Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ve0YMv0bC7gkTCuXsiKuOblv1rw.roa
File: ve0YMv0bC7gkTCuXsiKuOblv1rw.roa (raw, json)
Hash identifier: /3dADj1i8vmu8r0LMJ4IVZPlust/0xGEX8Z2V0P8OFE=
Subject key identifier: BD:ED:18:32:FD:1B:0B:B8:24:4C:2B:97:B2:22:AE:39:B9:6F:D6:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACBCD324684DCCA5F41AF3910400BF57E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ve0YMv0bC7gkTCuXsiKuOblv1rw.roa
Signing time: Mon 25 Sep 2023 10:05:37 +0000
ROA not before: Mon 25 Sep 2023 10:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:cbcc:538c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:cd:32:46:84:dc:ca:5f:41:af:39:10:40:0b:f5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 10:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bded1832fd1b0bb8244c2b97b222ae39b96fd6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:41:ca:d5:e2:c7:7d:60:38:0d:f8:82:75:
83:d0:46:2d:ec:b3:3b:31:30:72:17:31:c2:59:91:
75:44:40:ea:1a:4c:f0:02:9f:4a:a6:25:d1:51:63:
58:53:8e:b6:35:71:df:90:57:ae:51:37:68:d3:ff:
2e:9b:21:a3:0f:c8:19:49:63:f2:15:30:52:8d:b7:
17:0c:9e:75:f1:d5:60:44:69:4c:99:fe:00:a6:ee:
33:99:3f:04:f9:b9:00:10:9d:57:61:38:79:4e:9d:
b4:b5:c3:24:61:07:5a:05:83:27:78:2f:66:74:ef:
85:2f:41:46:6a:c8:5c:8c:04:51:eb:05:86:c0:3c:
02:40:a2:c4:12:e4:89:59:16:6c:36:f9:f7:43:dc:
8f:6f:6a:ff:67:c1:ea:91:24:ec:46:8b:8a:31:8f:
ab:bc:be:71:fc:01:02:4d:bc:f1:4c:de:9f:9a:16:
a1:4e:54:12:8f:9a:ad:d1:b9:3c:f5:6f:ef:9c:62:
cd:25:52:f5:3f:a6:ea:a9:34:76:11:ff:58:ad:bb:
1d:57:0d:df:26:16:b9:ad:30:0a:dd:65:2f:c0:0b:
05:0b:a0:73:85:01:4f:28:20:1a:c2:f5:79:b8:7a:
fe:e4:57:a9:e6:4a:8d:81:a5:fc:4c:b0:35:d9:02:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:18:32:FD:1B:0B:B8:24:4C:2B:97:B2:22:AE:39:B9:6F:D6:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ve0YMv0bC7gkTCuXsiKuOblv1rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0b:af:b0:78:a0:c4:38:6c:8d:01:50:d8:b0:41:9a:a1:ce:
73:d5:0f:15:2d:5c:7a:4e:51:53:49:0e:43:06:27:29:99:15:
d7:5b:38:4b:58:77:b6:79:38:ab:aa:65:5e:cd:88:0c:6b:3c:
3d:2d:5f:44:41:5f:89:db:a4:67:1a:c3:49:8a:ac:38:90:c8:
39:d0:1c:5b:57:db:5f:64:7c:66:51:ec:89:f6:37:3c:1e:95:
f8:55:c6:91:4f:6b:24:07:c5:81:67:71:2c:bb:a8:59:26:fc:
ab:0e:4c:65:98:fe:7a:0f:ac:a3:84:80:ed:52:3f:f9:64:33:
6b:93:c6:9c:8e:f7:c9:dc:d6:2b:51:3f:6c:cd:a6:3f:5a:d8:
2a:e3:c6:9b:01:b7:05:3b:72:02:7d:fa:95:69:cf:0c:d6:b9:
ba:27:b3:95:23:c1:9c:94:15:70:c3:aa:7f:e8:15:d4:f2:f1:
db:a5:00:22:39:fc:32:35:7a:52:9e:af:97:35:69:ef:c5:91:
ec:96:1b:f8:7f:72:e3:05:18:a9:73:af:b4:a3:22:4d:e7:31:
84:f2:b7:76:a4:44:5c:2b:12:c7:eb:af:da:b9:c5:66:d7:ad:
cd:db:b2:f3:9f:e7:c3:76:b7:3d:87:39:ea:a2:20:c2:ec:14:
3e:dd:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:14 2025 by rpki-client