Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vePpbCNR1wqDBWfEnaiSSrRwZRE.roa
File: vePpbCNR1wqDBWfEnaiSSrRwZRE.roa (raw, json)
Hash identifier: H4COXOdJq/iYqgRcIBbbtanpft4Aq3dcbKSfIGwaPvc=
Subject key identifier: BD:E3:E9:6C:23:51:D7:0A:83:05:67:C4:9D:A8:92:4A:B4:70:65:11
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9B510DE56925DD6BF49A19394655ED36
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vePpbCNR1wqDBWfEnaiSSrRwZRE.roa
Signing time: Sat 04 Nov 2023 17:11:02 +0000
ROA not before: Sat 04 Nov 2023 17:11:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:51:0d:e5:69:25:dd:6b:f4:9a:19:39:46:55:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 17:11:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bde3e96c2351d70a830567c49da8924ab4706511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:13:e2:eb:fd:12:e8:a9:83:50:96:26:99:
d1:68:25:5c:01:8c:da:79:ef:d1:f2:c9:f6:98:b1:
43:2a:d1:46:00:49:97:33:f7:01:88:36:18:a3:67:
8c:55:3f:96:2a:db:d5:1c:63:9d:0c:66:2d:77:02:
5b:4c:d3:0d:fd:6a:f6:cb:b0:7a:56:40:d8:dd:63:
a9:6f:ee:49:7f:40:dd:3a:83:dd:6c:d6:f6:99:e7:
02:18:d7:87:fa:0a:95:cd:91:26:76:a7:f9:14:75:
fb:5f:a2:6d:05:ff:d0:e7:9c:52:e4:32:1e:00:d5:
28:50:8b:f9:c7:03:5f:3c:d7:53:77:4b:fc:d4:75:
fa:f3:e7:52:9b:91:7c:4f:a2:64:3a:42:b4:5e:54:
24:3a:b5:b6:c2:c8:f3:79:39:de:37:c7:b0:f4:5c:
f0:09:a7:fd:26:7e:12:16:2d:d5:57:65:26:fa:74:
90:08:4a:7c:24:28:29:aa:5d:b9:b5:02:c2:51:27:
a8:8a:4c:5f:5a:11:5d:0c:b4:0f:3d:d9:98:39:d7:
cd:9b:97:88:e0:c6:5c:30:db:17:0a:9d:12:8a:af:
b4:4d:4e:fa:80:55:b2:c8:ef:f3:ec:aa:a7:7e:18:
b4:ce:e9:4b:15:f4:50:19:ef:a9:41:6a:06:74:a8:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:E9:6C:23:51:D7:0A:83:05:67:C4:9D:A8:92:4A:B4:70:65:11
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vePpbCNR1wqDBWfEnaiSSrRwZRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:27:4e:0b:a6:db:49:24:f6:96:7d:26:22:d5:94:e9:15:4b:
1c:cb:93:f5:f8:47:18:02:c5:a6:f9:23:5d:bc:88:b0:bf:90:
ee:34:4e:ec:9e:2f:99:a2:70:ac:26:18:13:ea:68:2d:87:25:
2a:ff:6d:80:c2:db:95:ad:1c:25:31:6f:78:0f:eb:33:9f:1e:
4d:34:f5:8f:98:1d:ae:69:b8:57:60:75:4a:b9:76:22:ab:f7:
96:5f:a2:be:fe:17:a7:e5:ee:e8:93:b9:c5:8b:ff:0f:90:1b:
27:86:85:48:52:12:ca:8a:7c:4c:6f:4e:5b:60:c5:ed:2e:7d:
06:81:27:f0:37:05:f3:c8:08:44:d7:7d:27:e2:59:a5:fc:51:
9c:b6:2e:38:bc:aa:4b:47:3b:3c:b2:5b:9a:b9:c4:d8:ff:f4:
a7:9f:ed:0e:6c:f2:7e:7d:59:c7:d1:5a:84:60:6e:1a:f1:ab:
54:2f:ea:66:8b:ee:bd:3f:f7:68:b3:db:2f:b0:82:b6:6f:df:
89:ae:f3:bc:e9:44:06:3f:99:e0:51:0b:07:cf:54:ba:f7:e9:
fc:88:61:63:99:f7:8a:c9:48:6a:af:a1:de:3e:5a:30:44:b9:
95:e0:80:0e:1e:4a:62:b9:ae:2c:75:7b:0a:7b:51:12:b0:f5:
61:b3:19:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYubUQ3laSXda/SaGTlGVe02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MTcxMTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGUzZTk2YzIzNTFkNzBhODMwNTY3YzQ5ZGE4OTI0YWI0NzA2NTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzoT4uv9Euipg1CWJpnRaCVcAYza
ee/R8sn2mLFDKtFGAEmXM/cBiDYYo2eMVT+WKtvVHGOdDGYtdwJbTNMN/Wr2y7B6
VkDY3WOpb+5Jf0DdOoPdbNb2mecCGNeH+gqVzZEmdqf5FHX7X6JtBf/Q55xS5DIe
ANUoUIv5xwNfPNdTd0v81HX68+dSm5F8T6JkOkK0XlQkOrW2wsjzeTneN8ew9Fzw
Caf9Jn4SFi3VV2Um+nSQCEp8JCgpql25tQLCUSeoikxfWhFdDLQPPdmYOdfNm5eI
4MZcMNsXCp0Siq+0TU76gFWyyO/z7Kqnfhi0zulLFfRQGe+pQWoGdKhtYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL3j6WwjUdcKgwVnxJ2okkq0cGURMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdmVQcGJDTlIxd3FEQldmRW5haVNTclJ3WlJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI4nTgum20kk9pZ9JiLV
lOkVSxzLk/X4RxgCxab5I128iLC/kO40TuyeL5micKwmGBPqaC2HJSr/bYDC25Wt
HCUxb3gP6zOfHk009Y+YHa5puFdgdUq5diKr95Zfor7+F6fl7uiTucWL/w+QGyeG
hUhSEsqKfExvTltgxe0ufQaBJ/A3BfPICETXfSfiWaX8UZy2Lji8qktHOzyyW5q5
xNj/9Kef7Q5s8n59WcfRWoRgbhrxq1Qv6maL7r0/92iz2y+wgrZv34mu87zpRAY/
meBRCwfPVLr36fyIYWOZ94rJSGqvod4+WjBEuZXggA4eSmK5rix1ewp7URKw9WGz
GR8=
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:54 2025 by rpki-client