Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VeUhCVcd_mtTq8DCpm51zvCDTYc.roa
File: VeUhCVcd_mtTq8DCpm51zvCDTYc.roa (raw, json)
Hash identifier: Ohf9MgA8NUV+vcRj2i9esBq202219kbpLWWMLuHlYM8=
Subject key identifier: 55:E5:21:09:57:1D:FE:6B:53:AB:C0:C2:A6:6E:75:CE:F0:83:4D:87
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB50F26C91DB89577F67F03DC48A90163
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VeUhCVcd_mtTq8DCpm51zvCDTYc.roa
Signing time: Fri 29 Dec 2023 10:11:58 +0000
ROA not before: Fri 29 Dec 2023 10:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:0f:26:c9:1d:b8:95:77:f6:7f:03:dc:48:a9:01:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 10:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e52109571dfe6b53abc0c2a66e75cef0834d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:36:12:b1:b8:76:26:d8:4d:e2:8e:43:e6:
dd:95:d9:53:d3:c5:9b:37:bb:1d:db:43:00:9d:eb:
43:77:e9:31:c9:40:fe:bc:fa:a7:8a:08:3b:20:e9:
f3:f9:ad:db:dc:62:f6:09:6b:31:18:4c:1d:e1:d9:
ec:4e:18:bc:a6:aa:31:50:f0:f3:79:46:01:f9:07:
cc:e4:6f:80:65:05:1d:bd:e0:30:f6:3e:91:19:06:
cc:52:39:71:ff:28:a2:1f:ee:19:2a:96:18:3e:e8:
e9:9e:22:d5:97:09:f6:6d:bd:f2:40:e7:ce:39:ea:
a4:10:53:90:ae:13:91:c4:66:18:81:bb:c2:99:1a:
13:4c:d9:56:1a:95:08:1a:da:db:3b:25:e8:9a:4c:
af:be:a4:26:10:78:36:9b:30:4b:a8:ae:dd:df:bf:
5e:44:97:11:10:ae:58:81:c0:f1:42:48:a2:0e:ef:
af:41:db:52:b9:f2:f9:33:cb:c8:d2:be:19:79:36:
d3:34:df:b9:9e:97:5f:93:45:ef:1a:4f:bf:56:25:
7b:d7:b7:5b:a7:86:23:32:10:fe:6f:ce:47:ae:58:
b8:61:08:fb:a4:9e:64:15:fc:4e:a1:d1:3c:82:4f:
aa:6c:47:4b:05:4d:3b:0e:a8:47:7b:9c:50:7d:87:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:21:09:57:1D:FE:6B:53:AB:C0:C2:A6:6E:75:CE:F0:83:4D:87
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VeUhCVcd_mtTq8DCpm51zvCDTYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:ff:84:3d:b5:da:87:a2:fa:72:2c:40:f8:6c:2a:71:41:e8:
19:a1:a4:12:39:84:f2:13:8e:8b:39:b9:93:b6:d1:b7:f7:2f:
c2:f8:ac:78:17:50:ec:94:f3:3c:af:dc:9d:ea:ef:6d:f6:3a:
03:86:30:6a:b6:74:e0:fb:2f:22:94:27:a0:f8:bd:be:8e:d7:
96:3a:4d:c5:c0:fe:78:ba:ba:6a:6f:01:13:8a:86:da:cc:97:
b4:29:0e:0a:95:f5:db:2f:d4:ee:9c:b0:e0:41:6c:fd:34:fc:
ca:c3:91:cb:39:22:4f:8e:e8:0e:82:dd:83:f7:74:17:89:80:
7a:e6:9b:3a:82:6e:11:9f:1c:5e:ae:4b:0b:fd:43:28:47:55:
c2:af:e2:4b:89:44:dd:15:8e:50:40:f2:4f:84:22:a2:44:43:
96:db:d5:8f:29:e6:33:1e:04:33:d0:7d:d7:0f:51:3e:0f:09:
dd:29:03:36:1d:8f:c9:03:a3:83:65:17:4d:7a:77:55:20:6b:
ab:b4:9d:16:7f:62:c8:6d:88:28:79:0e:98:f9:23:14:85:d6:
e4:de:bb:12:7d:c4:59:62:1a:ad:72:34:51:54:ed:cd:1a:4b:
21:36:bc:d3:44:e5:ba:80:da:b4:54:a3:45:ac:29:72:bf:9d:
66:95:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:38:32 2025 by rpki-client