Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DYP7lANA3N3JIibh5sH_gnU_Sl4.roa
File: DYP7lANA3N3JIibh5sH_gnU_Sl4.roa (raw, json)
Hash identifier: Oy4/NrJi4uHTIDrux5eeTZbPQvRGDVHeYNdKaasm0TU=
Subject key identifier: 0D:83:FB:94:03:40:DC:DD:C9:22:26:E1:E6:C1:FF:82:75:3F:4A:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE665031F42141AF04EEC1E0862B6955E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DYP7lANA3N3JIibh5sH_gnU_Sl4.roa
Signing time: Sun 19 Nov 2023 07:04:21 +0000
ROA not before: Sun 19 Nov 2023 07:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:e664:e8f3/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:65:03:1f:42:14:1a:f0:4e:ec:1e:08:62:b6:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 07:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d83fb940340dcddc92226e1e6c1ff82753f4a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:a4:20:9a:b4:79:ef:93:41:54:7e:85:4c:
ed:ab:53:d8:32:e6:f5:0e:cc:f6:e3:3d:7c:76:ef:
4b:69:9f:71:8d:69:7f:5a:0c:e2:4f:fa:d4:e1:39:
23:81:7f:96:df:9e:c4:19:93:a8:1f:1c:64:e3:4b:
16:63:f4:42:19:bc:a5:30:4f:2a:02:5b:3e:5e:b0:
5b:ae:46:06:fc:27:22:fc:ca:fc:3c:4a:20:3b:dc:
ae:94:5c:25:a8:1d:b1:69:6b:3a:67:c3:90:71:cc:
b5:10:19:66:80:0e:12:6b:68:ef:fd:11:2b:47:85:
1f:d8:1d:63:fc:65:d2:2c:af:f8:aa:96:df:59:0f:
23:94:58:4d:7a:ac:97:94:ca:9c:44:35:3a:e3:33:
ca:19:91:03:4d:c1:60:7c:12:83:56:49:e8:00:29:
7f:a8:a2:66:8b:33:3e:24:f5:6a:f0:f8:99:3b:4b:
0a:2e:08:5a:80:c1:69:d2:dd:79:11:87:07:0d:4c:
ba:6c:af:7e:cc:0d:0c:4f:21:55:11:5b:43:2c:88:
cd:eb:bf:74:e1:ac:94:d5:c3:6a:a2:bc:ff:80:88:
4b:da:92:1f:ce:2d:1a:2e:f1:7f:d9:55:7d:de:be:
8f:3e:b1:af:8f:cd:48:20:25:6c:5f:65:6f:3e:9a:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:83:FB:94:03:40:DC:DD:C9:22:26:E1:E6:C1:FF:82:75:3F:4A:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DYP7lANA3N3JIibh5sH_gnU_Sl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:2e:db:de:dd:f3:78:08:59:a4:fd:c3:22:a9:83:45:b8:6a:
19:96:ab:c9:df:e8:a7:51:66:52:60:48:6c:8c:d8:02:6b:20:
e5:23:b7:3f:67:24:d3:ba:74:34:52:0d:f5:3e:27:fb:23:76:
b3:eb:ab:d4:05:2c:30:ce:8f:6e:92:6f:0f:6f:47:0f:1a:50:
e2:83:4a:69:47:68:41:17:1c:d5:94:d5:9f:69:d6:36:42:8e:
b6:7e:34:e7:cb:91:8e:3f:32:79:3a:e4:1c:34:37:8c:03:94:
16:37:79:bc:4c:55:3e:b8:37:a3:d3:6d:c0:69:92:e7:e1:23:
6d:16:3e:7b:1f:32:ad:16:d7:3b:39:8d:85:ce:42:d1:71:ab:
09:b3:69:bd:67:7a:d0:a7:ec:98:e8:21:dc:49:4d:d8:cd:31:
6e:53:76:f3:55:cc:87:26:98:c6:ad:a1:20:c2:8e:cd:b3:99:
a8:1a:28:4f:0c:61:9e:56:7c:21:b6:db:2e:05:26:de:8e:43:
a2:9f:85:ef:38:d1:9d:72:33:c2:79:ef:ec:40:ce:34:f1:68:
14:8c:82:37:0b:c7:61:4a:84:05:db:6d:71:7c:85:a4:a0:87:
85:0b:2e:14:b8:1b:7b:b9:ae:fc:98:c3:4b:aa:34:12:d8:18:
66:9f:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:25:51 2025 by rpki-client