Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VGsjL4GElPUgVcE1f_SAplyH1aU.roa
File: VGsjL4GElPUgVcE1f_SAplyH1aU.roa (raw, json)
Hash identifier: EP8TTB2m0D6vcNyv6/C5W40rfl/ggVkhfLEf6hr5Hl8=
Subject key identifier: 54:6B:23:2F:81:84:94:F5:20:55:C1:35:7F:F4:80:A6:5C:87:D5:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C90C54B6C8125C6F3B7983CC04FB528D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VGsjL4GElPUgVcE1f_SAplyH1aU.roa
Signing time: Fri 22 Dec 2023 09:04:58 +0000
ROA not before: Fri 22 Dec 2023 09:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:90c4:d111/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:c5:4b:6c:81:25:c6:f3:b7:98:3c:c0:4f:b5:28:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 09:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=546b232f818494f52055c1357ff480a65c87d5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b7:20:a5:30:f7:92:5c:86:e7:79:82:f2:21:
ce:f2:7c:bc:fc:bb:18:99:a9:f0:6b:b5:3e:62:9b:
a9:4f:f1:b6:e3:3b:e7:eb:5f:e1:86:80:be:90:10:
bb:cc:03:29:ee:06:6c:5b:4e:69:57:5b:89:cc:c9:
21:3c:03:30:52:e4:ff:f2:4e:27:93:88:34:6b:d7:
69:87:5e:c3:4d:b4:f5:9d:94:14:09:51:ee:45:bd:
42:e6:48:63:51:ba:3c:a5:be:0b:43:bf:1f:62:07:
76:fc:e9:d4:2e:b5:ac:e6:33:b1:ce:bd:89:3d:7d:
05:c9:35:0f:4a:73:e9:cd:21:c8:5c:4c:b1:57:0d:
da:28:d7:f0:36:be:7d:68:6f:eb:05:09:eb:eb:f3:
fb:7d:44:9a:f3:83:fa:3a:1c:39:ea:38:73:8d:4c:
94:09:4e:9c:59:7c:7e:87:3c:fb:f9:20:a5:06:79:
4c:4d:dd:17:ba:24:98:ba:86:7e:f3:84:b8:a5:e9:
b1:1e:49:b1:8b:8b:27:3f:31:07:f5:0f:03:d0:ee:
4c:a3:aa:12:ab:dc:2b:c0:9a:de:a7:96:74:7f:75:
13:f6:a3:27:bc:10:ff:d8:f4:31:fb:0d:8b:06:ee:
1a:18:1e:04:c5:8c:1f:fe:13:c0:b6:3e:97:5c:a9:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:23:2F:81:84:94:F5:20:55:C1:35:7F:F4:80:A6:5C:87:D5:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VGsjL4GElPUgVcE1f_SAplyH1aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:e9:a8:b4:10:d3:dc:1a:a2:cc:f4:0d:27:b5:eb:f0:13:aa:
fb:dc:e2:ce:74:2d:e6:3e:42:2c:ef:d8:77:82:43:82:0d:ea:
7b:62:8b:26:74:da:9c:0e:25:ed:40:ed:80:45:3e:44:9d:a2:
d3:49:c7:3a:ea:27:12:c7:0e:2c:f5:f4:43:33:28:8b:39:f2:
1c:8f:fd:07:b7:77:96:54:d2:c8:6d:a3:2b:b2:3b:1f:01:89:
e1:0d:4b:13:a1:50:2b:4f:77:95:7e:e6:fd:1e:47:52:8b:21:
78:72:62:b5:b9:ae:cb:35:53:2d:00:a9:2f:e2:3d:0e:2b:b5:
12:6d:d4:f3:28:e5:c3:16:c0:63:be:21:45:d8:31:3a:92:9c:
c8:45:7f:f0:d8:2e:28:d7:02:81:f9:da:84:58:b0:8d:39:d8:
0b:e5:7b:1e:71:d2:fd:a2:60:24:3a:f9:10:2e:e4:f6:f5:ee:
5a:9e:4b:65:a1:0d:ca:0b:68:0e:07:cc:5a:46:8d:67:51:10:
cc:d6:c6:c2:d6:ff:fd:84:1b:e4:10:5b:44:4f:72:45:ae:9d:
a5:fa:5e:35:9e:fa:dc:f4:c5:d9:53:35:2c:ef:4b:d9:97:73:
4a:38:2f:e4:99:ef:07:9a:d4:f3:66:5b:a5:91:a4:18:a5:82:
c8:3c:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:52 2025 by rpki-client