Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVInv5Q4VgE_2cwWRdOoqUjTMKg.roa
File: bVInv5Q4VgE_2cwWRdOoqUjTMKg.roa (raw, json)
Hash identifier: kfbZ7e1gAlCC6FGElSr8DH5Wa3XWZjW2NZ6OQYlWeJ0=
Subject key identifier: 6D:52:27:BF:94:38:56:01:3F:D9:CC:16:45:D3:A8:A9:48:D3:30:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5B6098CCFB68029F8BFAC3C9C259B222
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVInv5Q4VgE_2cwWRdOoqUjTMKg.roa
Signing time: Tue 12 Dec 2023 00:15:06 +0000
ROA not before: Tue 12 Dec 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:60:98:cc:fb:68:02:9f:8b:fa:c3:c9:c2:59:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d5227bf943856013fd9cc1645d3a8a948d330a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:a0:8d:ad:90:dc:19:52:c8:1f:bb:6d:b4:
2f:ce:69:6b:4b:d4:3e:8d:bc:19:40:0b:c7:15:55:
d1:f2:5c:4c:44:ca:ed:23:3f:9f:fa:02:1b:16:38:
c1:05:7a:aa:64:c7:fb:88:75:ec:cf:83:25:f1:14:
8d:0d:61:b8:74:a6:eb:11:9c:9f:d8:9e:fa:ea:1c:
31:b1:f1:b4:b7:66:f1:fe:2a:3c:73:b5:c7:6a:7f:
bf:1f:ae:3b:d2:87:e3:fe:03:22:21:c3:95:08:72:
bb:fa:18:a0:f0:0d:2d:08:32:4a:56:38:c8:5f:e4:
84:bd:69:5a:14:be:d7:71:8c:ce:6d:bf:41:86:50:
bd:13:5c:5b:bf:eb:a9:02:46:21:e2:c6:18:88:8f:
c6:49:e8:eb:aa:39:74:b5:6a:54:f3:16:21:09:ae:
71:67:89:b2:be:fe:01:6a:e7:50:2b:51:72:21:5b:
62:15:21:22:92:16:00:a9:41:75:a6:b0:5e:6a:a5:
82:a8:da:72:e9:be:ed:4f:f6:2c:cb:2e:43:b3:70:
4e:ec:16:0f:45:68:6c:6f:a6:82:2e:43:2d:e7:a1:
98:5c:2e:3c:62:3d:c5:c6:c5:a6:ac:95:d7:ee:70:
b6:19:b1:90:3b:9f:6a:39:0f:45:fb:2b:37:e4:67:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:27:BF:94:38:56:01:3F:D9:CC:16:45:D3:A8:A9:48:D3:30:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVInv5Q4VgE_2cwWRdOoqUjTMKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:44:20:10:8a:4e:19:b9:c1:44:0d:b8:11:ed:d3:55:30:94:
d0:3d:0a:ad:4a:71:42:11:87:23:3d:cb:71:e5:9c:76:29:38:
c4:78:21:22:6c:93:ad:7e:df:f8:c6:c0:cb:ad:27:6b:2c:0a:
1d:15:01:37:7f:84:45:70:71:08:e1:45:b1:17:28:3b:0f:3b:
e1:c9:73:91:5f:ab:c7:fd:b8:fb:17:20:41:76:29:f2:6a:06:
ab:ba:72:17:23:d2:5c:10:99:6d:69:aa:6e:0f:30:f7:9b:2c:
12:56:3b:63:a6:93:31:ab:d3:96:02:5c:48:dc:f5:12:ae:e6:
71:f1:ca:fb:f0:30:0c:15:51:85:05:dc:c2:23:8a:d0:15:57:
2c:42:1f:af:a9:02:53:0e:2d:61:02:8a:1f:15:28:c3:57:7c:
d8:49:ab:a7:01:fc:4c:9c:b0:41:04:a9:cd:59:8a:51:a7:13:
56:70:a8:bf:cd:fe:c8:d2:a2:b3:b6:4a:74:e5:9e:f9:a0:ef:
e8:a0:77:3a:92:1e:cd:d0:dd:cb:a9:39:f9:f6:de:e9:b2:65:
d5:f6:00:f1:5b:23:36:71:df:eb:2e:52:6c:ac:dc:54:8f:fb:
27:32:c3:b1:b2:85:18:62:16:45:19:59:1a:fc:c1:8c:3f:d4:
05:ff:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:12 2025 by rpki-client