Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ymp78Vro6TEFIAXMQ-81blFVLV0.roa
File: Ymp78Vro6TEFIAXMQ-81blFVLV0.roa (raw, json)
Hash identifier: nNN8vn7ApvJqXa7elFUPB6NdZFLfnsT5zuSluHaS8rI=
Subject key identifier: 62:6A:7B:F1:5A:E8:E9:31:05:20:05:CC:43:EF:35:6E:51:55:2D:5D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBBB6F2868266E939404B2D4F922B5284
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ymp78Vro6TEFIAXMQ-81blFVLV0.roa
Signing time: Sat 30 Dec 2023 17:12:58 +0000
ROA not before: Sat 30 Dec 2023 17:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bb:b6:f2:86:82:66:e9:39:40:4b:2d:4f:92:2b:52:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 17:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=626a7bf15ae8e931052005cc43ef356e51552d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:55:d3:01:67:94:33:2f:fd:93:8f:fa:77:
33:d4:04:ab:f5:fa:79:af:e7:e7:4c:9a:91:01:8c:
3e:b1:09:e2:71:41:22:4a:5f:34:1f:1b:fe:da:58:
47:3a:f2:d6:16:c5:a4:9f:51:c5:8a:65:79:1c:0d:
56:83:e5:58:b2:d6:c4:0e:c6:2b:3e:9d:5c:98:7e:
70:f0:f1:a3:ee:db:00:a6:11:18:eb:39:ec:aa:e4:
6c:5c:08:29:a8:ca:6b:ab:3d:31:d6:1d:e2:f8:6b:
f6:e9:58:3d:3d:5f:cc:ca:fe:9c:b9:cf:db:b9:c5:
73:8f:d4:b4:8c:2b:ac:13:9e:2c:78:33:d9:c4:b9:
76:ab:09:a8:96:16:26:2d:ba:ee:e1:50:21:35:2e:
37:31:e3:cc:d7:84:a1:45:74:32:37:aa:d0:b0:38:
15:8a:12:a4:d0:1c:f4:9f:32:2c:a4:0d:b1:dd:ea:
33:f1:65:59:a6:8a:3c:04:14:85:dc:ea:12:ee:6d:
d8:37:57:ad:0b:00:10:a5:04:bf:60:15:ce:8b:20:
7d:20:42:c8:02:c4:31:1f:cb:0f:d1:2c:1d:91:3d:
d9:d6:f3:06:e7:45:79:29:49:53:2a:50:00:7b:bd:
54:2e:bc:82:6d:b0:4b:9b:15:6e:01:fe:23:0e:95:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:7B:F1:5A:E8:E9:31:05:20:05:CC:43:EF:35:6E:51:55:2D:5D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ymp78Vro6TEFIAXMQ-81blFVLV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:b9:e3:e0:5c:a7:9f:77:5c:6c:f2:d0:c4:10:cb:ea:ca:4f:
2c:59:7c:2c:27:7b:fe:cb:9b:78:d2:ee:68:e8:2f:d6:66:7a:
f4:cb:59:73:80:aa:a4:7f:eb:38:93:b5:1e:a8:75:bd:76:45:
81:de:b0:b7:68:93:3b:1c:18:a3:7b:7d:a2:bd:3e:c6:9d:3a:
a5:3b:de:71:8d:38:0f:c9:cf:f9:f4:a8:d3:f5:7f:6d:83:e5:
ee:2f:45:10:0c:b6:22:d9:ab:14:20:48:87:a6:80:50:9b:94:
d9:de:42:8d:f3:25:13:79:3b:aa:e4:19:90:0b:24:f7:c1:84:
c0:55:73:56:d4:46:cf:c1:1c:c4:c6:4b:0e:a2:2d:c7:f3:73:
1a:29:77:aa:38:22:c8:c8:de:21:3f:41:ca:12:59:22:6b:06:
5e:c3:a1:db:05:85:6e:50:74:dd:a4:74:46:4b:9a:93:02:01:
67:55:d0:8b:74:14:fd:07:45:b9:5a:df:c5:a3:0e:05:01:84:
58:1b:bb:86:18:8f:08:16:b4:b5:e4:f3:45:7b:fb:c7:97:c9:
1a:12:f5:cf:91:5c:d4:32:de:c2:62:41:a7:bd:9c:4b:95:b1:
15:f1:96:f1:1b:12:97:0a:b4:ad:e8:b5:c6:75:38:38:38:89:
8b:a2:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:43:51 2025 by rpki-client