Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VLRUpchFH5HuFPdunWOJIBeydvc.roa
File: VLRUpchFH5HuFPdunWOJIBeydvc.roa (raw, json)
Hash identifier: cuaA3WmQ9cxikWtvjiJylevxbxxoLBtXUvMDVbDgV9Q=
Subject key identifier: 54:B4:54:A5:C8:45:1F:91:EE:14:F7:6E:9D:63:89:20:17:B2:76:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFB09CC5884F9BA479560DA26D825CA3C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VLRUpchFH5HuFPdunWOJIBeydvc.roa
Signing time: Wed 04 Oct 2023 14:13:57 +0000
ROA not before: Wed 04 Oct 2023 14:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:09:cc:58:84:f9:ba:47:95:60:da:26:d8:25:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 14:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b454a5c8451f91ee14f76e9d63892017b276f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:6a:ab:4b:f4:5d:6f:9a:87:ed:54:d3:c6:
12:a9:ef:41:1d:f2:2d:61:7b:74:6d:6c:d6:7d:6f:
92:95:d8:ef:e9:32:26:be:08:bb:bd:d3:4e:c2:d2:
cd:b5:01:eb:59:07:d8:3c:a5:72:ee:51:18:d7:10:
c2:eb:d1:42:d6:51:ea:ee:d7:27:57:be:53:24:83:
a7:f4:fd:87:d1:02:65:55:23:38:29:7b:71:ea:ef:
9d:b9:92:6b:08:6b:fc:ea:f4:3f:3f:0b:97:0b:4f:
b9:4e:c5:fb:74:5d:ca:e5:3c:6b:71:1d:cd:87:d0:
c5:d6:94:a1:fb:a6:7a:37:1a:53:fc:02:12:43:9a:
80:d3:f8:98:75:2d:da:a0:9e:a2:e4:98:00:53:02:
23:ad:8b:f8:6b:ef:d3:f8:47:1d:a1:0c:ef:68:f8:
ef:5b:1f:ce:73:c1:41:92:b2:b0:51:99:04:89:0e:
fa:0e:0d:59:13:5a:ca:9e:be:83:3f:6f:a2:08:e0:
55:81:71:2d:72:09:87:17:c0:55:ff:96:8e:2d:e5:
1b:54:bc:a8:a4:9b:c1:15:aa:cc:26:44:7f:3b:ac:
66:9d:5f:59:98:ca:94:19:fa:92:72:28:fa:17:07:
d3:ce:a0:06:10:d4:38:aa:f2:f5:20:d7:fe:ad:b9:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:54:A5:C8:45:1F:91:EE:14:F7:6E:9D:63:89:20:17:B2:76:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VLRUpchFH5HuFPdunWOJIBeydvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:34:36:40:7f:d2:fb:21:21:56:71:78:de:ef:8c:a1:03:68:
06:f1:c3:60:8f:92:80:5c:e9:ac:f0:98:b3:b6:c6:18:f6:71:
fa:ee:83:72:f6:5c:09:5d:0e:32:6a:24:ca:dc:45:e6:90:a4:
5b:cd:7e:ad:38:cc:b7:69:29:58:8b:e8:61:d2:1c:80:2e:7b:
4a:48:13:1f:49:92:6e:12:c4:d8:94:70:8c:81:f9:e4:bd:24:
65:ac:f3:4e:fe:d5:7a:13:ab:9e:e2:d4:b2:85:df:50:f6:bd:
3c:13:3e:47:d5:d6:b6:a3:b3:e5:ae:82:35:92:0a:8b:a0:e0:
5a:b9:b9:88:01:72:74:06:ab:5c:ad:f9:22:e6:c2:73:ca:bd:
6a:d5:52:74:e4:c5:cc:61:78:59:88:ef:a5:18:b5:3c:d8:17:
d7:64:aa:0e:a9:64:11:b7:f1:dd:41:38:6f:c1:96:d4:a5:31:
31:b6:95:85:90:45:15:4d:ba:77:2c:cc:83:de:11:1e:dc:25:
e9:5f:7c:53:5a:e1:c5:60:12:49:b5:fd:57:73:a2:c0:9c:10:
aa:be:70:40:d4:90:c0:65:38:63:0d:bf:c0:99:00:6d:7a:b1:
97:5a:0d:e3:06:7a:22:0b:bf:8c:a8:37:35:7c:57:ac:a7:91:
6b:87:e2:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr7CcxYhPm6R5Vg2ibYJco8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA0MTQxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGI0NTRhNWM4NDUxZjkxZWUxNGY3NmU5ZDYzODkyMDE3YjI3NmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Vqq0v0XW+ah+1U08YSqe9BHfIt
YXt0bWzWfW+Sldjv6TImvgi7vdNOwtLNtQHrWQfYPKVy7lEY1xDC69FC1lHq7tcn
V75TJIOn9P2H0QJlVSM4KXtx6u+duZJrCGv86vQ/PwuXC0+5TsX7dF3K5TxrcR3N
h9DF1pSh+6Z6NxpT/AISQ5qA0/iYdS3aoJ6i5JgAUwIjrYv4a+/T+EcdoQzvaPjv
Wx/Oc8FBkrKwUZkEiQ76Dg1ZE1rKnr6DP2+iCOBVgXEtcgmHF8BV/5aOLeUbVLyo
pJvBFarMJkR/O6xmnV9ZmMqUGfqScij6FwfTzqAGENQ4qvL1INf+rbkJ0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFS0VKXIRR+R7hT3bp1jiSAXsnb3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVkxSVXBjaEZINUh1RlBkdW5XT0pJQmV5ZHZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKY0NkB/0vshIVZxeN7v
jKEDaAbxw2CPkoBc6azwmLO2xhj2cfrug3L2XAldDjJqJMrcReaQpFvNfq04zLdp
KViL6GHSHIAue0pIEx9Jkm4SxNiUcIyB+eS9JGWs807+1XoTq57i1LKF31D2vTwT
PkfV1rajs+WugjWSCoug4Fq5uYgBcnQGq1yt+SLmwnPKvWrVUnTkxcxheFmI76UY
tTzYF9dkqg6pZBG38d1BOG/BltSlMTG2lYWQRRVNuncszIPeER7cJelffFNa4cVg
Ekm1/VdzosCcEKq+cEDUkMBlOGMNv8CZAG16sZdaDeMGeiILv4yoNzV8V6ynkWuH
4kg=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:08:57 2025 by rpki-client