Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kBVG-qesCBUzgObEDvVBgyoJVkw.roa
File: kBVG-qesCBUzgObEDvVBgyoJVkw.roa (raw, json)
Hash identifier: NVSa5kUxE1nidoVUow2iyRJ1HR1wHXZ9TwAkfrqB9G4=
Subject key identifier: 90:15:46:FA:A7:AC:08:15:33:80:E6:C4:0E:F5:41:83:2A:09:56:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7C9C8BC2EB81333B51020BD7DEA33C15
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kBVG-qesCBUzgObEDvVBgyoJVkw.roa
Signing time: Sun 29 Oct 2023 18:05:16 +0000
ROA not before: Sun 29 Oct 2023 18:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7c9b:b7e6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7c:9c:8b:c2:eb:81:33:3b:51:02:0b:d7:de:a3:3c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 18:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=901546faa7ac08153380e6c40ef541832a09564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:86:c2:a3:ab:1a:71:7d:03:e1:9a:a7:04:
81:49:82:30:6d:3a:33:bf:51:7f:2a:2b:93:25:df:
d4:ea:9d:ed:67:c3:f0:bd:41:4a:2c:fb:21:21:46:
04:c7:aa:5f:cc:ab:cb:09:c0:07:29:10:f4:dd:9a:
a0:9a:cb:b7:b4:40:a5:09:f7:97:ae:aa:20:70:68:
c2:1c:8f:4d:35:26:0a:9e:6a:08:3c:4b:87:d4:a0:
b0:78:c8:79:a9:4c:2e:8b:51:79:0c:63:7d:bb:2d:
7f:cf:59:2d:d9:34:7d:7e:af:4a:f2:63:45:51:bc:
76:89:37:52:2f:e0:a5:b5:d3:89:fd:cc:06:97:2a:
86:38:20:21:44:01:a1:88:f0:26:2e:fb:04:41:aa:
ff:8c:73:00:d7:51:8c:84:e2:06:f7:44:67:4b:ca:
7c:66:9f:fb:53:a4:af:61:b4:7b:62:b0:2b:4d:c2:
99:ea:ba:fb:3e:e2:d2:c7:07:9f:0e:5a:39:93:e2:
5a:f3:08:77:d4:0a:c3:9d:18:68:08:1d:24:34:7c:
51:fb:0c:ac:2b:68:5f:0d:1c:f6:aa:b0:c3:bb:36:
ad:4c:fd:fd:b9:02:6f:de:16:5f:30:01:c5:c9:80:
34:77:57:fc:ac:15:18:2f:e4:e2:f8:cc:c3:29:f9:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:46:FA:A7:AC:08:15:33:80:E6:C4:0E:F5:41:83:2A:09:56:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kBVG-qesCBUzgObEDvVBgyoJVkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:15:f7:d5:7d:56:80:83:83:4d:41:b8:0f:b8:a9:04:95:8e:
fe:cf:cf:67:1d:ca:7f:3f:ff:8b:aa:c1:14:37:e8:c9:02:17:
8a:89:39:f7:ac:28:b5:8e:2a:25:37:6e:e2:3e:e0:da:2e:38:
fd:19:85:2a:ae:f1:b8:9a:2b:67:75:bb:28:cc:21:00:6f:0b:
08:33:d8:68:5f:ab:7b:69:c6:b7:6e:b0:c8:74:bd:c7:75:43:
6f:05:8e:42:c3:b2:2f:f3:02:4a:10:d3:06:b4:85:f4:73:04:
15:a1:fd:63:6e:b9:b3:38:71:a8:00:b3:18:25:c5:5a:6c:3e:
41:df:8b:70:1a:15:54:a7:85:bb:8b:b2:57:39:c2:29:c3:2f:
a2:7c:dd:b2:53:20:2f:ba:57:ac:0f:67:2a:d3:4d:f1:54:18:
10:12:76:5c:e3:d9:aa:e7:15:79:42:8a:a5:a3:74:97:87:47:
f3:de:b7:41:bb:82:33:b2:19:8a:f1:d0:e5:91:84:dc:0e:47:
e2:b0:84:8b:1e:83:f7:de:c6:7d:c9:d9:f3:8f:f7:b9:b0:d4:
55:8b:67:e9:42:92:f5:28:b9:6e:99:62:89:ea:c0:0d:3a:17:
4e:c8:1d:3f:de:03:a1:95:4f:85:85:1a:1f:99:78:36:91:f3:
82:36:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:22:09 2025 by rpki-client