Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Vy2ZT3tPOB7Xn5QvHoGjgfCGu6M.roa
File: Vy2ZT3tPOB7Xn5QvHoGjgfCGu6M.roa (raw, json)
Hash identifier: l90JXwAQWXpZTiyLN0tw0dMTFQZq/Cvp6koOj7ha4Ks=
Subject key identifier: 57:2D:99:4F:7B:4F:38:1E:D7:9F:94:2F:1E:81:A3:81:F0:86:BB:A3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C261FB5CB7A7A3E7E2A8082B09617C52A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Vy2ZT3tPOB7Xn5QvHoGjgfCGu6M.roa
Signing time: Fri 01 Dec 2023 16:04:21 +0000
ROA not before: Fri 01 Dec 2023 16:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:261f:9b63/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:1f:b5:cb:7a:7a:3e:7e:2a:80:82:b0:96:17:c5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 16:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=572d994f7b4f381ed79f942f1e81a381f086bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:3d:9f:92:c9:b2:7b:70:e6:0b:09:3a:08:
de:d8:68:1d:a2:94:09:27:d0:ef:a8:df:28:32:d3:
fe:40:91:66:00:4e:c0:27:1e:2d:2a:3a:a1:2f:d1:
dc:42:2e:db:fd:fe:67:97:71:de:cf:2b:9e:fd:20:
ec:2e:df:53:98:e6:81:aa:39:76:65:ca:16:da:27:
a4:74:89:29:a0:1c:c1:83:46:31:65:0d:c3:b7:a7:
69:7f:ea:0a:90:1c:80:d3:39:45:09:38:4c:09:e4:
a4:76:ad:8a:ad:45:4f:8f:e9:7c:ef:d0:22:df:02:
b4:cd:2e:31:b4:2d:aa:ce:35:b7:98:12:32:70:7f:
6d:38:de:41:d7:5d:7f:b0:da:cb:d3:3c:12:eb:cf:
8c:89:f4:26:6a:d7:ae:e3:9d:c6:eb:e9:50:ed:cc:
d5:f7:89:0b:39:33:42:15:b3:74:f9:3b:a6:fd:ec:
85:78:87:a3:37:73:bc:76:65:70:bf:2d:e4:00:d3:
6e:d8:dd:1a:ac:db:a7:22:f7:79:a4:f7:6f:d0:eb:
41:98:fa:3f:0a:61:05:bb:54:cc:2e:d1:c6:a0:ec:
03:a2:87:dd:c7:c4:fd:88:74:6b:e2:66:89:c2:b0:
ad:62:4f:f0:99:93:a2:9c:c5:da:cb:3c:1b:d3:af:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2D:99:4F:7B:4F:38:1E:D7:9F:94:2F:1E:81:A3:81:F0:86:BB:A3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Vy2ZT3tPOB7Xn5QvHoGjgfCGu6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:70:49:62:80:38:1b:07:75:82:73:e3:90:cc:52:b1:e4:6c:
42:fe:69:78:60:10:10:62:74:e0:7f:fd:1b:80:04:b7:08:85:
05:1e:90:5f:20:84:ff:87:5b:92:d7:1e:01:42:7a:f3:b1:41:
f6:9b:17:da:4c:2b:7a:cf:f5:da:6a:0c:e5:bd:d8:db:83:89:
9e:ed:11:f2:6d:42:41:2c:0a:4f:0e:50:4c:b8:a8:b9:9c:29:
65:f6:73:28:69:36:90:eb:3e:38:a1:63:b2:61:36:85:fb:6f:
9d:10:3d:2b:d5:73:82:f2:15:78:0d:30:b2:c8:71:52:ce:91:
79:ef:3b:8e:a3:a4:44:43:c0:7e:9f:7e:95:ed:f1:d0:2f:24:
c4:64:35:58:1f:c0:ed:4d:e1:7b:f2:16:20:e4:a3:b5:39:2c:
4a:ce:1a:03:3a:a2:a0:cb:54:d1:aa:2b:84:78:f4:d2:2d:55:
b8:6f:28:77:61:e0:71:9b:47:71:3e:93:26:66:46:b9:c5:42:
ae:b2:ec:ef:c9:a4:8b:7d:04:99:f5:56:77:c3:a6:b8:83:17:
ee:33:97:30:e7:a6:78:b9:33:24:03:20:ce:ab:92:77:1e:de:
2a:3b:41:00:b3:ea:06:bf:60:c1:2d:a1:90:f2:f5:15:17:db:
07:f7:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:58 2025 by rpki-client