Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2VLN8Z2y6r3lYTYvtMjaBqw2jfA.roa
File: 2VLN8Z2y6r3lYTYvtMjaBqw2jfA.roa (raw, json)
Hash identifier: dGQ/k+FIbGMMZNX1AxcZ1L/CPeu/NZeb18ANLZvUbg4=
Subject key identifier: D9:52:CD:F1:9D:B2:EA:BD:E5:61:36:2F:B4:C8:DA:06:AC:36:8D:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0D7ACFA3D6CE66C285A5D82846D89CCF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2VLN8Z2y6r3lYTYvtMjaBqw2jfA.roa
Signing time: Sun 26 Nov 2023 21:13:21 +0000
ROA not before: Sun 26 Nov 2023 21:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:7a:cf:a3:d6:ce:66:c2:85:a5:d8:28:46:d8:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 21:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d952cdf19db2eabde561362fb4c8da06ac368df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:3c:af:a1:bd:12:9e:fd:55:45:8d:42:7c:
bd:4c:0d:28:5f:cf:43:48:72:09:a0:db:01:a2:e2:
b8:ed:37:63:fa:78:5b:6b:51:ec:2d:62:a7:59:47:
e9:0a:b9:f9:69:d7:22:d8:c4:f1:ff:cc:bb:72:9c:
28:63:e7:f6:57:04:80:cd:80:d7:6b:92:11:ba:be:
f0:d1:ff:ef:90:77:e8:d2:3b:19:9b:45:8f:ae:1a:
7f:f5:ad:e1:20:bc:d4:28:4a:f6:85:ea:35:0e:4d:
70:c2:11:78:2f:c2:dd:72:f2:0b:17:76:72:6f:a9:
53:49:0f:c4:13:57:54:bc:1d:93:1e:d0:83:45:87:
e9:ef:e4:e1:c4:95:61:a5:39:af:7b:33:f7:95:3d:
a1:7d:8f:5f:47:61:cd:66:17:bf:36:6f:e6:c1:08:
de:ae:58:d6:71:1b:78:c2:dd:98:bc:61:1d:fc:bd:
15:af:e0:e8:e2:3e:c6:48:ce:71:90:22:ee:c8:f8:
9a:08:8d:76:26:52:4f:a3:37:85:64:c8:95:19:86:
0e:90:e3:a9:2d:26:7e:7f:f9:4b:e3:f2:1b:8f:70:
4e:46:58:31:2e:4e:0c:6a:ff:30:3d:55:44:ba:12:
79:2a:f2:3a:a6:76:95:24:60:c7:ea:b8:74:c7:70:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:52:CD:F1:9D:B2:EA:BD:E5:61:36:2F:B4:C8:DA:06:AC:36:8D:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2VLN8Z2y6r3lYTYvtMjaBqw2jfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:ab:82:3b:9c:7b:f8:1e:9c:57:ba:bf:ec:48:e5:fd:69:38:
5f:f4:73:2b:92:9f:4f:58:7b:32:3b:78:1d:17:f9:7a:13:e9:
6a:9f:46:1a:eb:69:da:9e:80:3c:02:b2:29:6e:28:c0:ff:55:
1c:11:08:e4:23:fd:e6:6e:0c:8d:8d:40:d5:22:6c:eb:b2:a3:
8f:49:5a:bd:5d:c0:41:f0:62:cf:d0:48:a6:31:9b:d6:f8:87:
cf:d8:97:31:db:f1:ac:cd:b5:48:69:35:c9:3e:d3:9b:a3:88:
a3:17:78:4f:3c:ba:34:56:f4:f8:2a:a9:66:fc:a0:54:72:20:
03:6d:ac:cb:0e:a8:60:b1:1b:69:2a:50:ff:1b:4d:71:42:a6:
33:7f:a6:1a:6c:ce:2f:ff:28:46:f7:30:9e:ea:a9:25:f8:66:
13:f2:42:f0:f2:74:5d:ee:7b:95:86:c1:7d:a7:f2:ac:13:f4:
a2:b5:98:b5:11:6a:7d:e0:1a:cb:fc:ed:ef:74:02:d4:57:18:
c0:a4:78:02:6f:7c:9b:ad:da:6c:4e:c1:f5:0a:db:e5:24:02:
bc:d1:be:4c:c6:6d:54:9e:d6:a3:20:6b:2b:57:e3:a0:f5:26:
54:3c:15:f9:a0:d4:43:be:f5:98:33:55:ff:73:94:c7:f5:7c:
c0:37:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:16 2025 by rpki-client