Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vfamVXAoykcSM_AZ161ohEfoVLU.roa
File: vfamVXAoykcSM_AZ161ohEfoVLU.roa (raw, json)
Hash identifier: gqDoc7rkbMYS4o2FsKQiipcMvY0QCpY+Ta+oPEn2h2Y=
Subject key identifier: BD:F6:A6:55:70:28:CA:47:12:33:F0:19:D7:AD:68:84:47:E8:54:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C13E36FEF7221E27DA3EA2FB334E2708F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vfamVXAoykcSM_AZ161ohEfoVLU.roa
Signing time: Tue 28 Nov 2023 03:05:21 +0000
ROA not before: Tue 28 Nov 2023 03:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:13e2:be12/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:13:e3:6f:ef:72:21:e2:7d:a3:ea:2f:b3:34:e2:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 03:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdf6a6557028ca471233f019d7ad688447e854b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:8b:02:50:17:fc:f1:7c:ff:38:4f:23:93:
13:b4:14:1c:28:ea:09:e3:4f:16:79:3b:e7:a4:8d:
4f:91:fd:ae:22:1f:f9:27:7a:7d:a2:d2:73:a9:ed:
a6:c3:7c:94:10:8f:0a:e4:46:89:7d:7c:23:bf:08:
e1:3d:4b:f2:37:b2:5d:88:36:13:65:5a:f2:aa:04:
88:7d:7d:b7:e5:a5:ba:08:57:3e:da:7c:50:9a:70:
c6:59:57:bc:30:63:9a:a5:1d:38:89:0d:9c:a3:4d:
6e:1a:7c:91:08:b1:01:81:7f:31:55:8c:f5:a8:4a:
82:62:5a:bb:82:08:95:a8:af:f7:5d:a8:61:f5:6d:
ed:a1:46:ce:06:48:00:4f:9b:41:d5:25:cc:02:41:
5e:ec:88:f3:66:6a:af:a8:04:4a:40:4b:8a:33:75:
77:77:72:0b:ec:3e:a2:e3:bb:73:22:05:f9:e6:c2:
4b:6c:ee:a9:58:f9:bf:b5:84:89:9d:e7:bf:02:b6:
a5:83:96:81:e4:2d:6f:7d:f0:18:44:65:24:c6:d5:
12:c6:95:bc:bb:6d:61:11:ba:81:aa:12:85:e5:8b:
cf:95:41:39:74:cf:3c:fd:bb:d3:7e:c4:bc:69:98:
30:91:11:c7:a5:b9:16:ea:de:8d:81:5e:6b:13:ee:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:A6:55:70:28:CA:47:12:33:F0:19:D7:AD:68:84:47:E8:54:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vfamVXAoykcSM_AZ161ohEfoVLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:37:2b:ea:1c:be:d4:e4:f5:cc:98:1a:99:e5:b5:55:f6:44:
99:b8:73:a4:d9:00:66:c9:05:eb:a2:80:38:28:cf:20:28:f9:
bb:aa:b8:6f:18:8b:fe:d0:18:59:32:59:f5:7b:e4:3f:cb:72:
51:eb:e6:45:20:77:c0:f3:45:a0:ad:22:0f:4c:c7:53:34:5a:
93:18:45:4c:98:5c:f3:69:be:3f:ce:40:5e:e6:08:e8:00:a0:
3b:e6:1b:cb:0a:68:c5:d1:af:f1:ae:a2:6b:bb:b9:48:ac:c6:
b3:d8:66:d4:02:b3:1b:17:ae:31:c3:ef:c2:66:10:69:34:fc:
fc:8f:d1:4d:bb:9c:c4:0c:c1:fc:9b:99:b0:ff:f0:e7:67:2a:
d5:d3:66:ef:b1:81:15:3b:71:97:9f:84:38:bd:7b:2f:79:78:
e6:12:f9:ed:7a:e3:48:d0:c6:ca:56:b2:38:4c:a2:52:e8:23:
5f:31:1b:ff:99:4c:83:aa:50:bf:46:79:b9:32:06:84:d5:d1:
3b:d8:2d:10:a8:f9:03:4c:81:7b:cd:96:d1:6d:af:69:33:b3:
a7:97:c2:d1:f5:62:a1:e8:17:a1:da:b8:9e:e8:d5:cf:00:e5:
8a:31:78:17:7b:32:62:71:71:d0:62:b6:c3:d1:4a:4e:8d:e1:
d8:f1:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:02:08 2025 by rpki-client