Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVe9dyQlDcFcMI5fW1dL-6jRnOg.roa
File: bVe9dyQlDcFcMI5fW1dL-6jRnOg.roa (raw, json)
Hash identifier: rArulq7bbIeQ3lWvwlGxbcmDg9BQLBvvUcU25e1iXKY=
Subject key identifier: 6D:57:BD:77:24:25:0D:C1:5C:30:8E:5F:5B:57:4B:FB:A8:D1:9C:E8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEF9FFCBA29F57B24B4D213716FEF9C98
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVe9dyQlDcFcMI5fW1dL-6jRnOg.roa
Signing time: Tue 21 Nov 2023 02:05:21 +0000
ROA not before: Tue 21 Nov 2023 02:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:ef9f:446c/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:9f:fc:ba:29:f5:7b:24:b4:d2:13:71:6f:ef:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 02:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d57bd7724250dc15c308e5f5b574bfba8d19ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:f9:aa:08:f2:3b:ab:a7:5e:94:4c:c3:e6:
39:69:36:0e:97:fd:e0:aa:5f:99:61:cd:34:fd:7a:
a1:b8:34:84:d2:c5:2a:b5:b2:c6:06:48:6e:c0:60:
fc:0a:f5:87:b7:72:f9:14:f7:2f:9f:37:a1:60:66:
8e:14:8f:f2:d0:6e:96:6d:00:01:35:24:af:d1:18:
c2:a1:13:43:df:61:2b:b4:b2:27:08:9b:c9:40:d6:
ff:1b:18:59:ae:b7:f1:b8:4e:ba:a9:af:66:d1:1f:
6e:14:90:a8:fa:4b:49:c1:cb:2a:08:64:4c:be:7a:
52:c1:06:9d:9d:56:7c:70:b2:68:b8:3e:a0:90:16:
e5:fa:8c:9c:d8:12:85:26:f7:90:b1:5e:13:09:dc:
37:f4:5a:c3:18:db:26:f7:8b:65:76:36:c3:a7:ca:
b8:ea:76:45:cf:7e:11:96:f3:b5:93:ce:84:9d:6a:
63:03:71:3b:4a:4b:34:f0:ff:81:c8:c4:7c:c5:cc:
dd:f8:e8:1c:81:07:47:87:2a:4b:19:94:89:1e:17:
e5:86:02:43:e7:33:6a:a9:59:b5:f6:5b:6f:24:6d:
27:24:4b:fa:61:d9:4c:bb:ce:78:4c:bf:c7:66:f5:
97:38:4f:96:b1:05:ab:a9:7c:37:91:91:c9:07:0e:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:BD:77:24:25:0D:C1:5C:30:8E:5F:5B:57:4B:FB:A8:D1:9C:E8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bVe9dyQlDcFcMI5fW1dL-6jRnOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:ed:68:6a:21:20:eb:98:80:fd:ea:5d:09:6e:5b:da:fb:59:
cf:ed:5b:33:d6:fd:c8:9e:3e:66:b2:d1:7c:e0:1c:18:01:e4:
0d:b6:c3:cd:7e:ea:93:b5:5e:d8:24:3b:89:43:c3:de:c5:2f:
96:3d:f5:96:7f:a3:23:81:e6:61:5b:79:ba:9e:9e:5d:08:d8:
00:68:66:e1:d2:42:73:ce:4f:a3:65:0e:0e:f6:64:cb:cd:30:
63:9c:21:19:de:ff:49:ff:94:7a:27:a1:66:19:d2:83:eb:f5:
50:89:e3:ec:a9:63:bd:94:71:f3:32:95:1b:ac:42:0d:b9:63:
c9:46:28:da:02:2e:a6:49:e8:bf:75:aa:43:20:a0:82:8f:74:
91:d0:ed:5d:92:de:a0:f5:61:16:36:c6:c2:df:71:98:fe:e9:
82:0a:f3:1c:c0:64:7a:eb:80:51:fc:66:73:92:9c:1c:22:83:
93:9d:e5:c7:47:1b:d2:63:2b:f4:f3:d8:1e:25:23:96:e4:f2:
e8:e4:2b:e6:8b:fd:7e:e9:9e:47:12:2d:9e:ab:90:48:45:13:
f5:cd:97:c7:8e:c0:9a:f0:ad:1e:3d:7d:2e:2d:6a:7e:25:25:
d2:48:9c:ca:4a:06:35:48:8c:b8:d3:88:ec:57:6e:bc:68:5d:
82:5d:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:58:06 2025 by rpki-client