Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vvQxNtjGxwhmMqK4xEAslBXuDcs.roa
File: vvQxNtjGxwhmMqK4xEAslBXuDcs.roa (raw, json)
Hash identifier: w5Srz2ucxh6XSGxFuwCM6+8r4+5m1qCtIWuApQaEtTM=
Subject key identifier: BE:F4:31:36:D8:C6:C7:08:66:32:A2:B8:C4:40:2C:94:15:EE:0D:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B796EA46CDDA0947508FBD2C3F7D46676
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vvQxNtjGxwhmMqK4xEAslBXuDcs.roa
Signing time: Sun 29 Oct 2023 03:16:16 +0000
ROA not before: Sun 29 Oct 2023 03:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:79:6e:a4:6c:dd:a0:94:75:08:fb:d2:c3:f7:d4:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 03:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef43136d8c6c7086632a2b8c4402c9415ee0dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:5e:66:d1:d1:9d:99:9d:b1:b1:3f:33:c9:
95:c3:28:8c:d1:f5:6a:35:d4:5f:be:7c:6a:0b:23:
e7:2c:c5:45:77:01:f1:16:bd:78:4c:2e:c8:bc:cf:
30:29:43:08:3b:4d:ad:8f:8b:ba:d7:1f:61:34:5b:
3f:0d:a9:c9:bb:28:0d:b3:06:e8:8c:9d:21:51:2e:
42:6b:36:15:e9:04:af:1a:b1:5b:a0:09:23:bc:55:
38:b4:59:78:c4:8d:b2:cb:eb:27:b9:17:91:7b:5f:
f2:fd:b4:aa:34:85:c2:9f:ee:3d:5b:5c:78:c2:e9:
5a:57:bb:fd:b5:29:ef:fb:e0:ea:78:ac:c6:c4:b0:
d8:42:a6:57:5d:25:5e:2c:41:8a:50:8a:b3:1f:d9:
6a:26:04:d4:f4:c7:ed:0b:84:d9:2b:22:f1:21:65:
d6:b1:1e:be:64:89:cc:36:f3:70:f5:f2:e5:7b:b3:
ef:c9:41:70:f4:25:43:ee:ee:12:25:ce:88:0f:39:
5b:9d:2b:fe:a5:40:fd:00:73:60:41:cb:d7:35:d0:
d5:0a:34:f5:c5:a9:80:92:36:f6:a9:cc:68:25:9a:
71:d8:df:1b:10:16:de:37:28:19:88:88:51:ca:55:
a2:c0:52:09:64:42:2f:f8:be:c0:72:b5:aa:81:cf:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:31:36:D8:C6:C7:08:66:32:A2:B8:C4:40:2C:94:15:EE:0D:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vvQxNtjGxwhmMqK4xEAslBXuDcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:66:5a:3f:d5:44:03:2a:2c:21:24:6a:17:a9:c8:ae:69:c1:
43:2a:01:e0:ba:0d:0a:eb:91:c8:5c:bd:0f:7e:7b:53:d2:4a:
9e:34:61:7f:d5:ee:19:5d:f5:b7:a4:85:87:21:12:d7:a5:7d:
35:56:54:92:95:fd:98:a1:cc:b9:80:f3:b0:c2:d5:68:7b:7b:
86:10:8c:cd:dc:4e:98:3b:41:71:cb:fb:53:93:1c:5b:cf:db:
42:5d:90:fd:5c:dc:6c:fc:58:2f:1e:a9:1d:d2:5e:bd:a2:d3:
16:3f:4a:94:3b:a8:8a:87:45:5e:df:24:a8:71:49:1e:04:5e:
e3:42:09:7f:17:e2:fa:ef:fa:6a:2c:75:88:f9:83:d8:72:ca:
83:69:06:93:98:d4:88:99:51:7f:c5:43:e3:ea:0b:39:99:14:
c6:2e:8e:cd:a6:f9:14:c0:fe:91:fe:b1:2a:12:38:43:71:28:
4b:80:21:96:34:37:d9:36:b0:e9:d8:f9:12:eb:9c:90:55:0a:
2b:4c:e2:4d:1d:59:6d:84:a1:39:5f:80:64:92:81:cf:dd:f2:
d3:96:85:8a:ed:b4:7d:80:d0:6e:77:63:f8:3d:32:ad:10:db:
3d:54:90:b9:9b:64:d1:23:88:b7:80:b7:7a:32:90:06:93:cf:
73:8a:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:39 2025 by rpki-client