Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vNUqXcA16CugRZkv3l1qCBOMnGc.roa
File: vNUqXcA16CugRZkv3l1qCBOMnGc.roa (raw, json)
Hash identifier: Y9K2hwQ6JmHbq5ugLgdNic6/NOgK3nrWn5fkGs+/0KA=
Subject key identifier: BC:D5:2A:5D:C0:35:E8:2B:A0:45:99:2F:DE:5D:6A:08:13:8C:9C:67
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE1EEFCD3AB30BEC5BD74901F7D718244
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vNUqXcA16CugRZkv3l1qCBOMnGc.roa
Signing time: Sat 18 Nov 2023 10:16:57 +0000
ROA not before: Sat 18 Nov 2023 10:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:ee:fc:d3:ab:30:be:c5:bd:74:90:1f:7d:71:82:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 10:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd52a5dc035e82ba045992fde5d6a08138c9c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:b0:a0:ad:0c:1b:59:56:0e:2b:6f:bb:a0:
80:54:04:19:8a:93:32:cc:7b:1f:69:df:f1:0c:4f:
33:f6:c7:f0:61:38:37:15:d9:60:a8:00:8c:08:8c:
27:af:c9:52:30:12:e2:2d:da:9f:28:ea:5f:aa:61:
09:0f:0d:dd:f8:d5:88:e0:00:80:4d:05:26:7d:99:
00:9e:0d:c4:07:76:e4:4d:0c:df:bc:1b:1a:ed:46:
a1:e5:01:bc:fa:ec:3b:9f:0e:c2:3c:1d:ca:e3:a8:
4d:07:d1:10:0e:47:06:da:30:2b:ca:d5:36:fd:a9:
cc:1e:7a:ff:e8:a9:11:9a:6d:97:70:07:a4:5e:a5:
2e:c9:c0:fe:18:23:a0:f7:aa:52:2c:fe:c3:2a:e1:
e6:93:7b:79:68:1e:4a:b1:3f:bd:58:c7:fd:b9:ac:
55:3b:41:c5:2b:7d:ee:07:5d:5d:ab:ff:bb:ae:b5:
8a:ad:7b:e9:c0:8d:cd:d0:9c:55:97:c0:25:06:08:
61:3f:68:70:4c:70:1f:e0:a4:92:c3:e4:fc:db:d8:
9c:11:da:dc:5c:fa:1d:29:53:84:eb:32:55:53:c8:
cd:f4:15:b4:52:fd:fe:8c:18:93:47:ba:e3:49:29:
ff:8f:91:63:c1:4e:d9:46:86:fb:17:c1:35:46:24:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:2A:5D:C0:35:E8:2B:A0:45:99:2F:DE:5D:6A:08:13:8C:9C:67
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vNUqXcA16CugRZkv3l1qCBOMnGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:b2:75:23:25:8f:19:e0:48:cf:db:cf:36:40:15:62:34:07:
59:67:69:21:13:55:e9:91:b0:52:1e:d2:8a:2f:10:28:67:0f:
41:7c:63:8c:82:d3:90:6e:23:4e:c7:cb:ef:3e:b7:77:af:6e:
ca:92:39:62:2a:9a:99:f4:d1:6b:7d:13:82:9a:63:e8:ee:eb:
37:b4:58:31:19:d0:bc:d8:0d:7a:0b:18:17:a0:b0:3d:d9:b6:
92:96:d1:26:52:3c:00:66:6f:48:a3:0e:67:70:bc:79:f8:4f:
c5:d6:a1:bf:c2:99:ca:80:30:8c:e4:5c:e2:5c:8e:55:82:70:
64:ce:3b:a1:ee:de:d2:70:4a:ba:13:44:20:4d:28:d3:50:6e:
c4:9d:04:0f:20:06:5e:e4:1f:45:b3:c1:1d:37:7c:a8:8c:57:
70:62:f6:c3:46:b7:2a:22:20:eb:14:c3:94:92:ac:fe:db:8b:
47:7d:89:17:2f:0d:22:ed:97:50:dc:b2:42:2e:6c:7d:a3:e1:
a3:99:76:62:11:67:e9:bc:dc:16:6e:95:5c:9f:2e:46:01:28:
e4:d2:13:0e:25:ce:6a:85:06:9d:3c:92:97:cd:88:0b:c8:bb:
a2:91:4a:c5:45:82:21:f6:b6:8b:0b:2b:5a:3f:f1:44:1d:53:
7a:5a:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:06 2025 by rpki-client