Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vhPE_Dvklu2pmyIDx6raklOMlyc.roa
File: vhPE_Dvklu2pmyIDx6raklOMlyc.roa (raw, json)
Hash identifier: POYmVDOH8MekN01w2/pni6ifDehGbk6hXs/fKCxGgyk=
Subject key identifier: BE:13:C4:FC:3B:E4:96:ED:A9:9B:22:03:C7:AA:DA:92:53:8C:97:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6A25B95658FFC9DDAE6AD0C6803925D9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vhPE_Dvklu2pmyIDx6raklOMlyc.roa
Signing time: Thu 14 Dec 2023 21:05:06 +0000
ROA not before: Thu 14 Dec 2023 21:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:6a24:ef58/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6a:25:b9:56:58:ff:c9:dd:ae:6a:d0:c6:80:39:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 21:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be13c4fc3be496eda99b2203c7aada92538c9727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:35:c1:30:e1:49:78:cc:76:df:f3:42:0e:
bd:58:9a:df:73:ad:f5:27:6b:80:2f:dc:2d:66:12:
fb:74:d9:51:c9:93:a4:8f:5e:c5:4e:5a:40:75:0c:
0f:0d:5c:26:0f:cd:19:66:ba:8c:44:78:e4:d6:78:
41:b3:17:43:21:06:44:e4:14:8a:1f:ca:45:ff:87:
7b:4a:9e:e5:67:97:2d:7b:71:49:80:e5:5c:9a:d0:
d2:c3:d0:9a:7d:3f:ab:1e:47:4a:8d:f1:f5:6a:5e:
ee:72:70:41:8a:7b:1a:2f:7d:b1:09:65:76:e3:64:
33:e1:f3:aa:68:9c:38:36:dc:de:ff:20:97:66:df:
a7:dc:9f:c8:a1:9a:d2:ca:d5:29:87:64:26:40:66:
94:f0:ec:b6:f8:46:26:43:3f:b5:45:72:dc:37:a4:
c1:7e:5a:9f:4d:50:9f:45:94:2c:25:01:94:5e:ab:
bd:c0:80:61:4d:05:d9:6e:ec:7e:49:1b:97:71:63:
a0:74:32:e2:41:bd:55:46:69:70:27:e1:a1:0c:0d:
51:41:9e:04:a2:da:73:51:ee:91:11:d9:49:ae:d9:
5b:c7:d3:34:b3:75:28:4a:72:e5:8f:63:a1:79:0b:
79:cf:34:41:ef:96:57:cb:78:da:1f:5a:1a:46:46:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:C4:FC:3B:E4:96:ED:A9:9B:22:03:C7:AA:DA:92:53:8C:97:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vhPE_Dvklu2pmyIDx6raklOMlyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:17:85:92:f6:83:0b:af:e2:7c:07:35:32:14:c0:99:18:8b:
12:c6:ff:52:19:fd:f7:6a:2e:a2:b1:e5:35:dd:27:7a:7e:44:
2c:f7:79:b3:f1:eb:0c:e6:3e:e2:1e:91:39:df:ba:80:0b:b2:
a3:7d:a0:cd:c1:37:ad:9f:04:68:b0:8c:aa:08:70:19:3e:74:
e2:d4:3c:c2:21:5c:30:29:ed:da:0a:b3:47:93:b0:2c:4a:95:
85:aa:56:3c:0e:8b:aa:a8:41:e6:03:aa:a4:61:58:8c:bf:94:
ae:6b:f8:47:94:00:6d:05:12:d5:51:09:94:9b:14:19:57:ac:
52:6c:a5:43:25:ac:15:7c:8c:52:7b:de:fb:9f:c5:dd:fc:cd:
3b:e2:eb:e1:01:26:aa:7d:b9:f4:74:e6:db:36:92:70:6e:86:
d6:04:ef:7b:5f:8c:18:84:2f:f9:bf:be:c9:b6:e4:17:22:4a:
f7:f6:77:ab:93:59:12:2c:a5:a2:4c:a9:47:b5:96:bd:c9:7e:
9a:ff:1b:79:19:7d:1b:6b:3a:7b:1d:5e:20:8a:be:6a:71:05:
87:07:7d:b7:5a:b7:d3:c1:e1:7d:19:a8:7b:42:3b:01:14:90:
3b:48:94:99:7f:f6:a1:de:36:33:0a:7b:c6:c9:55:91:a5:7a:
3f:08:ed:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxqJblWWP/J3a5q0MaAOSXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MjEwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTEzYzRmYzNiZTQ5NmVkYTk5YjIyMDNjN2FhZGE5MjUzOGM5NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT81wTDhSXjMdt/zQg69WJrfc631
J2uAL9wtZhL7dNlRyZOkj17FTlpAdQwPDVwmD80ZZrqMRHjk1nhBsxdDIQZE5BSK
H8pF/4d7Sp7lZ5cte3FJgOVcmtDSw9CafT+rHkdKjfH1al7ucnBBinsaL32xCWV2
42Qz4fOqaJw4Ntze/yCXZt+n3J/IoZrSytUph2QmQGaU8Oy2+EYmQz+1RXLcN6TB
flqfTVCfRZQsJQGUXqu9wIBhTQXZbux+SRuXcWOgdDLiQb1VRmlwJ+GhDA1RQZ4E
otpzUe6REdlJrtlbx9M0s3UoSnLlj2OheQt5zzRB75ZXy3jaH1oaRkaYtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL4TxPw75JbtqZsiA8eq2pJTjJcnMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdmhQRV9EdmtsdTJwbXlJRHg2cmFrbE9NbHljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE0XhZL2gwuv4nwHNTIU
wJkYixLG/1IZ/fdqLqKx5TXdJ3p+RCz3ebPx6wzmPuIekTnfuoALsqN9oM3BN62f
BGiwjKoIcBk+dOLUPMIhXDAp7doKs0eTsCxKlYWqVjwOi6qoQeYDqqRhWIy/lK5r
+EeUAG0FEtVRCZSbFBlXrFJspUMlrBV8jFJ73vufxd38zTvi6+EBJqp9ufR05ts2
knBuhtYE73tfjBiEL/m/vsm25BciSvf2d6uTWRIspaJMqUe1lr3Jfpr/G3kZfRtr
OnsdXiCKvmpxBYcHfbdat9PB4X0ZqHtCOwEUkDtIlJl/9qHeNjMKe8bJVZGlej8I
7S4=
-----END CERTIFICATE-----
Generated at Mon May 12 04:44:52 2025 by rpki-client