Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VSRHSWGj1cWelbkD0sUqlsACaoM.roa
File: VSRHSWGj1cWelbkD0sUqlsACaoM.roa (raw, json)
Hash identifier: B8H/0f0Fcl7JSCkofZ7EE/sFi4GSpXcBx2pw+dn7nAA=
Subject key identifier: 55:24:47:49:61:A3:D5:C5:9E:95:B9:03:D2:C5:2A:96:C0:02:6A:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD3BC9928D7823DC9699BE0724A731EA3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VSRHSWGj1cWelbkD0sUqlsACaoM.roa
Signing time: Tue 26 Sep 2023 23:04:27 +0000
ROA not before: Tue 26 Sep 2023 23:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d3bc:5845/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:bc:99:28:d7:82:3d:c9:69:9b:e0:72:4a:73:1e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 23:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5524474961a3d5c59e95b903d2c52a96c0026a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:58:6e:e9:36:6a:1e:43:69:98:dc:dd:51:
70:44:c5:dc:49:fb:fd:3d:6d:3e:d2:62:f4:2d:8c:
75:54:f2:de:d9:2f:df:4b:8d:f3:5e:75:48:18:d3:
d7:1b:13:3d:df:d8:1e:81:34:67:b2:82:a4:2d:24:
5b:11:f8:27:13:18:03:f7:b4:9f:14:8b:f4:a3:83:
e4:67:14:dc:26:9e:7a:ce:11:ae:8c:e8:84:aa:06:
4a:96:da:70:4f:1c:17:a4:84:e2:69:c9:cb:72:d4:
7b:6f:13:f7:a1:3f:01:51:32:7a:25:b9:4a:0b:0a:
ea:50:7f:cb:ba:f6:96:35:93:63:1b:e3:23:d5:f5:
d7:47:2d:05:f3:25:b3:17:20:52:80:a7:ed:19:7d:
7e:c8:6c:99:4a:a2:e8:99:4b:d1:aa:89:4d:7c:ab:
80:de:cc:83:c9:2d:e1:b4:2f:18:e3:90:3d:42:1d:
7d:fa:63:4c:2d:ac:e9:8a:86:ae:aa:93:86:0e:32:
3d:93:c0:e3:59:b4:2b:e0:c3:c4:37:a4:b4:51:cd:
55:a5:8a:9e:ef:60:07:dc:ea:23:2c:82:d3:42:8f:
d1:4b:8a:39:c9:f6:97:92:1f:20:e1:76:3a:9d:5e:
79:66:f6:b7:bd:21:14:e4:98:b3:46:60:3b:2f:fc:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:47:49:61:A3:D5:C5:9E:95:B9:03:D2:C5:2A:96:C0:02:6A:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VSRHSWGj1cWelbkD0sUqlsACaoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:15:f8:6b:a6:ea:9a:93:34:42:7d:a2:22:1b:a1:61:e1:c5:
7d:82:41:09:a3:de:fc:fb:b8:63:bd:c6:dc:95:5c:90:b8:95:
51:d4:42:3f:4d:10:34:09:67:c2:bf:c8:05:84:5c:33:e6:b1:
31:71:63:99:e4:cb:c1:d9:20:db:57:92:3d:2a:7a:b5:83:6c:
d6:7b:ff:3a:14:37:04:9a:e6:a9:20:2d:02:3c:69:9d:91:34:
2e:cc:7c:2e:63:47:f4:e8:39:d2:1b:bc:45:52:1e:dd:2c:68:
19:58:d1:50:21:a4:73:95:ba:15:db:9b:0b:25:cc:33:d5:80:
d5:a1:b6:21:f4:8b:19:94:88:26:aa:6e:05:32:24:b4:d1:f4:
5b:27:fc:7a:a7:96:07:07:fe:9d:2c:6e:68:49:1d:a0:08:c7:
6d:74:c2:21:63:2a:14:4d:b8:ca:d6:d8:31:d1:56:ef:84:b0:
22:8a:c5:fb:25:10:51:8d:9d:a4:ab:a6:eb:ad:88:8f:9e:9f:
5c:32:d7:ec:73:06:61:5f:bc:03:8f:c7:0e:72:6c:39:0d:bb:
0a:52:1f:61:fb:41:d6:70:a3:83:ba:f3:c7:67:52:d6:53:64:
7b:49:29:87:1e:ef:42:6e:5f:df:01:51:7f:1f:67:81:6f:2f:
d4:c3:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:39:12 2025 by rpki-client