Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDYTAWvqVbFSnRHT-i4E6VnL6m8.roa
File: vDYTAWvqVbFSnRHT-i4E6VnL6m8.roa (raw, json)
Hash identifier: gN84t1B2I9T62X7vTpKzi+4iWxXp05kyBVHH4h/EPkE=
Subject key identifier: BC:36:13:01:6B:EA:55:B1:52:9D:11:D3:FA:2E:04:E9:59:CB:EA:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACCE72E12CD76D0CFCE077A0CD849171F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDYTAWvqVbFSnRHT-i4E6VnL6m8.roa
Signing time: Mon 25 Sep 2023 15:13:37 +0000
ROA not before: Mon 25 Sep 2023 15:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:e7:2e:12:cd:76:d0:cf:ce:07:7a:0c:d8:49:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 15:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc3613016bea55b1529d11d3fa2e04e959cbea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:10:cc:52:a1:fa:1e:ed:bf:b0:ed:cb:5b:
d0:06:73:c8:d1:cb:bf:23:2b:ef:a3:e0:3b:f1:72:
ba:d1:07:0b:21:5a:24:b1:bb:4d:99:d3:70:95:de:
eb:e3:cf:88:22:6c:05:31:9a:7a:22:b8:a0:04:cd:
11:42:47:e2:57:19:4a:fd:f3:1b:00:22:6e:86:e5:
d1:f9:cb:3c:3d:d8:e1:54:f3:af:f4:31:36:1c:16:
2c:5e:22:23:57:51:6c:26:e1:e3:e6:62:66:c8:d4:
38:bd:9f:1b:f4:2d:fa:83:c0:e7:52:d6:20:ce:a5:
8b:e3:ef:4d:ec:a0:aa:75:58:ea:0d:40:86:2e:8b:
2a:d2:78:a2:3c:58:ed:c0:61:d1:ff:f7:21:4a:e7:
69:d6:10:e0:22:43:bb:7e:b6:d7:d5:6a:25:2b:7d:
54:e5:ae:d5:82:56:22:65:19:e1:da:40:74:76:90:
79:57:b8:7a:82:12:e1:84:16:70:ec:47:8c:c1:0b:
66:4a:b6:f4:dc:04:57:c6:d0:47:0c:c5:b1:f7:8d:
40:c3:4b:14:28:38:de:c6:a7:d6:f0:c3:3c:06:5a:
9d:1c:78:a4:e1:5b:fe:ab:8a:a9:ab:86:83:67:3b:
9f:e2:ac:48:23:cf:d4:0c:eb:3c:dc:67:6e:bf:d6:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:13:01:6B:EA:55:B1:52:9D:11:D3:FA:2E:04:E9:59:CB:EA:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDYTAWvqVbFSnRHT-i4E6VnL6m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:03:5d:f5:86:79:e6:b8:27:16:60:64:41:a4:68:eb:60:20:
0c:6d:08:68:e7:e2:65:e1:26:35:10:1c:c2:7f:db:f0:75:96:
2a:fc:bf:f6:d9:ff:39:38:c5:bf:94:14:73:95:3f:37:75:b5:
e8:93:94:16:80:66:f4:d5:2e:f2:07:fc:f2:7d:70:7c:c6:f9:
12:de:35:1a:6c:05:e1:ba:1c:6a:5d:78:1c:10:95:fb:de:58:
0b:30:c6:af:f6:49:9e:b7:ee:d6:2f:0b:ec:78:b4:27:cd:d1:
11:02:dc:3d:c6:4c:5f:b8:6f:aa:29:87:63:73:f1:8d:8a:4a:
8b:ae:f3:b0:d2:d9:7a:7e:ac:4c:c6:60:3e:76:c6:5d:24:88:
ce:c0:79:f7:34:f4:2f:09:45:45:d3:77:ef:02:51:83:82:71:
a5:50:20:dc:f5:a9:2e:10:af:c8:8c:05:5e:9f:00:56:52:66:
4d:b3:31:31:f1:eb:6d:b5:13:ee:8a:73:cc:4a:53:cc:c3:28:
8a:ae:cc:fa:93:ae:f0:bf:a4:22:ed:af:b0:51:1b:d2:81:15:
47:a7:7a:db:9e:4d:2c:d4:af:14:67:59:ed:95:a8:ae:20:fd:
2e:f9:17:3b:08:b2:74:12:91:b1:a5:19:aa:20:91:30:db:a2:
f1:67:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:54 2025 by rpki-client