:20:51:b1:a3:02:10:
58:a1:19:a5:20:91:fa:9d:8c:ee:64:d7:bf:e3:5f:
1f:e3:d2:95:6f:ba:7e:9b:5d:ec:5c:48:75:46:ad:
7b:63:89:e0:3c:4e:d9:5e:d2:fb:d5:b5:b2:1e:37:
49:12:da:04:c2:9c:58:2c:f3:55:f4:fa:84:6a:b8:
01:ce:5f:5f:b4:5a:54:b0:1f:9c:ca:2e:6f:73:98:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:8C:DC:82:B0:CA:29:0D:1F:B7:2C:0E:8C:29:C8:D1:0B:43:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ykOM3IKwyikNH7csDowpyNELQ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:59:ec:64:85:a9:2f:83:5d:dd:8a:b6:08:a5:e5:c4:74:cb:
86:73:cd:d7:76:17:e7:2b:11:37:59:7a:8c:8d:5f:4e:aa:8b:
19:e7:b2:f2:75:bd:65:d1:61:5c:ed:3c:1b:ef:74:18:4c:9c:
07:0f:6c:fc:41:ad:b5:56:f5:aa:a4:95:40:81:05:0a:63:7f:
77:7c:e2:c7:d2:fe:7d:de:cf:da:35:ac:a7:a8:80:78:11:34:
44:aa:59:12:57:87:f1:c1:7c:3f:0d:0d:6a:e8:ce:7a:da:11:
ea:9e:fe:2d:d6:c3:b8:65:9d:ce:58:1c:82:72:a9:19:b5:c4:
24:21:86:cd:4e:04:25:41:03:09:88:f3:94:a9:fe:79:fb:65:
5d:e3:6e:7e:65:d9:97:99:3e:3f:50:58:a0:b0:91:6f:e6:d2:
8c:d8:bf:e2:3a:d8:23:7e:ec:54:c7:7e:52:ee:34:ca:32:f1:
7a:91:57:dc:12:8b:16:b4:c9:b7:09:d4:46:97:86:0d:de:f5:
47:f5:cd:18:19:bc:6f:17:ca:b6:2f:9c:94:b6:23:38:40:8f:
43:7a:b0:78:1e:b0:3e:36:0b:97:e4:cc:70:c3:93:5b:8b:a1:
4a:f2:3e:8c:c9:e8:28:5e:5c:37:fb:79:04:dd:87:84:57:07:
30:a8:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:18 2025 by rpki-client