Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VuoT8JCePXOQ2u3LYBZSh0NQgzU.roa
File: VuoT8JCePXOQ2u3LYBZSh0NQgzU.roa (raw, json)
Hash identifier: rf39sm3nSxI+AYxH3q6YGrqVgj6sL6UwlMNyT54cG30=
Subject key identifier: 56:EA:13:F0:90:9E:3D:73:90:DA:ED:CB:60:16:52:87:43:50:83:35
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF68C73758B70B5EDFFBE4C0785A6C172
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VuoT8JCePXOQ2u3LYBZSh0NQgzU.roa
Signing time: Wed 22 Nov 2023 10:21:21 +0000
ROA not before: Wed 22 Nov 2023 10:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:8c:73:75:8b:70:b5:ed:ff:be:4c:07:85:a6:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 10:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56ea13f0909e3d7390daedcb6016528743508335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:19:ba:72:ff:6c:5b:c0:be:67:4b:1c:87:ba:
f2:3c:16:8b:56:bf:c1:95:6b:09:d0:ca:0b:db:17:
9d:d2:0b:33:a8:cb:99:ed:c2:b1:9e:c9:b0:49:fb:
6a:31:5a:5b:d0:9a:2a:60:d5:99:37:68:db:30:7d:
1c:67:d9:cc:cb:1c:10:4b:e6:c9:2d:53:45:b3:12:
9c:36:61:22:4d:6c:04:56:a1:23:6c:5d:74:10:d4:
59:d9:ab:1c:9e:40:ec:a3:3c:3a:cb:54:6f:15:01:
1d:f8:32:35:3c:c3:57:78:f3:e9:23:b6:c5:1d:73:
eb:62:57:2a:eb:ed:62:f1:5f:41:5b:a9:b9:8a:99:
4a:4d:0a:ee:e5:b7:4e:fe:a9:7c:5e:ea:25:eb:21:
6b:0f:05:88:f0:4a:84:66:91:3b:dc:c1:99:21:4e:
5a:28:5e:6e:8a:41:fb:3f:c8:7f:d8:fc:32:d4:c4:
be:0d:e7:a2:8c:a0:4f:86:37:fc:6f:69:20:f4:eb:
67:76:36:9c:69:5b:13:5b:22:84:3d:8d:cb:77:7c:
3f:53:21:09:d3:3d:22:85:80:6f:dc:b5:3f:d3:1b:
2f:9c:73:22:a1:23:95:83:99:94:cc:1b:07:01:a4:
34:49:2f:b1:d4:c0:af:8c:e9:5e:99:2e:4f:34:01:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:13:F0:90:9E:3D:73:90:DA:ED:CB:60:16:52:87:43:50:83:35
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VuoT8JCePXOQ2u3LYBZSh0NQgzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:34:a6:d8:5d:4b:85:1a:08:31:99:53:c2:a7:5b:df:3a:24:
3d:1c:f9:d4:49:d6:dd:23:cb:b9:46:fe:eb:b1:b5:44:f9:a6:
2b:9e:1f:d1:c9:6a:9a:15:ac:4f:e7:08:f5:1d:72:6e:1e:b4:
30:bc:25:65:0d:42:cd:a4:6f:a3:d4:ad:15:08:ee:ae:7b:45:
d8:5e:8c:94:2d:52:3f:b7:e8:d3:56:72:ca:68:d4:54:97:2c:
f6:a6:ab:bf:c2:5a:29:bf:fd:fb:0c:4e:a2:01:71:0a:3f:86:
bc:58:dc:8b:cb:b0:d5:b0:ab:bd:b0:07:a8:67:0c:c8:e4:50:
5d:79:f6:30:0b:d7:43:c0:7e:42:c4:d2:74:ca:e8:9d:fa:c9:
89:cc:9b:32:25:22:73:b0:98:a0:cf:b9:70:1e:e6:85:90:89:
ec:20:ed:95:61:3f:39:96:3e:61:5b:fb:30:72:ef:84:7d:92:
46:65:a1:7c:30:34:d6:5e:9b:09:b0:95:6b:1d:74:36:34:fa:
fd:c5:50:2d:96:bb:01:b0:a7:f8:25:8f:c5:a8:f9:2e:c4:5b:
df:00:a1:6e:0e:be:9d:61:24:7b:8e:c7:70:4f:7a:d5:01:2c:
89:de:f7:9d:da:55:3c:fa:70:58:18:6c:f9:e6:31:de:4e:82:
76:e7:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:46:13 2025 by rpki-client