Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vgaMVqaJy1zvVPmispIDswojEC8.roa
File: vgaMVqaJy1zvVPmispIDswojEC8.roa (raw, json)
Hash identifier: lxTNgN2fQvdcCEiSyhxf9Ku5Kkl/uG8NAzJiiORwWdE=
Subject key identifier: BE:06:8C:56:A6:89:CB:5C:EF:54:F9:A2:B2:92:03:B3:0A:23:10:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ECB250DA093A5FDBEADEE730461A0DEA7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vgaMVqaJy1zvVPmispIDswojEC8.roa
Signing time: Thu 11 Apr 2024 03:13:06 +0000
ROA not before: Thu 11 Apr 2024 03:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:25:0d:a0:93:a5:fd:be:ad:ee:73:04:61:a0:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 11 03:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be068c56a689cb5cef54f9a2b29203b30a23102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:52:ce:83:c5:11:dc:b0:1f:7b:00:b7:76:
ac:e6:da:c5:42:96:e9:2a:99:b5:07:09:26:f4:69:
80:94:6e:b0:72:a5:fc:71:9a:0a:7e:65:fb:bd:80:
8f:f5:de:b8:ca:55:47:65:29:9a:78:57:cc:0b:07:
e9:1a:de:ed:fb:c4:1f:97:14:61:f4:36:f3:94:e1:
50:85:82:d3:8e:98:e2:89:a4:78:65:51:00:d8:5a:
75:ce:c7:49:c8:45:8f:1d:ad:90:ce:a4:d9:84:e6:
f9:b3:13:e7:53:7f:c1:3d:66:9d:74:d2:36:d2:a5:
47:89:e1:87:c3:07:f8:9a:f6:20:18:cc:16:6c:11:
3f:6e:17:37:f9:f1:be:f1:fc:90:a1:3d:01:54:14:
0c:ab:9d:1d:da:c9:87:c1:ef:2c:6f:23:7f:b5:08:
c9:0b:e4:e4:96:cf:f1:62:4c:42:16:11:ce:4e:fa:
d0:0e:e0:1a:8b:10:a8:71:81:20:ba:df:e2:dd:31:
bd:67:f5:4b:6b:8c:70:a9:95:35:8d:f5:69:12:41:
dd:34:1a:fd:28:89:ec:22:6d:d7:9e:fe:a4:0e:ba:
c8:92:3f:07:d1:81:89:7a:2c:25:0a:4f:27:8a:1d:
56:22:c9:4a:f2:8a:b1:5a:00:01:32:cb:7c:b1:25:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:8C:56:A6:89:CB:5C:EF:54:F9:A2:B2:92:03:B3:0A:23:10:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vgaMVqaJy1zvVPmispIDswojEC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:06:e9:cb:ba:d1:26:d9:c6:b4:7c:c3:5f:c1:16:5c:b4:e1:
53:be:41:7f:c7:f3:5c:98:46:9d:1f:5e:1a:14:96:bc:fc:9b:
6c:b4:62:92:1e:81:88:78:c1:11:52:dd:c5:0d:cb:35:8f:67:
b2:f5:03:6c:cf:4a:b2:71:ad:9e:1a:02:c0:6d:1c:5d:f4:8a:
60:a7:e5:c1:87:97:be:99:c6:ca:1d:9d:75:fb:6b:b0:61:e3:
51:eb:96:50:a3:29:ce:cc:27:79:c1:e1:e2:e1:8f:e6:fc:a6:
fb:2a:74:3b:cf:9b:dd:30:8a:75:83:c8:b0:8e:b5:04:2e:31:
13:93:ce:90:8f:ff:bd:a2:bf:c9:8f:10:23:da:c0:b4:0b:8a:
c6:86:58:36:46:00:c1:89:a2:3c:de:07:6c:4e:9a:bb:29:46:
66:8a:68:08:69:97:cb:56:b8:ff:d2:5e:01:f8:93:a8:08:51:
82:68:c4:af:f6:84:f1:bc:39:0f:df:c0:16:21:99:8b:64:d3:
50:b9:de:25:8c:e4:b7:1c:43:35:f1:3c:3e:fc:0a:54:37:b6:
39:9b:98:cf:47:cc:e2:41:41:8f:0a:d0:02:dd:94:ec:d7:58:
c0:90:6d:bd:89:fc:02:91:33:b7:3c:0a:0e:57:a3:d5:58:9b:
c1:b8:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:37 2025 by rpki-client