Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pVf2tj-x_eOlwUngy-XhtejMZHs.roa
File: pVf2tj-x_eOlwUngy-XhtejMZHs.roa (raw, json)
Hash identifier: 2G3bisna1TwYzuUzOqjYc0q4T/PXJ+B/0ob4n91Y82Y=
Subject key identifier: A5:57:F6:B6:3F:B1:FD:E3:A5:C1:49:E0:CB:E5:E1:B5:E8:CC:64:7B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4516D6C47E38508AA4CD7F064363FF4A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pVf2tj-x_eOlwUngy-XhtejMZHs.roa
Signing time: Wed 18 Oct 2023 23:20:06 +0000
ROA not before: Wed 18 Oct 2023 23:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:16:d6:c4:7e:38:50:8a:a4:cd:7f:06:43:63:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 23:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a557f6b63fb1fde3a5c149e0cbe5e1b5e8cc647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:85:da:33:e2:b5:7c:40:17:41:fe:97:ea:
32:fa:76:73:93:9f:4b:bb:1d:53:f4:e4:cf:e1:18:
f4:67:7f:09:13:86:18:1f:28:74:ec:5a:b2:26:34:
e9:9c:d5:2c:39:d8:cb:ad:e9:48:bd:97:b6:1f:e5:
ec:89:f9:12:0c:87:73:e5:61:14:01:2c:b9:9a:4a:
5a:ad:25:31:01:bc:76:25:8b:a7:00:46:1e:b1:ca:
c7:53:f4:67:7d:a9:f2:6e:f9:4b:1b:87:62:5c:34:
14:b5:3e:d4:fc:45:24:2d:c2:4a:80:4e:a4:79:d0:
c3:1b:78:a8:69:93:a7:bb:b7:5c:1f:c0:ad:42:e1:
e3:6f:71:e5:71:03:2d:b3:65:04:51:76:c4:01:9e:
5c:0b:71:89:ed:4d:cc:ac:64:20:29:00:4f:4e:dc:
47:83:88:fb:c0:1b:85:b9:a4:0f:f0:8c:a7:0c:ad:
f5:63:13:3c:af:a8:f8:ea:cd:ca:f5:8e:8b:5b:8d:
29:f5:50:a3:d2:79:d7:f7:3f:32:50:3f:ad:8c:21:
5e:d0:1d:89:09:0e:74:6e:f0:bb:e4:c5:fb:57:56:
8e:53:76:7a:c1:04:23:82:e7:27:dc:72:6c:ac:51:
cd:91:c6:ca:55:91:5f:a8:ed:5f:14:0e:ce:a6:03:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:F6:B6:3F:B1:FD:E3:A5:C1:49:E0:CB:E5:E1:B5:E8:CC:64:7B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pVf2tj-x_eOlwUngy-XhtejMZHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:f2:ed:98:30:97:03:73:5f:51:4b:c4:5a:5b:dc:e1:e0:41:
a2:56:1e:8a:6e:c8:92:7b:fe:99:24:27:6a:9c:72:4d:d3:a0:
78:a6:26:8e:95:25:d5:f7:65:81:73:32:7f:39:85:b3:7c:e6:
28:d8:98:13:93:87:53:19:5a:f1:12:b2:78:20:53:49:36:18:
19:17:41:07:e2:fa:ad:09:7e:79:c1:9f:6b:4b:36:fb:f9:d2:
92:dd:c9:ef:10:4c:56:80:79:d4:5c:fe:ae:e5:89:c4:cb:59:
c6:02:ae:d5:68:8f:00:60:f0:08:4d:c3:64:9c:12:38:27:6b:
41:b7:ab:7d:91:a3:7c:8c:d8:fa:5f:1a:45:72:0d:4f:8a:f4:
8d:82:c6:35:b8:12:b4:8e:fa:46:35:1c:2c:c2:8c:87:29:d3:
10:71:3c:66:16:18:4c:54:18:5e:89:5a:36:51:39:bd:c9:93:
af:cc:05:61:08:ca:f2:7a:5d:e2:31:0f:3c:20:39:d3:fd:63:
02:b6:60:90:bc:79:e9:aa:3d:c4:3c:9b:32:8e:0e:47:ce:60:
26:f3:13:0b:42:0f:ac:c6:ca:4b:df:43:9b:ac:17:bb:0f:4a:
3a:6b:e8:6a:c1:7e:a5:fd:82:ff:88:b4:bc:39:a2:28:30:36:
4d:14:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:17:11 2025 by rpki-client