Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VBeUpSONoPeYK1V8umWiInP4FKM.roa
File: VBeUpSONoPeYK1V8umWiInP4FKM.roa (raw, json)
Hash identifier: NtYdynD/VMSx2/cRlf/I29ra5r9y3psEWn0zIjj9eHY=
Subject key identifier: 54:17:94:A5:23:8D:A0:F7:98:2B:55:7C:BA:65:A2:22:73:F8:14:A3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B16EFCAF3906243ADD6715C38E5C5E4A5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VBeUpSONoPeYK1V8umWiInP4FKM.roa
Signing time: Tue 10 Oct 2023 00:14:55 +0000
ROA not before: Tue 10 Oct 2023 00:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:16:ef:ca:f3:90:62:43:ad:d6:71:5c:38:e5:c5:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 00:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=541794a5238da0f7982b557cba65a22273f814a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:7d:46:25:9e:01:d3:aa:64:6d:a3:ae:38:
fa:6e:ab:f0:fa:23:ff:a7:7a:59:6b:88:d0:63:ea:
3a:b5:16:e7:40:71:1a:2e:6e:22:24:77:fa:c7:d6:
65:b2:23:83:04:c9:af:36:4e:db:15:44:8d:2c:86:
36:da:61:49:78:c6:3a:89:a2:ae:97:ec:a4:15:08:
cd:37:69:f1:f4:fe:db:5d:90:11:6b:cb:88:cb:77:
6c:7b:61:09:4a:84:ec:fa:bc:a9:cb:be:89:10:c3:
64:f5:a6:74:d7:94:fd:a6:1a:f1:c3:f2:1f:f8:59:
f0:fd:bd:39:7d:d4:f0:c1:5d:86:22:03:6e:2a:4b:
00:9e:7a:74:cf:af:2e:98:bc:73:63:b8:ab:79:45:
ce:e5:c2:4f:5d:00:48:7f:b7:ff:46:fd:e6:36:2d:
d5:31:2b:97:ef:af:82:ec:b4:84:9f:76:16:5d:ca:
1e:ee:bd:d0:41:0d:db:6e:af:5b:a1:7a:22:68:a6:
72:4b:84:0d:1f:5b:7d:3d:fe:92:b5:1a:ef:8c:76:
ab:0f:72:e2:06:27:bd:61:6b:e1:b9:4a:6d:52:73:
b2:d4:6c:f1:0f:58:da:a0:7f:32:d1:a2:7c:92:29:
cf:70:2b:d9:c5:8f:df:05:52:a0:fa:9c:8d:33:8f:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:94:A5:23:8D:A0:F7:98:2B:55:7C:BA:65:A2:22:73:F8:14:A3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VBeUpSONoPeYK1V8umWiInP4FKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:fe:92:0f:60:fb:71:79:73:93:d6:b9:39:d4:87:09:d6:df:
17:c4:89:53:fa:fb:b1:fc:0f:8c:e7:8c:9c:b7:a1:4f:6f:96:
ae:c6:6b:67:c7:ef:fd:f1:59:9f:6d:cf:b0:cc:c1:cb:2f:b7:
42:da:47:4e:45:f3:88:57:3b:cc:c2:8c:91:f3:b2:80:89:3e:
c0:53:cc:ab:d8:0b:f9:85:06:a9:32:dc:be:8c:dc:33:d0:e0:
c2:1b:55:5f:d5:5f:c5:4f:54:3f:68:88:91:2a:af:eb:fd:51:
bd:b0:80:85:d8:9e:5b:67:e7:30:e6:96:35:76:12:0f:62:e5:
17:c9:53:c2:ad:f8:19:42:71:db:4f:67:e7:13:be:3d:2f:43:
0e:d3:df:00:9b:52:84:14:a5:a8:23:31:cf:b6:fc:99:ff:e8:
37:fd:1e:74:dd:36:6b:24:ba:03:68:20:96:f8:73:f5:26:ba:
70:02:ed:e2:08:3a:c2:3b:12:25:29:02:51:d4:f4:20:c3:8d:
1b:33:d6:82:3d:1c:26:24:85:3b:61:d2:9b:92:a4:7c:4d:85:
14:4c:71:82:3e:01:3f:b2:1f:81:f1:85:68:e9:30:77:d0:cf:
63:0e:96:3a:2f:3f:7f:5f:c2:e2:18:ce:48:16:bd:4e:8a:d3:
3e:16:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:21:48 2025 by rpki-client