Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vvjqEJbXC3QshWxrPjzw9PeZhi4.roa
File: vvjqEJbXC3QshWxrPjzw9PeZhi4.roa (raw, json)
Hash identifier: BoUChWTiixlcjBWQFRoV4c6wiaRf279hWiJikTkF1Ak=
Subject key identifier: BE:F8:EA:10:96:D7:0B:74:2C:85:6C:6B:3E:3C:F0:F4:F7:99:86:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACAC0F2A183B368CE2974E268601E0B7B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vvjqEJbXC3QshWxrPjzw9PeZhi4.roa
Signing time: Mon 25 Sep 2023 05:12:37 +0000
ROA not before: Mon 25 Sep 2023 05:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:c0:f2:a1:83:b3:68:ce:29:74:e2:68:60:1e:0b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 05:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef8ea1096d70b742c856c6b3e3cf0f4f799862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:eb:b1:e7:ef:36:be:e9:60:ff:ca:23:c7:
43:16:4b:99:ed:75:14:49:81:1d:22:33:ad:d6:5f:
fe:3a:af:d3:bf:94:7f:84:4c:3a:18:87:dc:21:87:
6a:3e:2e:43:90:c4:77:37:e2:e4:8d:ab:46:6a:af:
cb:b5:55:bf:90:84:e2:f8:fc:c0:95:f1:75:c7:de:
39:0b:99:a6:c6:44:2a:f0:2c:8c:07:47:4e:1c:ab:
0c:d7:10:82:e3:2b:50:42:5e:d2:3e:82:72:07:16:
1d:df:18:2a:2a:cd:4b:f2:0e:05:b9:25:b7:5d:f6:
25:de:3a:ee:26:fc:64:65:d6:76:41:30:5a:a1:b9:
23:4b:1a:e6:e9:dd:11:90:d1:8f:ff:2f:3c:b0:99:
03:63:be:8d:28:c1:fa:b9:2a:70:c2:ea:f6:8f:63:
87:c8:4f:ec:7c:a2:5f:5d:28:f6:4b:b3:50:7b:a0:
7f:a4:b0:a1:17:9c:26:ba:1a:9c:5b:40:30:83:56:
af:ce:da:a3:82:40:7b:a1:6b:1b:68:90:59:ed:f7:
98:91:26:31:e7:fd:de:22:15:19:c7:7d:52:a8:17:
1d:b8:03:bc:6d:84:3d:ce:26:04:49:98:db:3d:aa:
63:00:82:fc:97:c5:02:d4:9a:24:58:2a:a9:f9:34:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:EA:10:96:D7:0B:74:2C:85:6C:6B:3E:3C:F0:F4:F7:99:86:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vvjqEJbXC3QshWxrPjzw9PeZhi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:1c:8b:1e:bf:e2:48:50:fd:1f:5b:8a:57:ab:55:49:79:30:
4a:e2:44:e2:1a:59:0d:68:bc:c9:c9:0f:d2:52:0a:5d:73:97:
9d:4c:56:02:8d:65:57:84:19:8b:3c:ba:06:0c:dc:9b:23:00:
8e:76:6c:19:46:93:b1:ce:ff:9c:60:5c:df:83:92:c2:56:f3:
38:16:83:c2:29:81:85:42:bc:7f:89:f7:f6:9a:24:8e:ff:79:
83:43:e9:8b:2f:98:c9:67:4f:d4:e7:21:6f:e0:30:aa:0a:30:
a7:4c:bc:4b:14:2d:d4:3f:02:35:9e:9a:92:82:98:b4:9c:c3:
da:b3:1d:5e:0b:7d:4e:4c:f9:d1:32:73:e1:b9:1e:20:31:d9:
df:66:94:55:cf:80:33:c4:f0:cf:7c:05:df:d0:07:e4:74:9e:
40:c1:11:8b:1e:53:59:19:b2:9e:4c:8f:8b:b1:57:ac:30:ba:
eb:25:2c:bb:10:66:bb:de:8e:00:d3:41:fc:ca:6d:78:b1:91:
f5:eb:85:eb:f8:05:18:32:0b:15:88:11:21:ec:92:4e:d2:5a:
bc:14:9e:c6:cd:81:7d:5c:1e:5b:d1:64:a9:08:52:4a:fb:f9:
58:bd:d0:5f:0b:69:57:be:37:b1:06:d1:c5:95:20:15:63:a4:
83:be:56:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrKwPKhg7Nozil04mhgHgt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI1MDUxMjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWY4ZWExMDk2ZDcwYjc0MmM4NTZjNmIzZTNjZjBmNGY3OTk4NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLbrsefvNr7pYP/KI8dDFkuZ7XUU
SYEdIjOt1l/+Oq/Tv5R/hEw6GIfcIYdqPi5DkMR3N+LkjatGaq/LtVW/kITi+PzA
lfF1x945C5mmxkQq8CyMB0dOHKsM1xCC4ytQQl7SPoJyBxYd3xgqKs1L8g4FuSW3
XfYl3jruJvxkZdZ2QTBaobkjSxrm6d0RkNGP/y88sJkDY76NKMH6uSpwwur2j2OH
yE/sfKJfXSj2S7NQe6B/pLChF5wmuhqcW0Awg1avztqjgkB7oWsbaJBZ7feYkSYx
5/3eIhUZx31SqBcduAO8bYQ9ziYESZjbPapjAIL8l8UC1JokWCqp+TRiZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL746hCW1wt0LIVsaz488PT3mYYuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdnZqcUVKYlhDM1FzaFd4clBqenc5UGVaaGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGQcix6/4khQ/R9biler
VUl5MEriROIaWQ1ovMnJD9JSCl1zl51MVgKNZVeEGYs8ugYM3JsjAI52bBlGk7HO
/5xgXN+DksJW8zgWg8IpgYVCvH+J9/aaJI7/eYND6YsvmMlnT9TnIW/gMKoKMKdM
vEsULdQ/AjWempKCmLScw9qzHV4LfU5M+dEyc+G5HiAx2d9mlFXPgDPE8M98Bd/Q
B+R0nkDBEYseU1kZsp5Mj4uxV6wwuuslLLsQZrvejgDTQfzKbXixkfXrhev4BRgy
CxWIESHskk7SWrwUnsbNgX1cHlvRZKkIUkr7+Vi90F8LaVe+N7EG0cWVIBVjpIO+
Vm8=
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:00:42 2025 by rpki-client