Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVlKsZLeLzhdzofazLhcaSbrx0c.roa
File: RVlKsZLeLzhdzofazLhcaSbrx0c.roa (raw, json)
Hash identifier: aAWzRPDpZUiWGMvHLSJXAoXbtDHEKgyNXKjc5hTT32o=
Subject key identifier: 45:59:4A:B1:92:DE:2F:38:5D:CE:87:DA:CC:B8:5C:69:26:EB:C7:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE8CE784C3A3E96AF4BA7F363FDCCD7E8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVlKsZLeLzhdzofazLhcaSbrx0c.roa
Signing time: Sun 01 Oct 2023 01:15:59 +0000
ROA not before: Sun 01 Oct 2023 01:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e8:ce:78:4c:3a:3e:96:af:4b:a7:f3:63:fd:cc:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 01:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45594ab192de2f385dce87daccb85c6926ebc747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:e0:1d:b5:8f:2b:10:bf:dd:88:ce:02:4d:
3b:fe:27:bd:c0:70:9b:70:8c:e3:c8:6f:5d:69:01:
53:d4:75:8e:2c:4f:dd:2b:a0:c3:a1:39:ad:e5:b5:
83:54:39:ea:73:2a:7c:ec:c2:c4:50:b9:ef:99:45:
18:f3:ba:bd:2a:d0:c6:5c:ab:09:c1:9c:f2:cc:51:
2e:6b:80:68:40:6c:85:1f:ef:bc:aa:83:77:b9:a8:
b3:a0:a4:0d:de:ea:2e:68:c3:b6:25:d4:42:5d:a3:
6f:89:c9:80:fc:71:42:78:64:6e:72:dc:7d:17:43:
9a:b1:d6:e8:42:74:03:0d:98:23:a2:e1:9a:09:26:
b2:6c:c4:ef:69:e1:1a:36:b3:b7:47:1a:c0:cb:18:
99:f2:24:f9:75:f7:ef:da:39:56:3c:6b:37:8f:16:
35:6d:55:05:4f:8c:d1:d2:77:e3:b6:80:af:cf:ad:
18:dd:32:2c:6d:fd:6f:ed:67:83:ce:58:15:8a:47:
a9:7b:3f:ce:7a:52:54:35:ec:02:a4:54:8e:76:4b:
8b:91:97:5f:f0:dc:11:b4:e3:08:8f:dd:b6:dc:a6:
ba:a1:ca:0b:1f:fc:da:e6:80:69:d3:00:a1:f2:54:
4e:c7:4b:55:62:c1:ab:a6:68:82:4a:90:9e:62:d0:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:4A:B1:92:DE:2F:38:5D:CE:87:DA:CC:B8:5C:69:26:EB:C7:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVlKsZLeLzhdzofazLhcaSbrx0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:28:83:0e:6c:22:0f:bd:d8:06:67:50:5e:00:a3:3b:dd:3b:
a5:3a:00:be:a2:f3:ce:37:fa:58:45:bc:13:db:df:99:e0:1c:
a1:a4:34:9c:3b:49:5f:6c:e2:c3:22:f6:0a:d3:03:3f:9f:26:
52:cc:42:d5:f8:6f:c1:87:0c:db:26:ad:61:67:2a:24:47:6c:
e7:ac:f9:d5:02:74:b8:81:02:53:8d:44:85:fd:20:49:85:06:
99:f9:e9:59:fa:a0:29:02:c6:ae:e9:cb:76:fb:6c:35:4a:e4:
87:03:03:45:6b:cb:18:21:fc:8f:7a:9f:f6:d1:a7:21:6b:d5:
c6:22:ab:97:ae:db:33:3d:53:f8:34:43:40:15:27:81:4e:0a:
2e:6e:6b:1b:2a:da:0e:ce:fa:40:98:ef:15:e4:12:86:4b:da:
67:d8:24:cb:52:40:6b:d1:8d:d2:4f:85:32:6f:42:d7:cd:4e:
2d:3a:2f:f5:4d:fc:92:91:eb:28:14:5a:ff:b7:d2:d5:d2:23:
fa:59:75:81:14:75:c2:99:c0:59:f1:84:2e:60:5d:3e:32:01:
e9:2a:58:7a:8b:b1:63:b6:71:60:c8:76:bc:8e:ee:e4:c0:ff:
16:96:09:7d:4e:52:ef:ec:3d:be:25:b5:5f:57:85:de:e9:20:
9e:1e:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:08:25 2025 by rpki-client