Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rvpjvCetX4rUXTNZEszzQxYJP7c.roa
File: rvpjvCetX4rUXTNZEszzQxYJP7c.roa (raw, json)
Hash identifier: ZGSZSKu+bpXBfbKOyffqEAPyeE3Kh1s3udWw0Bv9uXQ=
Subject key identifier: AE:FA:63:BC:27:AD:5F:8A:D4:5D:33:59:12:CC:F3:43:16:09:3F:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B54EF49E22B4E2172B35A3253D47AEF00
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rvpjvCetX4rUXTNZEszzQxYJP7c.roa
Signing time: Sun 22 Oct 2023 01:10:50 +0000
ROA not before: Sun 22 Oct 2023 01:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:54e9:7aa4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:ef:49:e2:2b:4e:21:72:b3:5a:32:53:d4:7a:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 01:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aefa63bc27ad5f8ad45d335912ccf34316093fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:74:c8:03:19:26:e7:58:43:c4:ff:22:c1:
92:9e:71:c4:b6:01:9b:ea:ed:1b:d0:67:0d:18:38:
cf:c4:e2:97:58:4e:f0:d0:03:97:67:c7:58:e6:7a:
2e:48:98:f7:61:c1:10:b3:9f:3a:7f:24:7e:4a:21:
0d:11:be:45:87:85:f1:d2:53:37:31:c6:d9:53:1a:
15:aa:17:94:f9:1d:9d:e6:d3:35:89:58:72:a3:5a:
73:80:5b:a8:08:6d:b2:3f:ca:3f:fc:a0:d7:b4:06:
8f:2f:dc:30:dd:67:eb:6e:b0:c4:d5:7a:b5:e2:23:
20:9e:a3:b3:77:cf:a9:7d:49:a6:21:cf:22:ee:01:
3b:5d:1e:94:90:70:4d:e2:f5:e9:d1:38:b0:a3:47:
5b:29:f7:40:ae:47:03:18:85:db:2f:62:81:30:34:
43:c6:0a:83:ab:60:38:56:fa:5c:f5:e0:bb:f4:67:
c3:a1:7d:85:c9:aa:ce:6b:70:77:3c:e2:8d:9f:71:
3c:40:21:01:2a:a2:c7:83:f1:a6:15:99:0f:f1:36:
7f:bd:a3:3d:cc:c6:fe:94:5c:27:7a:04:20:9f:8b:
96:b7:56:3c:0a:4b:09:12:c7:a0:d4:eb:4c:1d:01:
df:fa:12:83:57:70:59:10:4c:88:ad:46:e6:08:f5:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:63:BC:27:AD:5F:8A:D4:5D:33:59:12:CC:F3:43:16:09:3F:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rvpjvCetX4rUXTNZEszzQxYJP7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:4b:72:63:81:62:03:4f:95:32:60:66:c5:43:4f:82:7b:77:
97:74:09:6c:43:fa:91:fd:16:0a:f4:4d:93:c1:a9:f8:7a:eb:
af:9e:7a:82:b5:bf:eb:45:83:f7:b6:43:47:26:6b:63:14:44:
bc:45:38:b5:7e:19:40:bc:f2:0b:f0:44:88:59:fc:6f:19:18:
eb:58:e2:da:03:bb:7c:87:f3:33:41:6d:6d:0b:26:54:4c:89:
b3:44:75:c8:20:ba:b6:83:ca:13:a0:54:41:21:b5:db:11:20:
1f:0c:6d:a4:32:1e:32:11:bf:35:b5:64:34:87:62:a0:ab:5b:
9f:5d:7f:c7:74:8e:9f:70:13:67:5d:db:8b:ec:61:9c:af:c7:
57:3b:cd:4e:e6:e0:a7:f3:04:10:26:5c:02:47:27:35:11:0f:
80:87:09:28:e7:58:f9:24:a4:63:3b:1a:dd:38:d0:b8:9f:06:
94:fb:2c:cf:95:a0:2d:bd:52:70:67:b7:f4:22:65:cc:19:8d:
03:6f:fb:66:29:7d:24:4d:98:7e:58:34:c3:36:3b:3f:ca:68:
82:3d:b1:6d:21:a6:6e:af:8c:ae:b9:1a:30:47:45:9b:27:54:
a4:e5:c3:26:1a:ed:92:f2:13:c2:e9:73:1b:de:7e:2d:bb:e0:
47:3d:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:56:32 2025 by rpki-client