Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLbiT9EJeejC_mqaCpUTtK9E6Pk.roa
File: vLbiT9EJeejC_mqaCpUTtK9E6Pk.roa (raw, json)
Hash identifier: rIGiclCi7zmFMmOpXIHS+WjcLz2QINXcDrJQbn/3PvM=
Subject key identifier: BC:B6:E2:4F:D1:09:79:E8:C2:FE:6A:9A:0A:95:13:B4:AF:44:E8:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B292C122B5968E112E36F8988E6FC4107
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLbiT9EJeejC_mqaCpUTtK9E6Pk.roa
Signing time: Fri 13 Oct 2023 13:13:55 +0000
ROA not before: Fri 13 Oct 2023 13:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:2c:12:2b:59:68:e1:12:e3:6f:89:88:e6:fc:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 13:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb6e24fd10979e8c2fe6a9a0a9513b4af44e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:6e:e7:98:12:e9:73:9b:9f:bb:ee:4c:f9:
6e:d8:20:41:80:c5:83:f5:c1:c0:8d:d5:0b:89:58:
92:93:c5:48:48:f1:97:33:0a:35:0b:d2:ad:6b:85:
83:93:e0:78:7e:25:88:c7:02:3f:14:84:b6:96:20:
2e:2f:08:21:6a:f8:3c:9a:69:d1:28:cd:3d:3d:f1:
b7:ad:9e:02:47:fc:75:5a:01:e7:06:dd:e1:bc:78:
91:fc:95:de:5b:08:ab:46:e8:21:12:75:21:4a:33:
e2:57:fe:fb:bb:5c:a4:43:76:9a:16:d4:29:23:03:
85:bc:fb:ec:24:f6:89:eb:f5:29:40:2f:ca:67:c1:
50:d4:dc:48:54:91:93:23:06:55:62:28:1a:68:48:
0c:de:4c:01:0e:f0:11:16:3c:be:75:a8:49:1d:1e:
5e:cc:76:ac:c5:e3:38:fa:d2:d3:4f:60:13:d9:2a:
4a:a2:82:5c:24:97:9f:b5:52:a6:2b:f9:02:a3:16:
36:c6:46:d8:85:ff:52:22:18:e0:14:06:96:57:96:
33:48:d0:f2:c2:2e:11:62:50:85:36:5f:b8:f8:52:
a9:04:d1:f0:60:66:71:61:cc:ae:33:0e:bb:37:ca:
94:d3:a0:f4:aa:76:22:55:4e:3c:5f:bb:2c:b2:f0:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:E2:4F:D1:09:79:E8:C2:FE:6A:9A:0A:95:13:B4:AF:44:E8:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLbiT9EJeejC_mqaCpUTtK9E6Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a5:20:92:37:ab:3f:2d:66:16:b3:aa:26:0b:15:9b:11:92:
2c:01:25:c4:b0:5f:62:03:ef:a3:2c:7e:27:b3:d3:ac:a2:40:
69:8e:0a:6b:7c:59:ae:11:7e:d3:c2:79:07:df:b3:e9:af:2b:
01:66:f2:42:7c:87:e9:06:0a:b7:be:ca:9b:8b:cc:9d:35:f8:
97:48:82:11:ee:3a:f0:8c:c9:a1:ff:af:29:d7:c5:34:b2:4e:
1a:16:a0:93:7a:ac:bf:e1:30:4b:93:0c:72:5a:99:11:04:7a:
72:52:b5:39:41:2f:40:d5:aa:6a:07:59:88:b7:22:75:60:31:
cf:66:72:b1:85:c7:55:59:e2:a9:59:69:56:81:6d:79:50:ff:
a1:4b:c9:6d:09:61:d3:0b:04:c1:c8:39:0a:86:88:fd:22:43:
be:06:e1:00:de:2b:3a:c2:47:03:68:03:a1:05:59:0e:b1:6e:
38:dc:b6:3f:97:5f:ab:db:f3:56:a0:54:9a:ba:6c:7e:b2:be:
19:47:ac:0b:8b:34:ec:5e:93:b9:b8:e8:ac:88:3b:79:82:59:
f4:90:be:be:62:48:ed:33:de:93:a8:51:f5:17:cc:36:48:26:
78:c9:48:62:8d:03:50:00:50:47:9d:f2:df:c4:2e:08:13:b5:
61:c9:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:09 2025 by rpki-client