Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VwQt5OCJ6SkQDQSfcmcWNn1DkAI.roa
File: VwQt5OCJ6SkQDQSfcmcWNn1DkAI.roa (raw, json)
Hash identifier: Qes5CeqfN9zDZKPKDzgFyqALHOZaLcTKJDc+J4JZ4Tk=
Subject key identifier: 57:04:2D:E4:E0:89:E9:29:10:0D:04:9F:72:67:16:36:7D:43:90:02
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA009C29C0F071945BD771D62A2D671D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VwQt5OCJ6SkQDQSfcmcWNn1DkAI.roa
Signing time: Sun 05 Nov 2023 15:11:16 +0000
ROA not before: Sun 05 Nov 2023 15:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:09:c2:9c:0f:07:19:45:bd:77:1d:62:a2:d6:71:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 15:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57042de4e089e929100d049f726716367d439002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:9c:65:18:7c:30:be:da:ac:fd:03:d3:c6:
c4:15:ee:3d:a8:32:7b:e2:27:5a:66:30:dd:73:61:
c7:73:f8:73:e0:b2:0f:eb:0c:e1:c5:1d:9c:74:61:
2d:99:e6:5f:d3:94:0f:3a:1c:e8:9d:af:25:ad:df:
97:1a:52:17:ef:f3:b4:ee:c6:1f:b5:da:c7:b1:28:
05:61:ff:ab:12:dc:6d:5f:0c:e6:1f:29:d1:75:90:
03:a2:e2:70:bb:fc:45:49:16:fc:ee:a5:fa:d2:ca:
72:7e:38:ba:f4:cf:22:d1:55:39:8c:ca:47:47:3e:
6c:a1:78:40:09:41:2a:80:0d:0d:4b:e1:e4:b9:64:
11:f4:4e:6e:5a:b8:6d:fb:bf:a8:94:90:23:0a:98:
67:c6:75:8e:c5:04:cc:d9:c1:37:6b:f3:58:4d:89:
b9:bc:36:b7:ef:1c:11:99:17:13:2a:9b:64:dc:5c:
8c:88:e9:93:1e:5d:39:2b:65:77:0d:36:55:8f:58:
67:76:56:06:c9:83:2c:2c:7f:f4:f7:43:4b:82:e0:
9c:28:b2:63:ef:39:f7:f4:13:95:46:24:54:3d:32:
b6:ed:54:74:0e:26:31:dc:3f:27:84:f2:1d:0d:b0:
10:03:1e:96:0d:86:d1:09:7a:4a:7d:09:59:7e:ab:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:2D:E4:E0:89:E9:29:10:0D:04:9F:72:67:16:36:7D:43:90:02
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VwQt5OCJ6SkQDQSfcmcWNn1DkAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:82:46:bb:8f:3c:68:50:bd:96:bc:82:ac:f5:21:14:88:0d:
5f:c7:19:2b:f1:22:79:c8:02:5f:bc:b1:15:e6:b2:fe:34:b8:
bc:67:57:9b:e3:ac:61:78:f2:9c:fd:9e:ee:f6:c2:0b:93:71:
e9:d5:6a:5e:96:c2:72:1a:84:0b:6c:dd:ed:fe:db:47:6b:47:
a0:70:72:fb:59:c1:34:53:15:61:e4:f3:05:01:c1:fb:8e:bf:
df:25:94:6e:13:90:0d:e3:5f:92:72:de:68:4f:03:e4:b0:60:
51:34:58:87:53:2b:fe:2d:1b:b1:07:72:b5:c2:93:a3:56:06:
eb:33:82:55:16:ea:73:34:ed:7a:26:a1:de:90:05:75:24:77:
a1:a1:cc:81:89:1b:50:7d:06:14:54:21:a2:a7:d9:1b:ef:53:
2b:c7:69:ca:a7:5c:88:03:71:c1:66:d8:5b:7e:10:f9:02:cc:
ae:b1:96:e8:86:f2:1f:46:81:40:4e:df:77:b3:8e:40:b4:05:
28:d4:f3:bc:43:71:ef:b9:7d:9e:92:d4:13:3e:b6:50:e8:fc:
dd:9d:f1:c9:c2:8d:b8:e0:c0:3c:c4:9f:a7:bc:a3:54:1d:3b:
e1:85:23:91:3b:b4:56:38:6e:2b:b2:6d:1b:e6:1a:b0:d1:22:
f6:50:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:38 2025 by rpki-client