Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vg7CcwEvgicvPCvW5MTiBIAegcM.roa
File: vg7CcwEvgicvPCvW5MTiBIAegcM.roa (raw, json)
Hash identifier: uIPMQYjKj01hH/SDfEWSpm+DkOq1zATdZFhq1NkwXwQ=
Subject key identifier: BE:0E:C2:73:01:2F:82:27:2F:3C:2B:D6:E4:C4:E2:04:80:1E:81:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C31883FF74C735CBCC3786E7FEC6E0070
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vg7CcwEvgicvPCvW5MTiBIAegcM.roa
Signing time: Sun 03 Dec 2023 21:14:21 +0000
ROA not before: Sun 03 Dec 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:31:88:3f:f7:4c:73:5c:bc:c3:78:6e:7f:ec:6e:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be0ec273012f82272f3c2bd6e4c4e204801e81c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:d7:6f:e7:fb:44:5c:52:71:e5:ce:97:fd:
79:07:62:91:51:58:1f:e0:ac:22:68:e3:0c:bd:58:
f5:a7:ed:77:ed:03:9a:7e:e0:b3:a7:5a:7b:e6:e3:
6e:69:90:66:3a:98:cc:a2:4d:59:9d:64:26:18:07:
87:20:e0:cd:62:1b:36:92:cf:90:5c:6d:28:2a:73:
01:bc:7b:e5:67:44:0f:09:d1:8f:54:3b:16:ec:f4:
e4:f3:64:44:ae:58:0c:2c:b7:2b:99:43:60:e2:ea:
c1:4c:16:39:a7:42:32:f0:62:84:d1:59:ab:c6:65:
9b:f3:73:be:31:61:9d:32:7a:87:54:ea:dc:84:9d:
2e:a5:66:f7:c0:f1:e5:eb:fe:c6:fd:1a:f2:f8:d4:
c2:26:37:1e:93:c9:4b:c3:1a:27:46:7d:f8:5d:4c:
e8:98:0e:f9:e4:0e:3f:d6:17:b0:50:db:d4:90:df:
83:40:4d:2a:f2:cd:da:7d:bf:60:e4:20:d0:c6:c4:
5d:cc:41:86:27:43:47:5b:12:dc:6f:34:8b:0a:cc:
2b:8d:80:06:4d:8c:85:8e:0d:d3:8f:85:46:e4:58:
e6:b5:57:09:1f:57:20:f8:68:69:f8:e8:3a:12:57:
5f:b1:b5:72:7c:4c:73:cd:08:26:b0:1e:be:de:d6:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:C2:73:01:2F:82:27:2F:3C:2B:D6:E4:C4:E2:04:80:1E:81:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vg7CcwEvgicvPCvW5MTiBIAegcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:28:38:0f:4a:97:c8:16:53:1d:78:68:66:bb:4a:34:f6:4d:
cf:e2:ac:50:5c:d0:8b:c8:35:43:c6:98:b5:81:3a:d3:ac:e8:
9b:13:45:c7:53:94:d2:ad:c8:2c:31:ce:18:eb:4a:1b:f0:a5:
90:4a:5b:43:bf:6f:20:8d:9d:7f:8c:70:5c:be:37:69:c6:40:
6c:1f:8d:5a:33:c5:01:af:da:f4:d4:af:85:e5:04:fd:ec:5c:
1f:c3:07:45:e7:f2:6a:d9:86:3b:a1:f5:c0:fc:e8:db:1f:bc:
87:41:f4:5f:0a:5a:04:8d:7a:bf:1c:5b:d7:e4:01:ba:4c:dc:
4b:75:12:4c:57:c8:54:7f:b7:e6:6c:29:38:86:10:8c:28:0e:
a3:3b:f7:9e:fb:5e:4d:fb:f5:fb:46:d3:24:19:39:e2:55:c6:
c8:da:83:21:44:18:92:91:07:99:69:b0:8d:5e:ce:e4:b8:3b:
3b:48:bd:a1:3c:b2:1a:52:31:3a:5e:56:c6:94:ee:65:36:d9:
da:42:c9:47:c5:fe:ef:a3:af:7c:ef:f3:a0:eb:b6:17:dd:5d:
4d:0e:bc:77:e5:3e:79:c9:03:2a:73:cc:cc:d7:e7:48:3b:15:
4f:86:4c:04:69:f4:72:dc:47:da:fd:a7:be:d9:ff:1d:5d:80:
2f:0a:16:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:51:06 2025 by rpki-client