Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kvc52aPE4vhpFATl3bT2aZo9yq0.roa
File: kvc52aPE4vhpFATl3bT2aZo9yq0.roa (raw, json)
Hash identifier: ifA+ONwv2tz/EGsuvRdiUzOd+bIa3cWnTmwWmnvy6e8=
Subject key identifier: 92:F7:39:D9:A3:C4:E2:F8:69:14:04:E5:DD:B4:F6:69:9A:3D:CA:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD23E90669D0EC9BF60DB4F475E077D53
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kvc52aPE4vhpFATl3bT2aZo9yq0.roa
Signing time: Wed 15 Nov 2023 09:09:57 +0000
ROA not before: Wed 15 Nov 2023 09:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:3e:90:66:9d:0e:c9:bf:60:db:4f:47:5e:07:7d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 09:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92f739d9a3c4e2f8691404e5ddb4f6699a3dcaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:5d:3b:43:f8:f7:8c:e7:b9:ac:6d:e0:3a:
68:f3:3a:b6:8e:f6:53:f3:9f:dc:87:6e:05:ac:ec:
26:6c:4a:86:4b:56:0a:81:e4:16:ac:f0:2e:03:f9:
5c:21:28:b3:0b:23:7b:d6:39:76:ea:48:bc:a2:d4:
10:73:e2:cd:78:dd:91:28:60:ed:e4:71:68:99:0d:
50:7f:a4:15:e2:ef:e5:2b:6e:15:36:70:eb:11:06:
06:11:c2:2c:4b:10:3f:83:9d:11:83:35:41:72:6f:
24:bd:31:55:6a:83:a0:fd:01:71:79:6d:f2:e5:89:
d4:84:b4:36:cb:af:42:53:9e:27:d2:18:19:76:56:
56:fe:db:7f:0c:ff:a3:eb:fe:21:6d:28:a8:16:30:
58:20:7b:cf:6c:d8:87:fd:fc:87:13:06:86:c6:8e:
4f:f7:1a:9c:ae:62:74:c1:54:f4:c8:60:71:2b:ef:
8b:cf:c9:49:ce:83:a1:a5:2a:95:a6:a2:b9:5c:4c:
17:ce:92:5e:78:3a:11:ed:b5:cf:d4:e0:a7:32:35:
9c:ad:f3:5f:b1:c1:4f:bc:3b:53:63:27:b4:e3:ab:
68:90:8f:00:c1:7d:ba:2e:a0:99:c3:47:99:b6:70:
b9:cf:37:29:1a:89:c7:6b:22:5b:64:aa:cf:24:8d:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:39:D9:A3:C4:E2:F8:69:14:04:E5:DD:B4:F6:69:9A:3D:CA:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kvc52aPE4vhpFATl3bT2aZo9yq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:f7:76:19:1a:75:8b:d8:bb:b3:95:40:82:f4:59:4f:24:02:
aa:a8:b6:8f:28:48:42:02:61:b4:7a:68:5c:bb:c9:7c:de:13:
c5:40:7b:82:b9:0b:b9:01:63:df:e0:ce:ac:8c:48:31:23:84:
d0:b0:ee:ad:52:36:ef:12:e0:98:17:f5:fc:b3:00:00:4d:aa:
0e:fb:9f:f4:aa:9a:50:3e:ba:47:f4:60:c6:43:40:87:a7:e8:
37:8c:b4:e6:60:57:20:09:09:9b:a7:d1:a2:23:69:61:88:2b:
b7:5c:58:27:39:78:df:23:53:1e:43:ac:1f:4a:c0:a6:85:1b:
75:1a:89:ef:7a:95:21:a3:26:6b:a4:ae:45:fa:1e:42:9a:7d:
c5:59:e1:f6:62:a2:78:ae:33:28:79:a7:ff:99:56:e8:92:60:
c6:0e:26:32:a3:e0:e4:4a:eb:c1:b6:2b:60:2f:66:51:e5:2e:
0b:9a:e9:c5:d3:05:1d:e4:b2:18:59:25:6a:51:00:e9:96:b8:
b4:18:ee:48:8a:f2:d1:77:9f:83:c6:81:c5:4a:c1:fd:fe:1b:
85:44:f7:c0:97:0b:96:cd:2d:17:42:61:20:f9:38:2f:ba:97:
04:23:3c:1b:81:d4:2b:a9:b7:98:14:f2:fd:07:1c:50:0c:c1:
3c:22:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:36:17 2025 by rpki-client