Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VS-KoQMu8rl2wP3KkB9rtILreIY.roa
File: VS-KoQMu8rl2wP3KkB9rtILreIY.roa (raw, json)
Hash identifier: 81hRrFGwPhm2x6/Nh4TAUpRahTBQuBMcJYDq4ENH7pE=
Subject key identifier: 55:2F:8A:A1:03:2E:F2:B9:76:C0:FD:CA:90:1F:6B:B4:82:EB:78:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C46FCEEC47ABB7810454B5AF3D8606D50
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VS-KoQMu8rl2wP3KkB9rtILreIY.roa
Signing time: Fri 08 Dec 2023 01:13:50 +0000
ROA not before: Fri 08 Dec 2023 01:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:fc:ee:c4:7a:bb:78:10:45:4b:5a:f3:d8:60:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 01:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552f8aa1032ef2b976c0fdca901f6bb482eb7886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:29:f2:8f:f0:b9:4f:da:af:63:aa:f2:ad:
5d:ff:c0:9f:ef:e2:ad:a9:98:3a:72:9c:25:67:7e:
03:83:25:16:f7:9a:9a:9d:83:8d:62:ab:6f:7a:f2:
00:e9:8a:3f:c2:72:9b:53:1a:a6:61:5d:04:d3:bd:
07:c0:87:43:ad:80:d0:17:59:a3:c4:d7:48:01:8c:
78:8c:b3:9e:94:dd:44:ce:ab:e3:21:de:a1:81:ab:
d2:64:00:77:d2:ed:8a:a0:cb:af:f1:36:63:10:79:
aa:aa:4e:93:84:95:25:ee:17:39:2c:31:1c:82:3c:
2a:95:b3:96:37:05:a0:10:a7:e4:24:62:e6:4b:19:
9a:4a:fa:ec:6f:18:88:15:5d:e1:c7:2f:fe:bd:2e:
e8:71:18:03:c6:d6:45:53:ad:55:06:99:5c:be:97:
47:18:96:7f:b2:38:f1:3e:e9:ad:ef:63:1e:c3:42:
fd:c8:51:a1:d6:5f:1b:7e:16:34:49:11:36:72:07:
de:fa:78:72:ba:c6:ca:f4:bb:4c:de:7c:9f:d8:bb:
5e:68:6a:38:90:8c:cc:63:15:22:e9:c2:e6:54:38:
e4:60:a4:04:76:1c:a6:d1:79:0f:54:32:7d:b0:3a:
4e:bd:59:cc:87:98:4a:ea:6c:cc:9d:4a:3e:42:c0:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:8A:A1:03:2E:F2:B9:76:C0:FD:CA:90:1F:6B:B4:82:EB:78:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VS-KoQMu8rl2wP3KkB9rtILreIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:c3:56:b5:1e:37:6d:75:07:95:6c:a8:8f:e5:d2:b5:25:fa:
63:bb:72:33:aa:05:9d:83:b4:c5:46:61:22:07:aa:0a:01:b6:
0a:97:75:75:08:f0:6b:54:64:c5:2e:89:d3:42:60:f7:57:4a:
31:76:82:a8:0d:08:09:0c:89:a2:a7:d3:cf:b5:b3:87:b5:33:
b4:a8:4f:3d:9b:b0:46:91:bb:88:14:b0:24:09:17:fc:36:9b:
44:86:59:8d:4b:f9:0e:2e:1f:b6:9b:87:01:a8:2a:b4:99:82:
b6:56:c7:0b:87:12:3f:5b:e3:a3:0f:ed:d8:45:b7:92:16:6a:
d6:0e:15:1b:ae:6f:cc:96:2b:86:91:a2:3d:b2:b9:06:30:ea:
bc:18:15:a2:30:28:c6:e5:f4:f3:07:d5:f9:4c:c2:d5:82:10:
11:44:b1:b7:30:3c:28:53:25:54:75:57:a7:a1:fd:e6:55:6a:
46:be:fc:8d:26:82:7f:a6:b6:e1:9e:e5:53:1f:da:fd:3a:d9:
1f:f5:fa:75:1d:ee:ab:fa:57:db:ef:9e:80:cd:f6:75:a8:74:
52:b1:4d:ff:b2:65:dc:cd:0e:6b:4d:81:47:76:4c:15:e3:1e:
a6:9b:5c:1b:bc:9f:e2:42:a4:55:fc:77:06:bc:f0:2f:e0:df:
0b:b4:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:00 2025 by rpki-client