Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VTK58vUdMVzbHl0hdk_L62lFy0g.roa
File: VTK58vUdMVzbHl0hdk_L62lFy0g.roa (raw, json)
Hash identifier: i/nLe7ZkSF8ogQKy2SoLiAs75ehtcmhasZ0P6eo5xjg=
Subject key identifier: 55:32:B9:F2:F5:1D:31:5C:DB:1E:5D:21:76:4F:CB:EB:69:45:CB:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAFEF9AA7E3A06452AEA888903417E9BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VTK58vUdMVzbHl0hdk_L62lFy0g.roa
Signing time: Wed 20 Sep 2023 00:13:50 +0000
ROA not before: Wed 20 Sep 2023 00:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:ef:9a:a7:e3:a0:64:52:ae:a8:88:90:34:17:e9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 00:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5532b9f2f51d315cdb1e5d21764fcbeb6945cb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:e0:03:d5:43:b2:ae:cb:5b:01:08:24:63:
7e:bc:7c:1e:c5:1f:d4:89:a0:4f:87:65:14:5a:24:
69:ae:60:28:06:8f:73:51:ca:4c:fe:94:fd:20:fb:
c8:34:81:2c:7d:e6:c1:5a:83:6a:20:f3:ff:80:06:
e6:5b:31:f5:92:3a:e8:67:c1:c5:48:4c:4d:11:b3:
56:5b:67:01:d3:a2:86:74:1c:17:b7:ad:53:c5:8b:
26:1d:87:59:9b:b3:d1:15:26:11:2d:ae:e5:e2:09:
77:53:93:a7:bb:9c:18:28:fb:cc:95:94:92:f3:ec:
d7:11:dd:96:f4:58:3d:08:af:e4:2a:b8:ba:1f:33:
79:6c:35:3b:2a:14:66:22:62:75:4c:30:34:a9:e4:
2e:d0:a0:80:d9:83:67:b2:0a:99:0b:9c:1f:13:24:
bc:20:f2:87:43:1a:78:14:95:f2:98:4c:ba:f8:34:
e3:a5:26:9f:6f:e5:32:20:59:c4:08:77:dd:c6:69:
15:b8:9a:df:f5:5f:63:86:9d:94:d4:03:0a:c1:85:
1d:47:66:d4:b4:bc:e3:1d:47:70:31:6e:22:4c:a3:
18:9e:14:4f:81:26:f3:59:fc:51:e1:55:c0:84:50:
f8:79:b0:98:45:15:4f:9e:37:7a:61:63:f1:57:cb:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:B9:F2:F5:1D:31:5C:DB:1E:5D:21:76:4F:CB:EB:69:45:CB:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VTK58vUdMVzbHl0hdk_L62lFy0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:1c:d5:ec:44:c5:dd:95:0d:35:23:ed:fa:a9:8d:8f:95:01:
c1:9e:c0:da:d6:b1:de:16:f4:3b:c5:8a:5b:ec:fd:33:01:52:
3a:c0:64:c6:b8:03:ea:1c:8b:67:0d:46:e7:a1:4b:de:b7:f9:
35:8b:c7:a2:a7:3c:b0:17:71:f7:11:93:7e:3b:53:d3:d3:a4:
34:e9:85:ae:0d:f3:7c:cc:2d:93:dc:b7:2d:09:e5:32:23:1a:
8b:66:c3:3f:02:fe:8a:d4:8e:da:07:43:0f:96:d3:40:78:dd:
2c:59:13:99:09:d7:d3:14:cd:a1:c3:11:b6:53:c2:44:78:04:
e1:66:9c:5f:16:bf:ca:a7:88:aa:09:48:d8:01:77:7b:64:e7:
fa:3a:fc:a9:4d:47:d3:f9:06:95:82:91:26:dd:58:f7:2b:d0:
2c:14:74:c5:83:2f:d9:15:8f:4c:59:4e:b5:53:03:cd:f0:3f:
54:a7:85:17:4a:59:3d:a0:58:ea:72:c3:a2:d7:12:81:26:57:
8f:6f:0e:da:75:ec:12:e3:f9:ac:b0:3e:a7:ec:b1:d8:09:0a:
92:6a:70:13:1b:cf:96:c3:f7:44:b1:5d:af:6f:80:a7:f1:00:
6e:b0:27:ab:c6:cc:56:e3:38:cf:e4:fb:de:e1:53:39:b0:99:
09:85:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:58:02 2025 by rpki-client