Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vV-flM_2pZZlxJk-OhfmJpfGvBY.roa
File: vV-flM_2pZZlxJk-OhfmJpfGvBY.roa (raw, json)
Hash identifier: FlXigj5pimLyNz6N7be8KbrFopDYsEjbjubU2889QW8=
Subject key identifier: BD:5F:9F:94:CF:F6:A5:96:65:C4:99:3E:3A:17:E6:26:97:C6:BC:16
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFC5047CFDB4FCD459ED48FA2E22C0573
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vV-flM_2pZZlxJk-OhfmJpfGvBY.roa
Signing time: Thu 23 Nov 2023 13:13:21 +0000
ROA not before: Thu 23 Nov 2023 13:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:50:47:cf:db:4f:cd:45:9e:d4:8f:a2:e2:2c:05:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 13:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd5f9f94cff6a59665c4993e3a17e62697c6bc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:c4:59:50:65:ec:a6:0a:17:38:3e:9b:08:
18:f3:ea:bb:f0:e9:e2:85:e4:27:66:9a:a4:b6:3d:
32:cf:29:1f:23:ea:0a:bc:8a:07:b8:ea:56:17:c6:
04:02:11:8b:c8:07:fa:8e:f3:4d:54:26:41:19:2f:
d0:da:be:d0:63:00:90:d0:20:9c:ab:f0:f0:83:b5:
b7:d6:a6:a1:c3:a9:ff:dd:44:aa:3e:ed:91:23:99:
0a:c5:2b:66:d7:31:68:84:06:91:93:01:bf:d3:eb:
ea:cd:ec:75:04:a7:30:ee:0b:3c:b6:fd:b2:1e:3d:
45:86:fb:4d:a7:1a:43:83:a1:5d:0e:95:18:2b:2b:
0a:0e:52:74:10:1e:6f:31:b5:25:ed:ee:73:80:3e:
f6:b0:c7:d2:fc:1a:83:85:51:0f:0c:e4:b0:a6:86:
da:2d:29:18:74:36:8c:af:e8:ee:5f:ec:a7:63:4d:
e8:df:db:cd:46:08:b3:f3:ea:cb:e5:04:8d:70:a5:
29:d0:38:d1:44:26:c1:0f:68:e2:05:6d:ef:2b:86:
9e:d1:b3:a4:d8:2b:2b:64:49:89:37:a1:ae:b8:50:
c4:07:ba:d9:50:ed:61:6f:e1:29:38:cb:d0:05:e2:
cb:12:ff:dd:ab:f4:60:f3:55:b3:0a:31:81:ab:f2:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5F:9F:94:CF:F6:A5:96:65:C4:99:3E:3A:17:E6:26:97:C6:BC:16
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vV-flM_2pZZlxJk-OhfmJpfGvBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:14:62:cd:4b:38:49:61:1a:55:a2:30:be:3f:b9:6f:b1:6e:
f2:c9:78:37:fe:85:0d:26:ac:11:cb:c1:eb:11:a1:b6:49:04:
d9:4b:97:43:6a:0d:fb:e4:b5:b2:b2:d0:1f:a3:a9:3c:1d:be:
a6:80:e7:de:93:2d:ad:db:2c:8e:bb:aa:e1:e4:2c:33:b9:e4:
02:8a:25:60:5f:b1:a9:14:c6:88:39:34:a4:84:be:54:94:97:
99:1b:5a:d8:51:36:48:58:82:ae:96:88:8f:ba:b4:d7:88:e7:
1b:35:53:f9:e0:e8:e6:56:cf:11:5a:ea:3f:31:83:47:b2:39:
82:84:05:9e:b8:ed:72:43:fb:ad:0a:00:ce:fd:98:e8:5c:85:
7b:f3:d5:8e:b8:af:bd:20:f9:a3:64:36:8b:eb:46:d3:cc:1f:
aa:3d:70:4f:18:ba:0c:85:a5:ae:88:bc:7b:f2:3f:54:b3:5e:
39:13:7a:b7:b1:54:11:52:de:cc:b0:82:3c:ab:92:7c:69:7f:
55:54:d6:4b:f2:44:cf:99:99:07:75:63:e2:be:c5:3f:7b:ad:
62:6b:62:05:65:83:3e:6f:fa:d8:00:ad:76:82:f2:44:df:37:
c2:f6:86:5c:3a:d0:91:39:67:1b:f0:34:9e:8b:44:cf:33:17:
0c:e2:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:22 2025 by rpki-client