Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V-TborAmNw0Si-2bVKWiwiDjruQ.roa
File: V-TborAmNw0Si-2bVKWiwiDjruQ.roa (raw, json)
Hash identifier: ragaQqKFLgfLnCUFrtKWrPC04pOBVKBbe6GgeBrUVYU=
Subject key identifier: 57:E4:DB:A2:B0:26:37:0D:12:8B:ED:9B:54:A5:A2:C2:20:E3:AE:E4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4C8BF5F8D32BB037E6351A55541D38D1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V-TborAmNw0Si-2bVKWiwiDjruQ.roa
Signing time: Sat 09 Dec 2023 03:08:10 +0000
ROA not before: Sat 09 Dec 2023 03:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:4c88:d2e6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4c:8b:f5:f8:d3:2b:b0:37:e6:35:1a:55:54:1d:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 03:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e4dba2b026370d128bed9b54a5a2c220e3aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:28:00:c0:5a:8a:68:ff:6d:c3:e8:3f:f0:
bd:9a:51:bd:c5:96:b5:16:27:35:64:74:3e:bf:17:
1d:78:eb:c0:bd:f5:dd:47:dc:8c:fd:64:54:e1:d2:
4b:db:39:35:51:9f:50:d6:08:f7:bf:8a:b9:05:f1:
6b:cc:2f:67:46:38:ea:51:af:dd:bc:3f:46:bd:f0:
47:aa:6e:26:92:4b:30:f0:c8:db:17:61:04:b4:8a:
95:89:38:52:b0:c6:72:e2:e2:4d:96:0d:18:3a:aa:
69:a0:f4:82:70:9a:99:73:3c:0d:49:88:39:35:65:
63:0f:d4:40:d1:39:b9:22:c8:1c:aa:29:d6:07:3b:
be:39:c9:63:5b:85:b4:a9:72:7d:37:d4:26:2a:55:
b9:05:2d:78:a2:73:d9:90:3f:4c:3c:25:4e:38:d1:
85:35:4c:61:1d:12:90:e3:9c:ab:93:30:c5:34:88:
24:ff:3e:2b:69:08:44:1b:cf:48:aa:72:f4:56:bf:
fb:a9:2e:aa:57:dd:87:dc:98:e0:f4:1a:4c:4d:d7:
8a:7d:a9:40:ef:e5:fd:c3:e0:c5:b2:08:66:b6:6b:
43:9d:83:61:e1:fb:74:25:52:a7:d9:5b:b2:43:dd:
84:5f:42:b6:5c:d9:d0:61:eb:7b:72:1a:c4:1d:a0:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E4:DB:A2:B0:26:37:0D:12:8B:ED:9B:54:A5:A2:C2:20:E3:AE:E4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V-TborAmNw0Si-2bVKWiwiDjruQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:0b:13:dc:02:ba:0f:0d:ee:46:0e:a1:c4:2e:00:8c:61:1e:
71:35:60:75:11:7b:15:d5:48:4f:25:30:28:27:28:37:5f:d4:
fa:a7:b8:6a:84:90:07:60:3c:38:0a:32:a8:ee:92:a2:2e:f2:
34:98:d2:71:cc:fe:99:cc:2b:a0:26:3a:a5:3c:ac:4a:a2:dc:
d8:bf:b3:d3:96:97:c2:0a:37:8f:35:6a:a3:12:83:4d:61:63:
06:80:39:cb:94:67:46:67:6f:19:5b:e0:9f:4c:ca:57:3f:88:
7e:b7:f9:f2:8a:6d:6c:95:97:7a:6e:b4:e1:7b:3c:d1:6b:30:
b8:98:9c:75:55:d2:00:fa:86:91:76:a5:c6:fa:dc:dd:93:8c:
dc:7f:3c:85:6f:50:5e:6d:ca:c3:0e:18:42:e5:42:3b:66:13:
6c:48:b2:df:c7:b1:54:0d:02:05:07:af:e3:12:b0:d1:07:35:
0c:94:73:51:1f:3b:c0:f5:49:50:74:e0:61:ae:08:c1:02:86:
be:46:fb:87:cc:4f:21:aa:99:e6:4b:95:ed:9a:20:55:b1:d1:
af:48:10:b7:21:f2:75:0e:e3:8a:cc:e9:6c:7d:08:04:2b:07:
80:1a:c6:4a:88:93:3a:d1:eb:b3:94:fd:ac:c3:b6:c2:4a:33:
26:44:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:35:28 2025 by rpki-client