Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YDRSviNsgEJag3Snm6if0Q_aPio.roa
File: YDRSviNsgEJag3Snm6if0Q_aPio.roa (raw, json)
Hash identifier: sJYWDPjlRq5RAgjOLbq4rR+z9SIlKi8km64m09ZIIw8=
Subject key identifier: 60:34:52:BE:23:6C:80:42:5A:83:74:A7:9B:A8:9F:D1:0F:DA:3E:2A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAE2FE914B8FECCC871BE5F7B62B91E13
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YDRSviNsgEJag3Snm6if0Q_aPio.roa
Signing time: Tue 19 Sep 2023 16:04:50 +0000
ROA not before: Tue 19 Sep 2023 16:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ae2f:dc93/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:2f:e9:14:b8:fe:cc:c8:71:be:5f:7b:62:b9:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 16:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=603452be236c80425a8374a79ba89fd10fda3e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:9c:6f:fe:df:db:f2:f8:2c:c6:25:07:cd:
68:ab:ab:64:93:f3:c7:2b:23:a0:ad:c3:c0:ba:f3:
72:45:e5:c7:6c:eb:76:37:0e:1c:5d:54:7f:5b:c5:
2d:6e:81:4f:17:c6:6a:fa:0c:e9:04:17:f0:bc:84:
79:2a:21:94:8c:86:0c:38:b4:45:47:8c:80:28:2b:
13:0e:43:0f:36:aa:b7:50:85:77:d3:27:e8:2f:42:
8f:0f:d5:bc:d4:2a:4d:07:e5:75:c6:38:7c:e5:34:
d2:c1:e0:d5:99:01:b4:86:68:72:65:55:f5:df:8c:
b3:d3:8f:f3:56:84:5c:96:03:ee:83:bf:ea:16:71:
b5:a0:c2:82:88:98:5a:33:aa:ee:25:21:f2:de:1c:
65:d7:5c:b2:d3:f2:22:f5:e5:a2:bd:18:54:52:34:
ac:08:e2:c1:a7:07:85:b1:07:7e:58:1e:7a:80:c0:
1d:68:ec:71:bb:b1:6a:19:a2:6c:38:84:50:46:07:
2d:76:fb:40:dd:8e:a5:7d:a1:e4:98:f1:e6:4a:72:
59:2b:a0:4c:07:98:21:e0:aa:e4:28:20:1a:b3:21:
1d:72:24:d9:e3:b0:cc:88:bb:8c:e6:0c:70:8d:53:
a2:35:13:d9:ea:77:b0:fc:87:2d:05:ec:7c:e3:30:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:52:BE:23:6C:80:42:5A:83:74:A7:9B:A8:9F:D1:0F:DA:3E:2A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YDRSviNsgEJag3Snm6if0Q_aPio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:e7:27:b2:d2:25:d9:dd:eb:13:76:0b:08:c4:b5:0a:1d:d0:
2f:ee:40:21:76:0d:e3:59:59:31:d4:e5:d3:3b:12:5a:d3:bc:
26:5d:6f:04:31:6a:c7:42:e5:7b:8e:9c:f9:7d:68:3a:74:48:
62:b5:c4:81:e7:50:2f:1f:b4:e1:24:e0:b8:28:38:ee:9b:4d:
e7:76:6f:2a:ba:30:e2:19:b3:76:31:af:23:bc:1b:23:b0:ea:
6b:47:2e:d5:51:1f:f7:5e:5a:9f:5a:05:0b:35:95:87:86:33:
81:e6:69:0f:16:fa:88:ca:28:fe:6f:95:cf:6f:bf:4f:df:52:
ce:e3:36:8b:28:c2:20:57:72:7b:b3:c3:89:db:a8:9f:0e:94:
2b:ef:6f:1c:69:6b:41:ea:ba:93:3c:2a:b0:d6:d2:c1:8a:da:
bd:30:f7:68:72:ad:92:05:34:6d:89:91:04:4a:9a:a2:f4:ab:
33:c7:34:76:95:4d:bb:64:bb:1a:86:3b:26:8c:32:b3:74:31:
25:18:cb:41:ba:b2:9a:b1:2f:8a:78:45:10:e6:1f:83:d6:f3:
ec:b1:78:a1:0e:b5:8e:46:ee:63:58:df:c5:5f:e7:9a:22:58:
42:85:8c:f4:6e:61:3d:98:95:5b:f0:f3:54:67:d4:66:e7:06:
b2:82:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:52:10 2025 by rpki-client