Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIl3JxtKtqI_Bu5Hr3Us_SmZs3U.roa
File: YIl3JxtKtqI_Bu5Hr3Us_SmZs3U.roa (raw, json)
Hash identifier: ssHcqCtNpb4NV+f6pOvGybDDHO1+QlGXeeDp7ZRpNbk=
Subject key identifier: 60:89:77:27:1B:4A:B6:A2:3F:06:EE:47:AF:75:2C:FD:29:99:B3:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6E41543DDE6795E90A9A5F4167F0F868
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIl3JxtKtqI_Bu5Hr3Us_SmZs3U.roa
Signing time: Thu 26 Oct 2023 23:10:56 +0000
ROA not before: Thu 26 Oct 2023 23:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:6e3b:a85c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:41:54:3d:de:67:95:e9:0a:9a:5f:41:67:f0:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 23:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=608977271b4ab6a23f06ee47af752cfd2999b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:f4:14:b2:95:d4:56:3e:8f:04:92:d7:d6:
e9:ec:f3:6d:16:f5:08:69:80:16:89:ec:ae:90:28:
e4:35:fe:64:f2:3f:fe:78:0d:12:1d:22:02:3d:e6:
5e:ab:48:c5:0d:5a:5f:c3:c8:9b:f9:03:d8:ab:ac:
54:98:6f:f8:27:7f:db:8c:25:d8:93:13:c9:21:70:
f3:e7:35:df:fd:8a:32:50:23:09:52:c5:9e:b8:91:
79:36:49:34:b0:ec:5e:8e:df:05:4c:8a:23:55:7a:
e7:e6:ad:1f:bf:ab:eb:f1:01:20:70:69:d4:55:30:
93:35:e9:95:3d:ed:9e:5b:7a:09:34:63:6f:ee:27:
65:11:e8:1f:b6:cf:d6:5e:99:0b:25:3e:a2:01:e6:
bd:b9:38:3c:f2:d5:5b:5e:0f:7c:ab:e3:10:c4:7c:
7a:45:1b:35:8a:cd:58:f7:2f:ad:6e:81:70:7d:1f:
ff:12:ac:79:ae:c8:56:fe:e3:c7:3e:8e:3a:85:85:
6b:0f:3f:2e:bd:64:15:f3:02:2c:b9:2f:f3:69:56:
62:7c:c5:3e:62:5b:ab:0a:7c:1c:d4:3a:e6:0f:20:
cf:1b:cb:03:a0:e9:33:02:fc:b6:a6:16:cd:23:f8:
8f:9c:f2:5e:d1:16:ec:b6:94:82:1a:c7:35:14:85:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:77:27:1B:4A:B6:A2:3F:06:EE:47:AF:75:2C:FD:29:99:B3:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YIl3JxtKtqI_Bu5Hr3Us_SmZs3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:13:0a:9c:38:e7:84:06:27:97:f7:04:12:c1:04:e5:93:49:
3b:15:7c:98:4c:2e:2a:47:23:ba:7b:c5:16:09:82:cc:04:c1:
ca:09:95:8f:a0:e4:e3:42:7a:14:69:89:f4:1f:c8:67:dc:63:
87:c9:03:b0:ff:bc:72:91:76:d5:01:2e:99:c2:5d:8e:74:59:
00:a2:af:a7:a1:1f:41:6e:4d:2c:03:f9:89:7f:8f:45:bf:4c:
7a:8f:79:5b:a8:9e:e5:25:9a:ab:9c:c2:0c:25:1c:a3:48:ae:
19:67:57:db:f4:c5:b0:5e:eb:42:ab:71:bc:94:91:4a:42:7d:
75:08:5a:a1:ca:b3:ae:be:5e:8c:64:49:4f:91:3a:a8:aa:10:
bc:da:90:87:a0:6a:57:5d:20:73:db:1d:21:8e:b7:d3:be:25:
be:43:b9:b5:bc:69:c9:88:29:d8:65:de:e6:f6:18:24:51:7c:
05:d1:f1:85:4f:a7:76:00:3f:b3:2f:05:c8:3f:06:e6:a3:4d:
c0:86:08:5b:94:37:94:28:e8:df:0d:35:02:c5:9a:a1:30:61:
e5:6c:47:8c:18:3d:d1:bb:a5:59:1a:59:51:9e:4f:eb:ea:fd:
1f:1a:9b:2a:94:e9:95:f3:e8:77:bb:db:85:f9:37:c7:a6:f6:
13:5b:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:38:36 2025 by rpki-client