Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V-zLeVo6-U3jYdExcRkrU-8sFcE.roa
File: V-zLeVo6-U3jYdExcRkrU-8sFcE.roa (raw, json)
Hash identifier: zfp7/YYWFiFPFu/SrBw6xo7M8LcvaP2pA5GBrmFDL6c=
Subject key identifier: 57:EC:CB:79:5A:3A:F9:4D:E3:61:D1:31:71:19:2B:53:EF:2C:15:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD163BFCB2BE7A037BDBC6E044DE38FBF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V-zLeVo6-U3jYdExcRkrU-8sFcE.roa
Signing time: Wed 15 Nov 2023 05:10:57 +0000
ROA not before: Wed 15 Nov 2023 05:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:63:bf:cb:2b:e7:a0:37:bd:bc:6e:04:4d:e3:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 05:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57eccb795a3af94de361d13171192b53ef2c15c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:f9:e3:a8:26:59:e5:cf:bf:0b:33:08:c1:
68:cb:4b:c2:26:66:07:cc:75:3e:46:f0:a9:07:15:
b0:45:b8:68:e9:93:9d:df:fa:91:3a:6d:c5:4c:60:
c4:31:72:79:59:bc:c5:fc:b9:9f:95:68:84:a1:b2:
85:4a:34:68:f2:2c:10:dc:4e:81:ad:a3:a1:91:7c:
e0:4b:43:c7:5a:c8:a8:33:07:b8:81:a5:4f:ea:9a:
4f:17:fb:b6:74:b7:1e:6e:e3:9d:07:7e:38:65:67:
92:12:14:38:41:20:fe:f3:74:63:7a:2c:a2:24:d6:
72:2e:85:72:22:05:dd:f4:85:ed:e9:c7:a8:9c:0c:
71:d6:ac:fe:2b:c6:a6:52:b6:40:9b:8a:00:01:9c:
eb:84:64:9a:ee:3a:e8:db:43:25:c7:20:f6:18:76:
db:b0:2d:2d:b4:e3:61:4e:c0:2a:04:5e:38:33:f0:
1a:51:aa:fe:6e:07:d4:74:81:dd:59:e2:d1:26:40:
2d:37:d7:40:7b:c3:71:73:9f:42:15:82:25:2d:f9:
b2:24:d9:5f:4c:88:7e:b9:a3:f9:c8:7a:5f:a9:eb:
59:7d:d6:03:c1:ab:07:13:47:f1:15:cc:6f:8b:7f:
fb:50:36:5d:0b:c4:a5:76:d8:f5:fa:58:dc:eb:87:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:CB:79:5A:3A:F9:4D:E3:61:D1:31:71:19:2B:53:EF:2C:15:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V-zLeVo6-U3jYdExcRkrU-8sFcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:c3:52:a9:8f:bb:54:de:0e:46:5e:88:d7:bf:ba:1d:46:52:
40:bf:e5:db:bf:4f:0d:ac:c1:3b:48:ac:73:56:64:08:c9:eb:
b5:98:9b:95:22:13:ef:64:df:3d:1e:50:49:0a:28:83:fa:ea:
85:f6:80:76:c7:ea:17:ac:c2:ba:fb:19:f6:5c:8a:fd:2b:d6:
61:d5:f3:9b:04:c3:0c:2a:7b:71:04:4e:d6:d5:0b:db:60:71:
45:84:3b:ea:f5:63:0c:6f:7b:34:70:b2:83:87:4d:29:d1:f6:
4b:c0:8e:4b:41:34:bc:30:22:06:d8:94:8a:d8:a6:4f:ef:a8:
cf:83:6a:fa:c1:38:3a:64:4d:87:67:54:7c:a6:e2:1f:4c:ce:
ff:8a:54:0f:28:55:66:a9:11:e6:55:22:6c:3b:21:0c:24:33:
6b:2d:b2:24:4c:e3:0d:6d:66:99:8b:12:7e:53:28:ee:3c:16:
44:47:e2:76:5b:29:55:e7:2a:a6:12:ca:95:7b:3c:ed:2b:bf:
b9:61:80:d8:7e:c1:00:b1:f7:68:e1:50:41:54:3d:76:de:26:
ad:a4:13:87:79:45:2d:c4:15:e8:16:73:1f:7a:cd:5b:36:a9:
5f:5b:da:41:ba:75:0b:83:81:01:dc:b9:96:91:f3:9c:fa:74:
d0:6e:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:11:47 2025 by rpki-client