Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V0v9JRyNNCmoVC5ZdyQDgnKnVcM.roa
File: V0v9JRyNNCmoVC5ZdyQDgnKnVcM.roa (raw, json)
Hash identifier: UH/UWRIOjsMW+zzxrZGLu3QTb0cD6LXaJ729PcYPQcY=
Subject key identifier: 57:4B:FD:25:1C:8D:34:29:A8:54:2E:59:77:24:03:82:72:A7:55:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B548A114FC198FF43C2D9FA92A7E4B146
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V0v9JRyNNCmoVC5ZdyQDgnKnVcM.roa
Signing time: Sat 21 Oct 2023 23:20:16 +0000
ROA not before: Sat 21 Oct 2023 23:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:8a:11:4f:c1:98:ff:43:c2:d9:fa:92:a7:e4:b1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 23:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574bfd251c8d3429a8542e597724038272a755c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:bb:4a:ce:69:d1:25:ae:e2:f9:37:73:db:
ed:fe:3f:c1:2a:75:c8:9a:21:42:7b:e4:57:62:f2:
5f:b4:93:8c:04:7f:9f:0d:e2:e6:2d:fc:3b:81:e3:
d9:69:52:5b:85:f4:1c:de:4a:ef:1f:60:c7:72:19:
d0:66:85:a4:16:d5:c0:1d:7d:16:6e:19:b0:d1:46:
93:e2:33:d2:a2:e0:a3:74:74:ae:15:5f:3e:ee:51:
f0:c0:20:5a:43:ae:ae:f8:dc:29:93:ee:02:d3:76:
97:4c:09:fe:fc:18:e9:f9:03:71:af:fe:a1:b4:4f:
03:75:d2:9a:b6:e7:52:ca:05:f3:7a:57:26:92:13:
2b:9e:3f:c2:48:10:be:0f:c7:bf:c8:f5:9c:02:c0:
bc:88:c9:6e:05:ac:0f:dd:b0:5d:e1:80:2b:9d:52:
6c:a0:90:9a:08:87:ca:cd:8e:4a:ab:43:16:6c:a4:
35:23:b7:b9:19:b6:53:e0:b5:ca:65:6b:47:26:a3:
0b:86:65:12:96:98:ed:35:52:a9:b0:e8:3e:15:95:
7a:0d:5c:fa:ba:63:ba:8e:1b:8f:f5:b3:9f:61:85:
87:1b:ff:20:a1:70:73:82:bd:30:18:82:40:96:f0:
7d:76:09:d9:8e:ef:68:db:0a:9e:61:63:44:1c:53:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:FD:25:1C:8D:34:29:A8:54:2E:59:77:24:03:82:72:A7:55:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V0v9JRyNNCmoVC5ZdyQDgnKnVcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:50:2d:c2:7d:3a:5c:87:2a:61:4f:e0:8b:ec:f8:51:06:d0:
26:67:4f:aa:a3:17:9d:ec:3f:ed:93:a6:17:a5:94:cd:46:b0:
99:3c:30:4a:f8:82:d9:27:a5:57:3c:9d:da:7e:9a:02:55:b1:
19:e7:e9:6b:c0:f0:ef:c9:46:8b:ad:08:9e:9b:47:3f:93:eb:
39:2d:39:13:52:e9:f7:3d:a2:c0:ef:56:91:84:b2:cc:e5:f9:
84:10:52:d9:0e:78:05:c3:f4:90:4c:25:d3:1c:7f:86:fa:34:
56:ee:79:de:3c:a9:b1:87:ad:30:95:85:61:bd:ed:ff:c3:a2:
d2:5c:ce:0d:22:95:81:8b:51:74:9b:24:db:5e:b4:91:00:04:
b0:6f:00:01:74:59:6c:f5:4e:a7:41:13:3e:df:f0:2e:e9:13:
67:bc:99:d3:d2:de:ac:22:4b:94:f0:5a:fa:71:a2:86:88:4f:
fe:ae:e7:87:8b:14:66:71:50:a1:4a:f8:e0:ef:a6:05:27:1f:
e6:53:bd:4f:4f:9e:1e:74:df:61:55:8d:be:3a:1b:14:f2:37:
b4:c7:8c:de:11:75:f0:f8:59:33:69:8f:7f:63:66:36:f8:d1:
70:be:2e:f3:d5:58:87:d0:ca:03:69:d2:c3:df:e0:28:47:5a:
b9:c5:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:38 2025 by rpki-client