Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/va-Wfm2RwfV1CxdvSHb4Zd1IT7E.roa
File: va-Wfm2RwfV1CxdvSHb4Zd1IT7E.roa (raw, json)
Hash identifier: n+NNh/rpIIaNmDZ4MlQqmmyT/+40wX0t2E8ntvPbO1c=
Subject key identifier: BD:AF:96:7E:6D:91:C1:F5:75:0B:17:6F:48:76:F8:65:DD:48:4F:B1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B650878F5EE4A6192284ABE16E4390DE7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/va-Wfm2RwfV1CxdvSHb4Zd1IT7E.roa
Signing time: Wed 25 Oct 2023 04:12:15 +0000
ROA not before: Wed 25 Oct 2023 04:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:08:78:f5:ee:4a:61:92:28:4a:be:16:e4:39:0d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 04:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdaf967e6d91c1f5750b176f4876f865dd484fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:5e:94:63:39:3d:9c:6a:05:93:dc:1a:d1:
1f:ae:92:9e:d5:04:00:b3:a6:5a:9c:54:d8:30:c5:
5e:c3:f8:e8:88:89:80:2f:49:72:50:f4:55:9f:fb:
b7:bc:b7:64:7a:5b:a5:ae:73:54:44:52:1e:53:34:
d2:c5:cf:51:1d:7b:67:62:2e:3e:60:35:ed:f0:06:
c4:6f:c2:84:ff:38:b3:66:df:54:f1:1d:29:f9:3b:
de:22:ca:64:a0:ad:8a:91:27:db:ef:e6:f7:84:b2:
a1:37:c5:1d:ef:88:56:b9:05:66:7f:ef:df:65:27:
7e:84:fb:31:84:00:e3:02:8d:c9:45:21:e8:bb:7a:
86:ef:83:d5:43:07:07:57:b1:c3:da:6b:bb:6f:a6:
59:6b:5a:51:4e:69:40:b1:78:6c:34:17:78:59:da:
05:ef:fc:cd:30:8d:09:9b:9d:4c:a8:f5:37:a6:99:
a6:54:33:59:20:0b:20:0e:e8:d8:88:5b:28:97:d5:
4f:f6:f4:01:65:36:26:fd:8c:91:b1:45:97:75:b5:
fe:21:cd:99:e3:ba:1f:f6:dc:5d:d1:58:56:ab:21:
1e:44:b0:49:72:10:c3:ba:8a:54:4c:1e:ad:15:7a:
53:a7:36:37:0e:69:cf:33:53:6b:77:46:13:5e:41:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AF:96:7E:6D:91:C1:F5:75:0B:17:6F:48:76:F8:65:DD:48:4F:B1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/va-Wfm2RwfV1CxdvSHb4Zd1IT7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:a0:5d:ab:e0:69:54:1f:9d:d8:3b:5e:48:7d:9b:40:0c:98:
9a:14:65:ce:49:89:af:53:25:f1:3b:82:f0:a2:1a:77:9e:f3:
56:2d:cf:1d:b3:bb:f9:d4:2c:e9:00:76:e7:f8:18:67:e0:fe:
63:4f:d9:9a:f9:d9:61:b7:bb:73:38:2f:d2:7a:b9:99:1a:8b:
64:80:fb:5e:14:35:f0:9f:9e:96:4f:91:f6:70:71:3e:2b:f7:
9a:79:e4:85:16:7e:9a:be:22:af:1e:63:08:69:aa:41:80:a5:
61:3c:53:f0:c9:a3:b5:67:1e:ae:24:c8:52:64:8c:7f:b2:c6:
90:c1:5e:2b:97:7b:d6:97:39:a8:c1:9c:11:88:3c:c4:75:2d:
a5:b8:47:ad:36:2b:ac:da:d6:9f:72:d5:ba:52:82:78:30:ff:
59:90:b7:26:27:70:3c:44:75:dd:c9:9d:51:5d:ee:24:8a:f8:
78:37:eb:29:f0:df:0b:22:e8:0a:02:93:1d:48:06:4c:23:3f:
5a:a4:bf:0e:16:f9:bd:50:22:11:a9:6f:10:8e:59:f9:a5:bc:
be:28:9c:88:53:ac:cc:fa:40:d5:20:45:6d:67:08:bb:12:84:
2a:25:04:21:30:bf:4f:52:11:ee:8c:89:24:3e:e1:38:2a:63:
23:87:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:30 2025 by rpki-client