Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kVAP6WmuliUuPymfFHqGKNp1Afc.roa
File: kVAP6WmuliUuPymfFHqGKNp1Afc.roa (raw, json)
Hash identifier: MOszmT54SB+Rvpc1IHTM5IHp5EXxQ7oZe4KpzZgjHJg=
Subject key identifier: 91:50:0F:E9:69:AE:96:25:2E:3F:29:9F:14:7A:86:28:DA:75:01:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF9892CFE476287743EBB86384C47478A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kVAP6WmuliUuPymfFHqGKNp1Afc.roa
Signing time: Thu 23 Nov 2023 00:16:38 +0000
ROA not before: Thu 23 Nov 2023 00:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:89:2c:fe:47:62:87:74:3e:bb:86:38:4c:47:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 00:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91500fe969ae96252e3f299f147a8628da7501f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:40:5d:0e:66:c7:e6:7a:cc:b5:04:a7:80:
54:91:dc:ec:be:7c:01:b0:52:d7:40:30:cb:f2:30:
e5:01:ea:f0:d5:e4:b2:be:c3:fc:03:64:1e:f4:05:
83:85:b7:72:da:0c:50:ae:26:f8:65:af:97:57:56:
cd:06:74:bd:2f:bf:43:f9:bc:5f:e6:1f:6d:23:62:
44:27:d1:80:b9:8d:30:b5:e0:09:09:8e:45:60:80:
61:4e:fa:0c:90:a3:1a:bf:5a:9b:8a:4e:6d:cd:00:
e8:a9:22:5b:22:7f:a8:70:e8:56:4f:f2:cd:05:aa:
f9:3e:80:28:80:3f:3e:cc:71:d0:be:34:4f:f9:af:
fc:45:e6:a3:a0:04:61:b6:1b:59:dc:8e:c5:97:c9:
0e:5a:86:52:ab:48:6a:3d:70:ca:4d:2b:f7:e4:58:
0d:30:7e:cc:d1:43:37:2c:fa:c6:f0:0f:c8:9e:4a:
2a:2d:d8:94:30:c6:9f:16:77:bf:0f:d4:aa:63:60:
94:d3:60:26:b1:a7:85:f9:5a:2b:47:35:3c:7b:ae:
74:60:41:f8:fd:4b:2a:dd:af:1d:ad:d3:20:9b:d7:
91:10:2d:73:9f:13:0b:67:50:07:9e:cb:43:d3:01:
27:9b:8b:33:26:7a:db:36:45:74:fd:0e:35:c2:b6:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:0F:E9:69:AE:96:25:2E:3F:29:9F:14:7A:86:28:DA:75:01:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kVAP6WmuliUuPymfFHqGKNp1Afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d4:a6:fc:df:8b:5d:3d:44:fc:be:a7:7e:94:d7:bc:1d:d7:02:
13:1c:18:a0:19:87:7f:2f:8c:c3:b7:95:ee:25:35:48:8b:7b:
03:d1:12:84:d3:8b:e0:e2:92:fe:eb:05:ae:96:af:7b:20:db:
02:6b:5a:b9:5c:73:28:ac:48:d6:3e:b7:68:0f:a0:c2:87:ab:
b5:bf:62:0e:47:b0:b3:3c:e6:22:73:63:6e:98:6d:5d:d5:fe:
9b:6f:4d:3c:92:b3:35:e1:bd:ed:2d:f2:57:bf:ac:9a:d6:b6:
85:cf:3e:d9:d4:16:8d:4e:15:52:52:d9:89:27:97:e9:5e:2c:
57:a8:c9:a4:e7:60:95:75:94:92:69:d0:e6:2a:4e:af:de:c5:
c3:0c:29:52:02:a3:55:ed:14:01:65:14:5b:77:60:db:e1:ae:
d4:52:f1:f9:4a:12:e3:3b:7b:d3:fe:bc:7b:53:c4:73:20:54:
88:0d:6f:dc:c2:7d:4e:4d:af:77:91:fc:68:2b:c8:bd:16:c5:
22:71:f3:87:70:00:95:2f:26:0c:0f:f8:c9:56:ad:48:59:c2:
40:9c:38:f5:ca:ed:49:3b:eb:63:46:2b:6a:13:b2:d1:7f:fa:
36:4d:80:d5:98:08:ce:ea:37:71:79:d5:0d:10:8b:13:b9:ab:
0a:1b:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:21 2025 by rpki-client