Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YFMiNzQdo7anoA1FPZUaoK47v2Y.roa
File: YFMiNzQdo7anoA1FPZUaoK47v2Y.roa (raw, json)
Hash identifier: ZTZVpf0XsemEJYAMo2YZBKK6kjKMtCgBdF8g7Kkrf+o=
Subject key identifier: 60:53:22:37:34:1D:A3:B6:A7:A0:0D:45:3D:95:1A:A0:AE:3B:BF:66
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4A76A71C3603A64A61CF7704C97B3169
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YFMiNzQdo7anoA1FPZUaoK47v2Y.roa
Signing time: Thu 31 Aug 2023 07:20:04 +0000
ROA not before: Thu 31 Aug 2023 07:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:76:a7:1c:36:03:a6:4a:61:cf:77:04:c9:7b:31:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 07:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60532237341da3b6a7a00d453d951aa0ae3bbf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:bc:af:b7:00:97:0a:ac:d0:77:9e:d3:b1:
35:f7:db:2a:67:61:41:a0:00:6f:df:ac:5c:28:01:
46:9c:8c:5d:c1:5f:3c:6a:fd:e1:8b:bf:e8:a1:3b:
98:c8:29:3b:4e:97:ab:09:7f:56:f4:61:6b:26:98:
b1:3a:41:a3:00:5d:88:af:43:70:8f:86:75:aa:ce:
ce:4f:1a:7e:3d:f1:4f:76:ab:c9:4f:b7:a0:3f:b7:
2c:8b:c6:a6:15:d5:66:14:04:86:8b:13:4c:7d:91:
dd:78:b3:99:bf:0a:0a:08:79:4e:43:66:a1:53:eb:
fb:45:08:ad:df:a3:38:02:22:5d:26:9b:3e:2f:15:
b3:0d:bc:33:56:86:04:3a:d8:b3:31:ae:e3:92:42:
a2:a1:63:66:ff:fe:a5:ef:c5:ab:f8:f9:f9:34:a4:
5b:94:e7:0c:dc:79:98:95:d8:64:4a:12:67:82:f4:
05:f2:b4:26:75:ec:2f:e3:af:9c:6a:95:46:35:02:
6a:a7:c8:f1:e5:ac:14:90:61:7a:bb:37:e1:a7:d5:
ea:df:99:18:83:cd:d6:d5:eb:00:78:c6:d4:a9:d0:
d7:22:6c:60:4d:55:0a:52:0d:fb:ed:90:4c:de:81:
af:21:6a:83:5f:34:13:85:ff:ff:27:f5:34:2d:1b:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:53:22:37:34:1D:A3:B6:A7:A0:0D:45:3D:95:1A:A0:AE:3B:BF:66
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YFMiNzQdo7anoA1FPZUaoK47v2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:ba:cc:73:e3:2c:66:36:0a:99:bd:d8:84:ba:8d:cd:e2:21:
91:29:66:b1:b6:35:36:98:99:2c:8a:d1:86:cb:53:4b:96:d3:
52:5a:f2:8a:70:a8:19:fd:1a:da:98:f8:a2:b5:e0:23:96:0a:
e9:35:bd:d8:2e:33:b6:33:2f:1e:ca:f6:15:b3:6c:26:eb:4e:
6f:8b:86:f9:76:f1:7d:1a:20:30:64:46:e9:b0:c4:54:f3:7a:
82:8e:fb:95:71:3d:38:61:ac:10:fb:bf:eb:49:be:91:00:11:
e9:6b:77:73:29:f2:99:f9:04:d1:1e:15:f8:65:85:7c:46:fe:
05:91:5d:7d:0c:e7:3b:b2:b8:27:be:3c:38:65:44:a3:43:7f:
90:1a:ea:97:f4:8c:cb:e9:b6:56:3c:cc:9d:64:69:28:65:95:
9c:bc:d5:be:20:d8:f4:93:b1:f1:23:ae:23:a9:cc:b5:cc:ac:
82:ea:7e:02:96:16:4a:0b:67:89:cf:c8:ed:a0:a0:f8:96:ef:
d6:af:26:05:96:ab:ab:f3:e9:6f:4e:89:27:06:37:99:cd:5e:
d3:c8:ba:8e:38:64:09:ed:5d:5f:82:a6:e5:d1:02:04:c3:7c:
d5:30:d1:62:48:55:d8:5d:e5:39:ec:bb:d5:d0:f3:d2:80:7f:
42:d6:96:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpKdqccNgOmSmHPdwTJezFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwODMxMDcyMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDUzMjIzNzM0MWRhM2I2YTdhMDBkNDUzZDk1MWFhMGFlM2JiZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXC8r7cAlwqs0Hee07E199sqZ2FB
oABv36xcKAFGnIxdwV88av3hi7/ooTuYyCk7TperCX9W9GFrJpixOkGjAF2Ir0Nw
j4Z1qs7OTxp+PfFPdqvJT7egP7csi8amFdVmFASGixNMfZHdeLOZvwoKCHlOQ2ah
U+v7RQit36M4AiJdJps+LxWzDbwzVoYEOtizMa7jkkKioWNm//6l78Wr+Pn5NKRb
lOcM3HmYldhkShJngvQF8rQmdewv46+capVGNQJqp8jx5awUkGF6uzfhp9Xq35kY
g83W1esAeMbUqdDXImxgTVUKUg377ZBM3oGvIWqDXzQThf//J/U0LRsI8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGBTIjc0HaO2p6ANRT2VGqCuO79mMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvWUZNaU56UWRvN2Fub0ExRlBaVWFvSzQ3djJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAC6zHPjLGY2Cpm92IS6
jc3iIZEpZrG2NTaYmSyK0YbLU0uW01Ja8opwqBn9GtqY+KK14COWCuk1vdguM7Yz
Lx7K9hWzbCbrTm+Lhvl28X0aIDBkRumwxFTzeoKO+5VxPThhrBD7v+tJvpEAEelr
d3Mp8pn5BNEeFfhlhXxG/gWRXX0M5zuyuCe+PDhlRKNDf5Aa6pf0jMvptlY8zJ1k
aShllZy81b4g2PSTsfEjriOpzLXMrILqfgKWFkoLZ4nPyO2goPiW79avJgWWq6vz
6W9OiScGN5nNXtPIuo44ZAntXV+CpuXRAgTDfNUw0WJIVdhd5Tnsu9XQ89KAf0LW
lj0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:55 2025 by rpki-client