Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDehuxU4XSjiWiyzF6WKsotada4.roa
File: vDehuxU4XSjiWiyzF6WKsotada4.roa (raw, json)
Hash identifier: SMK7+EAPVOG/gMoeR6xByqINy5YA7cH3KAzOCFnvFDs=
Subject key identifier: BC:37:A1:BB:15:38:5D:28:E2:5A:2C:B3:17:A5:8A:B2:8B:5A:75:AE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C17C69E1FF956E42F71F32FD0C4FD8E7F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDehuxU4XSjiWiyzF6WKsotada4.roa
Signing time: Tue 28 Nov 2023 21:12:21 +0000
ROA not before: Tue 28 Nov 2023 21:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:c6:9e:1f:f9:56:e4:2f:71:f3:2f:d0:c4:fd:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 21:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc37a1bb15385d28e25a2cb317a58ab28b5a75ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:b5:dc:89:41:fb:fd:48:71:61:f9:6a:71:
78:7b:23:d4:0f:81:ff:a4:24:a4:21:78:af:ea:41:
79:48:d9:5a:fb:8a:ca:05:b9:8d:c5:a2:b7:20:62:
c6:42:06:66:46:24:f6:70:8b:c7:b3:e7:a0:fa:9b:
c1:c2:2f:e1:50:87:af:d1:50:b7:18:6b:54:8c:98:
a8:74:1a:f9:0a:e7:0d:0f:1e:d6:88:e9:85:ae:e5:
fa:bb:a7:09:55:da:da:6b:44:c8:42:d2:b3:dd:54:
92:17:3f:cf:b7:50:d6:ab:38:d9:37:4b:92:49:d0:
d3:9a:49:1c:ab:cc:2f:f5:96:9b:79:02:5c:e0:73:
cb:02:7f:10:8b:32:c6:ee:ab:61:ac:db:91:ec:34:
3c:46:fc:c6:87:4d:c2:27:c4:6f:cb:81:75:db:39:
1e:70:28:3d:28:d8:ee:13:be:d8:0d:f9:0a:8c:50:
93:6a:ce:3e:b3:fb:0a:0d:b2:90:c9:c2:ae:af:d0:
bc:66:06:01:3c:69:30:01:b7:fc:7f:8a:58:fb:e7:
a6:93:b6:bc:aa:79:d7:3d:fd:66:ac:bf:f5:f3:1b:
fc:44:63:ae:9a:1a:6f:fa:da:0b:3c:5f:53:44:04:
19:cd:70:5e:be:df:54:5a:e0:02:c7:62:9e:32:52:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:A1:BB:15:38:5D:28:E2:5A:2C:B3:17:A5:8A:B2:8B:5A:75:AE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDehuxU4XSjiWiyzF6WKsotada4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:56:0e:18:62:1d:ce:dd:b1:48:a5:f9:f3:1d:ce:09:d3:d3:
a7:05:ef:fa:14:85:76:96:e6:ae:b2:99:1d:88:77:4b:07:46:
43:6d:ca:ca:32:51:4c:f5:b5:95:05:d3:f2:28:5d:1e:35:31:
b9:45:07:15:58:28:2a:5e:47:c2:ad:47:59:8d:f5:b6:d3:8f:
ef:39:4e:8c:31:2a:cc:03:02:d9:f7:b5:5d:22:9f:2d:fb:ce:
6f:72:72:c8:2d:f0:5c:4f:dd:f9:b9:43:c0:cf:82:05:ca:b5:
04:c6:fa:75:73:46:70:42:5a:65:20:db:00:fe:43:c2:3e:21:
30:70:cb:69:71:f2:42:7e:aa:5d:8a:42:77:d2:8a:33:44:b0:
fb:24:a6:da:b0:e4:c1:94:85:6b:fc:ee:90:ac:68:83:4c:d2:
39:4b:ff:6f:0f:3c:6e:85:ed:22:ca:c1:14:fd:cc:26:51:13:
bd:43:85:7e:62:7e:a2:87:9a:e3:a8:1e:6a:b8:1f:6a:45:db:
bb:48:1a:32:93:d4:ce:ca:c6:87:cd:ae:f9:b2:04:b9:e8:40:
77:82:17:0f:cd:b2:6f:fb:b6:16:9a:af:f7:2e:22:45:17:92:
a4:0f:f7:87:09:33:37:9a:f5:f2:17:2d:3a:ed:76:73:7b:18:
c5:4b:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:07:15 2025 by rpki-client