Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vtoXp6noYa2qetBYQNhT1PKle0w.roa
File: vtoXp6noYa2qetBYQNhT1PKle0w.roa (raw, json)
Hash identifier: bBu7aXQvOTML7PKQrjMztqDJDoY3yh94XM9uCTQQuzk=
Subject key identifier: BE:DA:17:A7:A9:E8:61:AD:AA:7A:D0:58:40:D8:53:D4:F2:A5:7B:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF5A128EBF877637E8102661ACAE62020
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vtoXp6noYa2qetBYQNhT1PKle0w.roa
Signing time: Wed 22 Nov 2023 06:04:21 +0000
ROA not before: Wed 22 Nov 2023 06:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:f5a1:1a70/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f5:a1:28:eb:f8:77:63:7e:81:02:66:1a:ca:e6:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 06:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beda17a7a9e861adaa7ad05840d853d4f2a57b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:07:f3:25:47:f8:bb:4e:f6:fb:f1:23:94:
2b:c3:11:85:bb:b4:09:c3:df:cf:b2:a4:13:61:13:
bb:d3:9c:c5:c2:69:51:49:b4:1a:22:8a:a7:36:0c:
53:ad:6d:3c:9a:a3:05:a2:86:0c:1a:fb:9b:ff:7f:
18:c2:31:33:12:64:e3:ce:57:54:bd:a6:86:0b:f8:
93:b2:4e:f0:4f:fe:e7:2e:59:d1:ff:0d:71:90:d0:
59:70:10:03:1c:9c:63:1f:ae:e1:26:d0:28:68:b1:
87:5a:30:fc:d7:1c:1b:70:a1:17:2d:36:19:55:f6:
07:dd:12:a7:a9:0f:39:15:c3:cf:eb:a0:1f:f2:fa:
13:48:d3:f7:b1:d7:e8:2a:1e:14:8b:3c:99:2c:6a:
42:80:5f:3a:4d:f9:37:2d:a7:17:73:62:34:1a:f2:
5d:61:d7:de:0e:07:6b:c7:78:9c:71:32:eb:9f:e1:
8b:a3:9a:65:25:7f:c1:26:7c:c7:e0:87:20:60:96:
9e:d9:87:5c:89:c0:1b:6f:51:9d:5f:5e:3e:8a:a0:
17:0a:1f:d4:9d:42:13:96:5b:62:70:06:79:d3:11:
a2:52:89:8b:c6:b8:bf:f6:25:8d:d6:41:0c:cd:80:
d6:37:12:ee:21:28:6a:0f:ae:d7:c2:31:56:b0:86:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:17:A7:A9:E8:61:AD:AA:7A:D0:58:40:D8:53:D4:F2:A5:7B:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vtoXp6noYa2qetBYQNhT1PKle0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:8e:9e:c2:c9:e2:69:18:6f:bb:52:32:ef:19:d7:3b:a4:56:
d5:ca:75:39:1e:f1:7d:6e:51:71:f6:a0:8d:74:aa:1b:61:87:
25:30:ee:71:88:ad:e2:8d:b3:62:8e:bd:dc:54:68:39:2a:42:
d9:7c:03:7f:8a:7d:c1:37:4a:9e:db:d7:50:ea:ba:b9:b9:72:
88:5d:35:d6:a2:9b:56:33:f7:87:41:d8:e7:5e:5e:f2:73:97:
a4:35:cf:50:9b:8c:58:0c:43:cd:a5:97:dc:fb:f0:3a:0d:c9:
2e:5c:a5:6a:fe:1b:db:27:ae:ba:21:2f:ba:df:6b:3a:4d:cb:
5f:92:3e:b4:3d:aa:ad:bc:ea:c1:af:54:11:96:88:75:cc:cf:
f6:c0:1f:0e:7d:6c:51:fe:a0:76:8b:13:5f:7c:fe:22:aa:15:
94:62:a4:03:ae:7f:fa:70:b2:f9:2e:11:47:0b:d3:8b:cd:98:
4f:96:a9:c7:d2:5a:88:29:ac:ed:72:c5:b5:51:35:74:9e:33:
65:f8:94:ba:b8:32:7e:68:b3:17:98:ce:5b:90:81:65:47:6d:
2b:7b:2a:3e:6c:56:74:f6:37:22:66:f4:6c:ee:a8:bd:26:67:
66:98:56:21:b7:24:ec:99:bd:2e:27:56:e0:b5:62:64:5a:e1:
90:a8:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:31:13 2025 by rpki-client