Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VBLqbfPfPwIN5SEdOFBpHFDFcU8.roa
File: VBLqbfPfPwIN5SEdOFBpHFDFcU8.roa (raw, json)
Hash identifier: n7WAHBWyXpJcmgXBrNqoeXQDUcjAp3kGstBT+6GPB80=
Subject key identifier: 54:12:EA:6D:F3:DF:3F:02:0D:E5:21:1D:38:50:69:1C:50:C5:71:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFC480A8CE81EB5218DA90804822FD522
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VBLqbfPfPwIN5SEdOFBpHFDFcU8.roa
Signing time: Thu 23 Nov 2023 13:04:21 +0000
ROA not before: Thu 23 Nov 2023 13:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:fc47:e40c/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:48:0a:8c:e8:1e:b5:21:8d:a9:08:04:82:2f:d5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 13:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5412ea6df3df3f020de5211d3850691c50c5714f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:3f:3c:af:21:35:29:73:ee:d9:c1:ce:3f:
fb:1a:53:ac:24:66:85:28:7e:00:45:7f:a2:27:aa:
fc:25:39:2b:9d:19:78:bb:3b:62:8b:96:ef:cf:38:
9f:38:36:06:51:0f:f0:7f:48:e9:d3:df:d2:b1:31:
36:d3:23:bd:34:4e:78:4d:8b:93:6a:84:c6:68:85:
1f:48:51:a3:78:7b:09:fc:2b:aa:65:3c:39:03:72:
64:ee:48:43:2f:75:11:36:2b:19:75:63:b5:a1:6c:
fe:fe:80:c4:f3:cb:8d:17:ab:ff:25:39:69:bb:0e:
59:1c:5e:85:8e:26:5c:e3:45:be:d1:d3:19:97:f7:
00:78:18:15:42:39:e0:30:d6:6d:92:0c:6e:9c:eb:
3a:19:40:c8:eb:51:f7:7a:25:51:9f:50:f6:9a:bd:
2d:2a:fc:2b:6b:4b:9e:8c:e3:a6:e4:01:5d:bb:e1:
cc:4e:b3:09:c3:41:b8:59:22:4b:1a:36:44:83:fd:
4f:ec:dc:81:f0:82:df:5d:df:26:b0:22:f5:7d:d2:
90:63:f1:82:ca:22:38:54:71:18:13:b9:c3:f3:c6:
58:00:ea:30:c5:6b:e4:dc:4d:e9:63:11:17:2a:29:
a0:63:45:b4:37:dc:e7:95:cf:18:e1:c2:6f:c8:4d:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:EA:6D:F3:DF:3F:02:0D:E5:21:1D:38:50:69:1C:50:C5:71:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VBLqbfPfPwIN5SEdOFBpHFDFcU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:cd:c2:6b:ba:98:dd:0b:d3:69:e3:93:9d:50:ec:66:d2:e1:
07:25:37:a9:55:92:59:17:61:d6:db:d8:79:be:cd:f8:30:77:
ec:8b:01:94:1d:15:f5:9d:3c:04:41:9c:63:86:84:6f:40:ee:
c5:4b:92:ce:02:7a:57:c9:c4:22:6d:fc:0c:53:a9:c4:d5:dd:
64:03:de:a9:18:21:29:9e:a7:b9:a1:8a:44:0d:3f:48:da:ad:
70:21:84:7e:72:84:19:46:14:71:3a:32:0b:e2:67:0b:84:64:
9c:7f:e8:d6:27:34:c2:45:f0:b9:31:f5:1b:f8:2e:a1:7a:45:
3f:3d:96:0e:03:9e:58:68:ef:34:e2:34:38:34:43:d4:8f:7d:
75:41:a9:dd:ea:3b:07:ce:cf:85:7a:83:cc:06:80:7c:5e:7a:
eb:50:58:0f:56:5c:bf:10:71:bd:63:01:69:8f:ad:4a:e1:a4:
4e:3b:a0:38:54:51:15:5a:ed:44:d1:e0:e1:df:46:12:bd:de:
06:35:fd:17:8f:1a:7c:97:84:87:7f:9e:c9:ae:3b:d4:1d:54:
94:d7:11:65:17:63:dc:0d:a4:15:52:3f:f8:87:f1:0a:c7:32:
23:04:de:04:ad:ef:5a:4d:51:93:74:35:df:00:10:11:9c:fc:
9b:63:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:51:28 2025 by rpki-client