Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VtWdb0gsqThfu6k8XMLRim2h2S8.roa
File: VtWdb0gsqThfu6k8XMLRim2h2S8.roa (raw, json)
Hash identifier: vFjjJkbiW+CGUuEFRt91apzeuJHkITcOwGPzns2ZyD8=
Subject key identifier: 56:D5:9D:6F:48:2C:A9:38:5F:BB:A9:3C:5C:C2:D1:8A:6D:A1:D9:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFD26DFF7ABA37DF6ED64E3688D1328F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VtWdb0gsqThfu6k8XMLRim2h2S8.roa
Signing time: Thu 05 Oct 2023 00:04:57 +0000
ROA not before: Thu 05 Oct 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:fd26:4e5c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fd:26:df:f7:ab:a3:7d:f6:ed:64:e3:68:8d:13:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56d59d6f482ca9385fbba93c5cc2d18a6da1d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:3c:26:81:59:bd:b5:f9:df:79:24:d8:46:
3d:2b:8a:8d:65:8f:16:ec:a0:15:bb:b4:7e:63:40:
66:e0:03:cf:ed:53:23:b4:e4:4c:6f:a5:f6:24:36:
19:18:d4:10:46:37:79:4f:51:c6:e8:85:76:e7:01:
ee:9e:ad:ab:32:80:3d:6f:53:9f:76:e0:b4:70:36:
32:ca:4c:6d:e9:13:57:8c:ad:49:92:15:d7:77:36:
f9:2b:ce:18:73:ea:a4:e9:aa:bf:36:da:d1:c6:14:
c1:c6:d0:d1:69:30:63:cb:02:28:df:36:0c:38:31:
f1:36:5c:fb:44:12:47:2e:c7:52:80:3a:2a:ad:29:
4c:32:07:bd:82:7c:d6:fe:7b:b1:7e:57:5e:56:ab:
6a:51:9a:82:34:82:ee:e7:f9:b4:35:c9:29:cf:46:
89:dc:d4:73:0f:a8:27:95:7e:13:ab:77:b9:99:25:
b9:76:bb:1c:5f:98:23:05:04:bc:c3:81:4c:78:08:
e3:60:5c:0c:49:49:83:f1:b2:5f:7d:14:dd:ed:2e:
f7:d2:39:78:f7:1e:bb:7b:6b:7f:48:c6:1b:61:10:
4d:7d:88:20:33:2b:f5:53:09:7e:19:f1:fe:8b:86:
24:58:85:52:93:db:64:4e:a7:0f:67:3b:9b:84:ee:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:9D:6F:48:2C:A9:38:5F:BB:A9:3C:5C:C2:D1:8A:6D:A1:D9:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VtWdb0gsqThfu6k8XMLRim2h2S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:bc:31:46:99:35:db:62:70:58:51:94:72:c3:da:c6:1d:53:
0a:d7:83:6c:d6:3d:3c:4e:6b:11:99:c5:60:09:41:77:5d:df:
c7:f8:8d:aa:11:74:5d:b3:64:b9:ee:96:26:5d:38:b8:ef:b6:
96:a4:67:1e:8c:41:7a:cc:26:2e:77:9b:90:a8:c6:75:46:7a:
ab:1a:7d:47:68:4b:98:9b:5a:5c:18:b5:77:a2:be:f3:a0:1d:
f9:36:a6:db:52:1f:45:1b:a7:09:96:d7:fd:9b:d2:a6:a9:9b:
53:20:76:9d:73:0f:b2:ea:39:25:10:5f:c9:6e:5c:87:98:1e:
9a:05:31:12:d1:9d:3a:d7:98:f8:1b:01:3b:1e:1d:b6:a3:d1:
36:73:df:46:38:18:09:f7:85:8c:f4:25:49:21:5a:da:58:34:
a9:12:bf:a5:32:7f:4e:f2:2c:dd:8a:65:2b:33:3a:41:c6:14:
c4:ef:34:fa:91:f9:15:14:41:3d:dc:86:58:3b:45:86:4b:8a:
53:ea:48:2d:df:a5:4e:88:0b:1f:a2:48:a3:50:40:04:86:d2:
85:2f:c7:80:b8:68:48:ae:0d:3c:d5:3f:1f:b7:ec:f7:e4:93:
4a:99:14:02:74:b6:83:1e:7a:13:bc:00:ee:b6:32:07:2a:f2:
40:1f:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:35:11 2025 by rpki-client