Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vULtkJVqBoSEouI9B9-CeXKIb1o.roa
File: vULtkJVqBoSEouI9B9-CeXKIb1o.roa (raw, json)
Hash identifier: lvPA/wKAn4KLO5N5SQayT8MT/OeIF/mhm59qG6hK/oE=
Subject key identifier: BD:42:ED:90:95:6A:06:84:84:A2:E2:3D:07:DF:82:79:72:88:6F:5A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE02FA8419BCADD702DE1F6D4F0213C94
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vULtkJVqBoSEouI9B9-CeXKIb1o.roa
Signing time: Sat 18 Nov 2023 02:08:21 +0000
ROA not before: Sat 18 Nov 2023 02:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e0:2f:a8:41:9b:ca:dd:70:2d:e1:f6:d4:f0:21:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 02:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd42ed90956a068484a2e23d07df827972886f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:b7:79:3a:5b:2f:96:6b:9d:41:5f:c5:88:
9b:ef:e5:72:ce:2f:8a:29:c6:09:14:21:20:b7:de:
11:18:7e:e3:cc:d1:88:42:12:de:2b:f3:2c:ff:58:
8b:37:d8:42:34:2f:01:87:6f:04:4d:cd:fd:6c:b5:
5e:3e:b2:ef:cb:6a:3d:97:72:80:4d:38:c3:e6:70:
30:ce:83:c9:a3:b6:81:e0:07:c5:9f:ef:19:fd:e8:
be:92:a0:b6:ed:91:e6:3b:9d:20:58:95:30:09:1f:
1c:7a:a5:5a:0e:c0:1e:b8:29:a0:8c:82:71:99:b5:
02:53:53:3d:48:1d:7b:be:7e:c8:8b:1f:f4:23:b7:
e3:4b:e9:49:39:3a:01:e0:f3:23:d3:cf:c4:69:f4:
89:b7:cc:5e:b2:d5:37:f9:f9:ef:f1:58:fb:44:48:
16:c6:5c:37:64:fa:d3:28:9b:59:f9:5b:9c:00:a1:
02:bf:fc:1d:67:de:73:8c:e9:79:0d:ec:5c:6d:31:
be:07:5e:27:60:54:c0:b2:21:cd:38:9e:c2:b8:20:
d4:45:56:90:cf:37:ec:ca:b1:cd:d8:34:d6:04:4a:
37:4e:52:9c:67:be:4e:21:84:e5:95:2d:6b:d8:a8:
6b:09:89:1f:d5:34:c7:eb:73:6e:9a:30:21:db:5c:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:ED:90:95:6A:06:84:84:A2:E2:3D:07:DF:82:79:72:88:6F:5A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vULtkJVqBoSEouI9B9-CeXKIb1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:00:38:b5:cb:47:7c:95:ef:99:21:a5:fb:eb:ac:a5:1d:ee:
72:a8:7c:e9:a0:2b:ee:58:cb:3b:9b:e7:2e:29:e3:b6:bb:e8:
c0:f6:5c:ff:41:37:34:c8:e3:be:30:22:d7:15:c3:83:b7:5b:
c7:aa:54:06:bd:16:fa:8d:39:51:16:bd:4c:ae:de:be:88:97:
93:d8:f4:2a:83:db:44:e5:c5:7d:db:63:62:c1:c2:e2:ef:ca:
70:19:80:9b:11:fa:f9:5f:dc:ce:eb:a7:c8:ee:d0:b8:11:0c:
33:6a:a4:af:41:3c:c4:99:b4:e6:fe:dd:76:c6:b3:8b:70:c0:
0f:c1:e8:66:a9:71:66:33:d5:1a:81:bc:38:05:3c:0a:12:08:
9c:67:47:db:89:8b:0b:d9:d0:a0:2a:4a:73:18:c1:a4:d5:55:
6d:dc:a6:a0:a7:ba:82:7d:13:1a:6a:5c:e7:63:9c:8f:ce:6c:
67:d7:a5:2e:4d:8e:88:31:10:66:75:3b:8b:d5:11:ff:f9:fa:
bd:1a:d1:84:b9:bf:18:c0:25:94:56:09:68:f6:30:7c:0f:70:
73:da:9b:84:4e:dd:a2:43:a6:94:f5:99:1f:c0:21:5b:9e:1a:
ee:eb:35:ea:4e:ce:28:97:8e:a3:35:08:50:a2:e6:bb:4c:fd:
6a:a6:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:20 2025 by rpki-client