Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vyKdGhZKVP1FTVhxxgDCN-aAWXk.roa
File: vyKdGhZKVP1FTVhxxgDCN-aAWXk.roa (raw, json)
Hash identifier: zvmEUHtEibR+xZtyTZldRPeeXrEucE1Ugirmm3NUEDw=
Subject key identifier: BF:22:9D:1A:16:4A:54:FD:45:4D:58:71:C6:00:C2:37:E6:80:59:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C53DF6D2A91CC7B516097B7A05DD74A7F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vyKdGhZKVP1FTVhxxgDCN-aAWXk.roa
Signing time: Sun 10 Dec 2023 13:16:40 +0000
ROA not before: Sun 10 Dec 2023 13:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:df:6d:2a:91:cc:7b:51:60:97:b7:a0:5d:d7:4a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 13:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf229d1a164a54fd454d5871c600c237e6805979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:25:3f:cf:a2:53:72:78:e8:3c:2a:ae:b8:
ea:a7:47:0e:14:52:f5:17:aa:8d:26:e6:34:56:c2:
9b:99:db:58:be:28:30:15:b7:7e:48:ee:2a:98:8f:
c3:70:65:63:3f:41:13:6d:c6:8f:9e:a5:be:cc:7c:
2f:8d:b1:d0:83:1f:a9:f7:76:38:42:e2:0c:81:8e:
27:a2:b7:45:fa:bb:90:a7:0e:84:28:52:fe:3a:9f:
ca:65:12:c1:d3:88:ee:73:48:30:c7:ce:53:fe:ab:
09:4d:28:57:71:79:11:e8:6a:ab:ab:f6:34:cf:27:
67:32:fe:8a:f8:3f:33:21:2e:04:58:49:cf:16:d9:
ef:0c:2b:17:15:19:4b:9a:48:d6:48:17:a8:d7:84:
2a:0a:83:6f:7c:1f:ea:9f:42:d7:94:3a:53:3d:e7:
82:1f:59:fb:d4:a3:ea:ef:3d:be:3b:d9:b4:a0:ab:
94:cd:2c:ed:bc:1f:cc:6e:e8:53:88:b1:45:ae:30:
3a:70:e6:ed:02:50:13:f3:3c:9e:b7:d0:fd:b8:04:
74:87:ad:c0:b0:a8:f3:47:3e:da:0e:1b:94:b8:b3:
cb:d9:07:f7:f6:74:dd:51:a5:4b:fd:d4:d9:4f:5e:
48:bc:7c:9d:f4:52:11:72:8a:e8:0d:09:31:b9:c8:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:9D:1A:16:4A:54:FD:45:4D:58:71:C6:00:C2:37:E6:80:59:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vyKdGhZKVP1FTVhxxgDCN-aAWXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:9e:f8:7b:d0:ba:c8:35:19:79:a8:e9:24:39:22:87:a5:cc:
4c:e8:5f:ad:07:ef:43:25:b0:82:63:4b:f2:80:43:19:08:f4:
ef:c2:aa:52:f4:2d:85:f7:31:f3:81:bf:61:dc:ad:5a:56:ef:
d9:4c:b9:1c:71:db:9f:02:09:79:a4:d1:a2:52:01:a8:52:bb:
8b:a9:ba:93:ca:c4:f1:25:48:be:4c:96:d5:de:11:46:9c:f8:
3a:a2:b9:37:ec:74:ad:37:64:ea:ab:05:e5:04:94:40:d1:8c:
2a:ee:52:c5:ed:bb:86:62:68:79:03:bb:11:85:fa:b6:85:76:
60:8d:16:53:d2:a8:34:b3:92:ee:32:a1:d8:0e:d5:db:41:3f:
8d:f2:e6:01:16:0a:3e:b9:82:0a:7c:63:6d:b9:c2:62:cf:a9:
f5:b0:27:8d:34:3a:d5:9b:f6:e2:bf:be:eb:6c:d1:06:3c:e5:
b8:2d:32:d0:29:cb:99:d5:f0:0c:11:7f:bb:28:ce:eb:a7:96:
fd:d5:04:7c:d2:8b:08:4f:b4:c5:aa:e8:b2:6a:5a:cd:e6:d7:
fc:23:3a:42:1d:88:6f:b4:ae:9d:c9:af:75:fe:d4:f4:2d:9a:
86:96:8d:e8:29:52:4e:16:78:38:b9:fd:ae:19:cb:6e:7b:9f:
1f:ad:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:44 2025 by rpki-client