Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VQrh5-lkJKpTLYAbH3dKNHmbdBw.roa
File: VQrh5-lkJKpTLYAbH3dKNHmbdBw.roa (raw, json)
Hash identifier: lBmLXcIQU66irDdLssapCvVmi1Ge/Hcp1crITDBbm8s=
Subject key identifier: 55:0A:E1:E7:E9:64:24:AA:53:2D:80:1B:1F:77:4A:34:79:9B:74:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA82AC125EDFE5FCEA93CE52A9C0E5D30
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VQrh5-lkJKpTLYAbH3dKNHmbdBw.roa
Signing time: Tue 07 Nov 2023 05:04:16 +0000
ROA not before: Tue 07 Nov 2023 05:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a82a:a537/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:2a:c1:25:ed:fe:5f:ce:a9:3c:e5:2a:9c:0e:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 05:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=550ae1e7e96424aa532d801b1f774a34799b741c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:94:fa:df:10:8d:09:37:44:fd:23:42:a6:
3b:f9:30:64:e7:79:7f:c5:ce:7f:71:e9:51:b1:f5:
1c:55:67:be:95:c8:3e:90:b4:3a:de:ce:0b:dc:85:
8d:4c:2b:54:90:d2:15:08:47:75:0a:89:f2:7a:44:
14:03:a0:3e:7f:e8:2e:62:38:b7:b0:5e:02:58:e2:
e2:57:ba:25:11:88:dd:4c:d5:de:06:4c:43:77:3e:
e7:74:d2:5b:56:4a:a3:9d:17:56:7a:b3:a4:b1:bd:
3b:be:a6:5c:52:2b:f3:56:1b:49:6a:ef:3a:21:b5:
46:8b:8e:62:df:c9:f9:7c:7d:3f:4f:d7:e8:e5:58:
4c:31:3c:e5:f4:ba:2a:75:97:97:0c:b1:72:96:ca:
34:b6:e7:72:00:7e:a1:9c:09:b1:b3:43:10:e9:ee:
68:7e:c2:0b:58:48:0a:10:21:4d:2e:a9:d8:6e:7e:
e9:b2:30:f8:dc:86:2b:dc:5f:d5:7a:d6:7e:dd:42:
3a:aa:84:15:f7:c8:57:5f:e6:92:78:2b:83:d0:13:
d9:a8:51:04:d3:98:e2:c0:53:9c:52:48:a7:54:08:
f0:6a:a5:4d:08:cb:b3:92:bf:98:b6:e7:c5:7d:8e:
d4:a5:70:5f:36:fc:f2:1e:d1:0c:44:3e:fa:f4:a8:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:E1:E7:E9:64:24:AA:53:2D:80:1B:1F:77:4A:34:79:9B:74:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VQrh5-lkJKpTLYAbH3dKNHmbdBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:75:65:3e:79:b8:fb:9c:db:bf:b2:03:06:43:7d:5e:e5:17:
02:07:c6:09:d8:86:67:6a:67:da:41:3c:e3:52:e5:b6:cc:ba:
fc:84:27:9c:b3:f8:41:34:2f:ef:b8:a3:f1:b9:3a:a6:88:bc:
9b:44:88:08:dd:0d:5c:ba:46:34:97:e3:39:ab:1f:9d:6f:94:
9b:74:08:1a:e9:8e:86:3c:85:06:ce:3e:f6:94:03:14:ae:3d:
41:5a:61:79:df:a5:0d:df:32:ad:a6:b2:d0:e5:fd:47:f2:05:
0f:31:46:95:49:41:d0:0c:9a:e2:93:89:29:ca:c7:b0:cf:98:
a2:fa:1f:37:e4:d6:6d:89:72:8c:f4:ad:e4:89:35:4f:39:0b:
29:b3:42:27:4f:f6:75:c1:67:22:75:2a:fb:2c:54:80:56:1e:
b6:06:57:2e:6e:ff:01:b5:38:28:61:7f:1a:6e:f9:bf:cb:53:
c1:f2:b4:12:9f:59:60:1a:c7:69:39:23:68:8c:3a:46:4f:63:
bb:9a:a2:e2:ef:14:a4:43:f0:d2:7a:c6:8c:a6:6f:c3:5c:25:
1c:76:7d:2c:84:4c:c1:11:b9:bd:60:50:a6:29:b3:41:bc:ee:
29:55:bb:f3:b0:da:2f:f0:50:56:99:db:e0:59:9c:56:62:97:
a8:8d:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:18:13 2025 by rpki-client