Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vuIJGelL-XwVd6VfrZOOoCQwIts.roa
File: vuIJGelL-XwVd6VfrZOOoCQwIts.roa (raw, json)
Hash identifier: OgtaAzPBT5BXa2mggD43ETiDQhlRIg9JiFBx9B7O7LY=
Subject key identifier: BE:E2:09:19:E9:4B:F9:7C:15:77:A5:5F:AD:93:8E:A0:24:30:22:DB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0669E039E5ABCA4A9EABCF72A65BABA9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vuIJGelL-XwVd6VfrZOOoCQwIts.roa
Signing time: Fri 06 Oct 2023 19:14:43 +0000
ROA not before: Fri 06 Oct 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:06:69:e0:39:e5:ab:ca:4a:9e:ab:cf:72:a6:5b:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bee20919e94bf97c1577a55fad938ea0243022db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:5e:7e:56:7c:97:c9:c9:c9:7b:41:a8:70:
7b:59:56:66:74:6e:f2:6e:48:db:85:e6:8e:c5:b0:
0f:61:7b:c7:b5:6d:e2:ae:36:6a:4d:01:f4:55:96:
f0:93:61:69:cc:58:ad:d9:af:78:5d:5b:3f:a5:02:
2b:42:9a:0d:b7:37:0f:43:3e:31:fb:38:21:f3:1f:
c7:81:7c:e8:cb:94:1a:d4:78:55:3b:a6:13:29:e6:
22:5b:df:3c:d5:d7:45:cd:4b:55:11:e5:49:7f:df:
4a:4e:08:01:96:af:1a:2a:15:3a:13:e9:21:52:b4:
ea:91:56:3f:1a:ee:83:5b:91:b0:f3:08:94:9e:41:
28:b5:be:b3:17:9f:ad:ae:94:b9:c8:d2:60:cf:e2:
5a:76:76:fb:05:bb:30:c8:4f:4b:a1:99:13:95:e0:
16:7c:95:73:1f:26:b9:2c:78:7b:a0:d8:b5:0c:55:
26:ff:de:f6:94:99:28:1a:99:a7:bd:80:1e:b9:16:
f3:42:20:4c:c7:7d:31:17:01:38:dd:3b:24:8f:53:
7b:22:ae:0e:1e:b5:01:24:1b:0f:fd:da:df:14:61:
51:25:f5:96:38:f4:af:1c:7b:8e:92:54:3b:26:89:
3b:a2:c8:04:ae:5b:49:85:7f:7b:9f:73:bc:49:d3:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:09:19:E9:4B:F9:7C:15:77:A5:5F:AD:93:8E:A0:24:30:22:DB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vuIJGelL-XwVd6VfrZOOoCQwIts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:cc:93:0e:dc:86:ad:f5:2c:c1:1d:6e:81:a7:5e:9e:ca:ee:
2a:f2:1f:5a:0f:2c:7f:72:a6:83:5d:f0:a7:bc:22:2e:aa:6d:
72:4c:7c:08:d0:19:6a:eb:c0:6c:c8:98:50:df:df:ed:6e:dc:
a8:01:af:07:d0:ff:b5:8a:49:7d:43:70:ee:29:9e:c9:dd:d6:
d6:eb:e4:e0:81:7c:11:cd:30:b6:c3:2b:58:91:4a:12:3d:aa:
3b:91:69:cc:cf:b4:d1:b7:62:44:5d:7b:58:d5:45:86:56:88:
28:52:77:82:6d:e2:23:d7:e2:aa:18:5d:a1:62:d2:95:27:d8:
dc:77:23:b6:e7:cb:56:be:c4:12:c3:ab:06:4a:d0:eb:d5:3b:
34:3b:c7:85:52:e2:25:5f:72:77:c4:1d:77:99:95:0f:de:cc:
76:a2:9c:e7:07:cd:0d:ed:52:fb:ba:65:cb:63:34:a2:cb:bb:
fa:c7:49:d0:09:56:e9:b2:57:23:0b:5c:ec:a0:55:66:76:60:
f2:d2:d5:02:35:c8:19:5e:90:b5:75:e1:9d:7e:58:39:fb:93:
f6:2c:60:82:ff:66:64:26:4b:b1:c8:60:cf:24:27:c3:9a:8a:
91:d4:bf:b9:c0:83:cd:fc:25:84:7c:1b:be:13:2b:46:5f:14:
97:2b:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:42 2025 by rpki-client