Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Yfs-PGkliUAFyzOghv4MWVGkL2g.roa
File: Yfs-PGkliUAFyzOghv4MWVGkL2g.roa (raw, json)
Hash identifier: iuJprr1aNzF3+b9oTGfXB+BQT+HpuJehoWgXa+D+o6k=
Subject key identifier: 61:FB:3E:3C:69:25:89:40:05:CB:33:A0:86:FE:0C:59:51:A4:2F:68
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5FACA4C4838C87E72F4399A9E30DECB6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Yfs-PGkliUAFyzOghv4MWVGkL2g.roa
Signing time: Mon 04 Sep 2023 10:11:04 +0000
ROA not before: Mon 04 Sep 2023 10:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:ac:a4:c4:83:8c:87:e7:2f:43:99:a9:e3:0d:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 10:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61fb3e3c6925894005cb33a086fe0c5951a42f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:3e:92:73:0a:0d:74:20:fc:eb:8e:52:74:
2b:6e:f5:75:4b:64:20:6b:6d:bd:f8:94:88:10:b6:
1c:fa:61:61:eb:65:94:8c:3f:6b:75:72:f0:d0:4c:
0d:a5:2d:d4:82:79:4b:41:20:1b:96:14:0b:06:0f:
80:49:3f:98:68:48:70:e0:a8:16:6d:02:c3:7d:2b:
f9:b0:da:bc:11:e8:26:13:56:85:7b:82:91:b5:1b:
48:25:91:9a:0a:e6:ee:25:bb:98:86:7a:8a:69:89:
6c:83:36:f9:31:cd:f9:42:fb:e9:28:ca:a5:6a:9e:
84:4c:e1:b9:d8:5e:a4:64:4c:7c:a7:f0:d8:f0:2c:
61:a4:71:71:80:45:0c:ce:16:cf:20:a0:70:34:78:
ee:3c:16:1f:cc:61:02:5f:0e:de:ee:f4:95:e2:92:
05:0b:2c:dc:c7:cb:cc:2e:5b:b0:89:1e:57:87:39:
e1:bb:46:8a:6d:6e:52:9d:bc:89:b8:52:73:17:0a:
e5:1c:21:e5:81:eb:be:ae:7f:6f:b7:2f:67:28:6d:
c4:97:5a:73:38:d2:9d:9b:50:de:0c:3e:30:75:b6:
d1:02:0d:0f:51:28:e0:97:7a:c5:be:6f:8a:7c:a8:
14:06:75:d7:fb:ab:52:d1:ce:fc:80:83:80:eb:cb:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FB:3E:3C:69:25:89:40:05:CB:33:A0:86:FE:0C:59:51:A4:2F:68
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Yfs-PGkliUAFyzOghv4MWVGkL2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:a6:1b:04:a1:ec:1e:15:f1:29:e7:55:9b:cd:26:23:d1:29:
d1:6a:1a:20:0d:61:e5:9b:ba:54:57:ca:86:a5:c2:39:4c:a9:
ed:e5:86:c2:f7:60:2b:b4:84:e7:f8:39:00:6b:5d:72:1a:08:
4c:6d:6c:8b:e9:ad:d0:47:d7:0a:00:bb:68:19:3d:c7:a1:69:
19:42:83:82:04:ce:9b:3a:10:72:56:6b:5f:e2:75:b8:3a:9b:
51:a3:bb:61:4d:dd:60:74:d7:16:1f:e0:54:65:5d:29:89:6e:
32:79:72:c4:74:77:f0:44:8a:a7:73:d9:f3:3a:5c:89:25:a5:
0e:f4:f0:f5:fc:8b:6a:89:4f:ef:01:c0:52:1b:16:b3:c6:6b:
95:67:1d:dc:e7:60:40:21:1a:6e:89:fa:14:11:55:7e:40:f2:
c2:91:ee:8a:cd:59:13:bd:b8:6f:d7:b6:ab:31:36:37:9c:07:
51:a4:0e:57:66:7a:8d:3a:6d:8b:ca:f4:32:69:86:03:5d:4b:
8e:6c:b0:8a:52:e0:44:94:a4:d9:c0:37:24:00:27:1d:03:97:
de:1a:ed:da:f1:db:2f:7f:00:08:2a:6b:ae:26:fc:a8:27:23:
8d:d3:d5:39:1b:f1:34:53:6b:10:dc:9b:a9:a5:e8:5f:63:01:
36:6d:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:22:09 2025 by rpki-client