Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yw80OjtHaUglataM0pNJMPqGBXE.roa
File: Yw80OjtHaUglataM0pNJMPqGBXE.roa (raw, json)
Hash identifier: VMpDFfRBlUXhrskm7xGiqdwQ8awEaCclpIfI3NDI17w=
Subject key identifier: 63:0F:34:3A:3B:47:69:48:25:6A:D6:8C:D2:93:49:30:FA:86:05:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF4C56F01C8A9C76D1F26D100CECECAE9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yw80OjtHaUglataM0pNJMPqGBXE.roa
Signing time: Wed 22 Nov 2023 02:04:21 +0000
ROA not before: Wed 22 Nov 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:f4c5:5e34/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:c5:6f:01:c8:a9:c7:6d:1f:26:d1:00:ce:ce:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=630f343a3b476948256ad68cd2934930fa860571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:21:61:cf:d2:03:21:93:66:be:7a:65:51:
17:77:be:2b:2d:24:47:3a:f0:52:d7:83:77:65:ad:
97:a4:e7:04:62:31:b5:0b:1e:35:66:7e:1e:b3:45:
58:90:52:20:23:b1:4e:a5:4a:c2:43:86:1f:96:dc:
68:8e:aa:23:19:51:19:3b:7c:45:e9:ce:a4:6d:44:
3f:37:2a:b3:47:3e:98:59:df:de:26:8b:8e:ad:7b:
59:48:85:08:98:b9:88:36:79:2c:be:69:60:b1:a7:
e2:cc:e2:da:6d:f0:ff:6e:ec:b0:4e:a3:0f:f2:8b:
d2:c6:64:28:be:c6:db:ba:58:b0:e8:e6:6d:16:4a:
e6:fc:e8:88:78:c6:6f:b4:5e:99:c6:39:32:0a:dd:
bf:32:6f:ba:31:b0:99:9b:44:89:6f:0e:e7:df:81:
22:48:e7:78:af:42:2e:50:9b:64:3e:db:77:83:71:
82:18:aa:87:39:89:c2:2c:20:f0:6f:52:4c:0f:32:
13:68:14:79:ac:dc:45:93:ba:e9:fd:d8:1b:a3:40:
38:89:97:bb:f0:14:bc:18:b3:21:5f:da:fa:2f:6e:
28:a2:d3:4b:cf:f1:39:ff:08:37:1b:af:5f:be:78:
8f:19:25:08:40:47:b3:f5:09:95:75:8a:42:f6:98:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:34:3A:3B:47:69:48:25:6A:D6:8C:D2:93:49:30:FA:86:05:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yw80OjtHaUglataM0pNJMPqGBXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:ca:be:37:1f:8f:78:ea:e0:84:ef:3d:07:1e:ee:34:6b:28:
47:b8:6d:92:06:2e:8f:75:69:02:43:13:98:86:a6:e7:3c:2d:
1c:64:93:bc:09:b7:a9:e5:af:72:0f:1f:ee:7f:6c:80:20:9a:
b5:69:a3:76:31:b4:ff:4e:8f:6a:63:12:ad:1e:73:90:05:21:
46:1f:cc:7f:c0:9b:fd:82:cc:8b:47:ba:5a:0f:ec:86:ae:ba:
b3:ea:9e:a3:07:10:cf:6a:2b:d9:de:e4:a2:92:12:23:8a:cd:
6d:a0:25:4b:32:6d:89:4e:3f:d7:d6:b7:25:0c:40:e7:3b:dd:
a1:5a:ff:15:9d:b3:fa:44:69:f6:80:93:a0:59:c7:f5:a4:c2:
81:af:f3:17:9e:7a:56:be:ce:ba:5b:ac:9a:f2:f0:9a:d6:0d:
1a:ae:69:53:28:4e:2f:9a:fb:a6:7c:bf:dc:e2:b5:a2:0e:49:
93:dd:a7:e9:26:fe:1c:3d:f8:0b:8d:e7:c4:11:89:5d:a9:b0:
ef:b2:92:5d:b7:18:fe:54:86:5e:e6:cb:4e:49:b2:68:c6:4e:
36:40:72:7a:b3:71:f9:49:a9:90:9f:24:d2:21:ef:a4:67:b7:
86:f5:a0:ce:e7:b5:51:fb:bd:12:41:9a:7d:ec:92:2a:0e:40:
d2:07:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:48:20 2025 by rpki-client