Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVYKDE3qqvVXoDf6lRrPNmE5J48.roa
File: bVYKDE3qqvVXoDf6lRrPNmE5J48.roa (raw, json)
Hash identifier: KHjx2bo/JZddI6ablztby+R34j3IXNsnqc1a9dxRHS4=
Subject key identifier: 6D:56:0A:0C:4D:EA:AA:F5:57:A0:37:FA:95:1A:CF:36:61:39:27:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C088325BA97D003E0274D8FC61DF6E1F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVYKDE3qqvVXoDf6lRrPNmE5J48.roa
Signing time: Sat 25 Nov 2023 22:04:21 +0000
ROA not before: Sat 25 Nov 2023 22:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:883:162e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:83:25:ba:97:d0:03:e0:27:4d:8f:c6:1d:f6:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 22:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d560a0c4deaaaf557a037fa951acf366139278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:5a:6c:62:3b:fa:94:3a:75:f5:68:94:04:53:
f2:72:ac:da:de:cb:35:a0:f3:0c:f0:5e:99:2a:41:
cf:25:10:30:cc:f7:02:87:86:c3:4e:d6:b6:78:6b:
55:47:16:b5:6f:00:56:7e:a4:f8:49:9a:2a:99:45:
e9:4b:2e:f2:80:29:d6:4f:b5:3c:d4:f4:8e:96:5c:
02:43:52:15:80:c5:83:88:42:09:7c:20:91:69:58:
08:2e:2b:42:16:4d:ea:bb:97:e7:93:cf:42:09:ae:
a6:36:b8:25:d7:5a:7c:2c:fb:d8:47:6b:de:bb:8d:
00:6b:7f:87:5b:dd:84:f5:00:34:3b:4f:19:0c:2f:
bf:c2:cb:28:60:1c:e8:b1:13:03:b1:54:34:f3:9a:
5a:7b:9a:b2:c6:63:f2:66:f9:eb:63:eb:b9:68:af:
94:7b:a5:8c:63:b0:02:cf:7a:75:34:e1:a6:8e:3d:
65:85:f3:d6:ec:05:4d:56:0c:d5:21:b1:2b:6d:55:
d8:0b:a6:ae:6f:0b:80:2b:c7:31:a7:01:be:c6:9d:
16:96:a1:a3:3b:a2:29:e1:f7:61:c3:13:25:07:9e:
ff:d2:0f:e3:25:1d:8b:9b:2f:55:4a:80:0e:b3:38:
05:66:c6:10:fe:5d:e5:67:b4:02:a3:ed:46:77:e3:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:0A:0C:4D:EA:AA:F5:57:A0:37:FA:95:1A:CF:36:61:39:27:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVYKDE3qqvVXoDf6lRrPNmE5J48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:d2:b2:96:a5:4c:7f:21:21:12:8b:b7:52:f9:0f:9f:4e:e7:
a2:b1:49:ec:c9:ec:09:e8:b0:af:a9:f7:bf:95:c3:1f:d6:ee:
56:5d:88:66:6f:7d:c8:71:91:82:58:38:14:43:46:64:e3:d0:
9d:23:3d:66:9b:3d:21:88:5e:71:8b:af:fa:7c:38:8f:1b:9a:
f0:83:37:5e:4b:61:e2:4f:2a:c8:0b:7c:82:74:47:6a:d5:47:
ad:8e:a0:e9:aa:bf:94:90:f8:ca:b4:12:21:8c:df:b1:9c:01:
3a:85:f9:8c:57:10:44:8f:55:5b:ed:45:a1:b5:2a:01:3e:c6:
ae:e5:eb:8f:e8:35:43:e7:d1:a7:9b:5d:71:e0:7e:87:32:a5:
71:e5:f7:d2:47:8a:ec:fb:de:c9:34:45:45:a1:d7:5d:8a:79:
52:0f:33:64:38:92:39:b0:4e:40:ff:93:cc:a4:56:96:4c:73:
ee:23:61:1e:c9:29:ae:9e:b9:f0:a5:f8:6f:d1:dc:41:ab:3f:
00:17:28:e1:d8:76:da:78:77:66:d7:84:b3:d1:f8:a0:e1:36:
60:e2:1d:e1:a0:9d:b5:98:83:81:d6:80:27:31:c3:77:9f:8d:
af:c7:98:32:f0:2f:a9:39:94:80:a2:51:c8:98:6d:0c:a8:f1:
65:66:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:22:11 2025 by rpki-client