Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vbXZhtPAH3Ebeke3i6HLuF3X4XU.roa
File: vbXZhtPAH3Ebeke3i6HLuF3X4XU.roa (raw, json)
Hash identifier: oUlcJ3DEyxelXOnpR7KSpIMCCKjBM2oBGfISeUN1wUA=
Subject key identifier: BD:B5:D9:86:D3:C0:1F:71:1B:7A:47:B7:8B:A1:CB:B8:5D:D7:E1:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB80C52C9E80BD9230355D1B577AFB5D5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vbXZhtPAH3Ebeke3i6HLuF3X4XU.roa
Signing time: Fri 10 Nov 2023 07:04:57 +0000
ROA not before: Fri 10 Nov 2023 07:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:b80b:db3c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:0c:52:c9:e8:0b:d9:23:03:55:d1:b5:77:af:b5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 07:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdb5d986d3c01f711b7a47b78ba1cbb85dd7e175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:70:b9:26:35:d2:66:1a:0e:bc:d7:3c:91:6c:
6a:df:a7:e2:22:73:4b:be:ea:97:0c:53:3b:70:48:
b9:5f:63:35:03:42:d0:08:55:78:ff:f7:30:66:28:
ad:be:50:83:40:36:ec:c9:61:05:d2:3c:16:0c:4c:
a1:79:52:1a:31:c7:f8:81:d5:70:f5:1c:dc:32:c6:
a8:7e:48:5a:28:46:35:99:6f:10:6d:dd:67:8e:4f:
6f:98:55:a9:e4:60:5d:20:bd:d4:ca:9f:02:38:28:
2c:8b:9d:f9:db:45:b9:c0:9b:b3:3a:08:af:c9:6b:
aa:8c:2e:2e:90:e4:ab:b2:30:eb:e8:2e:26:28:c4:
37:c2:2e:01:12:58:01:47:e4:d7:5c:b2:a1:66:26:
06:a3:4e:a7:c3:67:ef:0e:c1:86:e0:eb:b5:90:bc:
a2:37:9b:bc:2c:5f:13:e7:09:3e:fa:d9:43:d4:cb:
b5:2a:c0:f6:46:6e:b9:74:9d:24:68:e3:93:c3:f9:
6e:b3:53:8b:ea:41:e3:2f:01:6a:26:05:cc:ce:35:
4b:0a:ec:e1:ca:7b:03:4e:23:07:6f:02:51:5b:38:
2d:fc:a6:3c:d0:69:31:b2:b9:46:96:ed:ef:34:9d:
9b:e3:0f:97:70:7d:98:13:b7:8d:10:d2:56:aa:11:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:D9:86:D3:C0:1F:71:1B:7A:47:B7:8B:A1:CB:B8:5D:D7:E1:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vbXZhtPAH3Ebeke3i6HLuF3X4XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e3:38:51:f1:a5:87:5c:26:a2:4a:de:de:ca:91:28:b0:e4:
d7:58:fc:a0:83:88:a2:13:1e:98:15:fe:25:bb:26:ed:e8:38:
2f:ab:31:d4:34:8f:bd:85:06:35:f4:56:87:c3:78:27:c1:f6:
9b:5a:e9:de:93:4f:db:47:ee:1e:2d:31:47:ce:d5:4b:c0:41:
b0:88:66:6e:7e:9f:da:c7:59:c3:21:1f:4d:c4:25:44:5e:ac:
8a:64:52:a4:48:2a:75:59:36:6d:0a:ec:a1:14:a6:2f:77:a7:
11:b6:58:3a:57:34:ef:01:97:7f:d5:43:2a:15:ca:4c:f9:da:
08:50:ee:07:b3:d0:db:89:18:73:28:e9:69:08:8c:15:92:82:
93:cb:eb:53:c7:4a:0c:59:50:b4:08:6d:b1:c5:25:9b:f8:ac:
b3:18:47:8f:bd:88:bf:21:e2:f4:24:35:cb:18:5d:f7:16:4b:
45:e7:97:67:12:f7:ff:81:c7:50:92:49:6f:99:82:10:91:7b:
6d:c4:ff:28:2f:79:17:8d:15:a3:81:bc:3a:07:40:9c:02:a6:
81:a9:40:67:3a:e6:99:0d:00:1c:2d:13:f8:35:b6:cf:75:9a:
76:d1:6f:3b:27:18:24:74:33:6b:6b:57:17:e1:4d:88:e5:f7:
27:86:ce:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu4DFLJ6AvZIwNV0bV3r7XVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMDcwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGI1ZDk4NmQzYzAxZjcxMWI3YTQ3Yjc4YmExY2JiODVkZDdlMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3C5JjXSZhoOvNc8kWxq36fiInNL
vuqXDFM7cEi5X2M1A0LQCFV4//cwZiitvlCDQDbsyWEF0jwWDEyheVIaMcf4gdVw
9RzcMsaofkhaKEY1mW8Qbd1njk9vmFWp5GBdIL3Uyp8COCgsi53520W5wJuzOgiv
yWuqjC4ukOSrsjDr6C4mKMQ3wi4BElgBR+TXXLKhZiYGo06nw2fvDsGG4Ou1kLyi
N5u8LF8T5wk++tlD1Mu1KsD2Rm65dJ0kaOOTw/lus1OL6kHjLwFqJgXMzjVLCuzh
ynsDTiMHbwJRWzgt/KY80GkxsrlGlu3vNJ2b4w+XcH2YE7eNENJWqhELdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL212YbTwB9xG3pHt4uhy7hd1+F1MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdmJYWmh0UEFIM0ViZWtlM2k2SEx1RjNYNFhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH/jOFHxpYdcJqJK3t7K
kSiw5NdY/KCDiKITHpgV/iW7Ju3oOC+rMdQ0j72FBjX0VofDeCfB9pta6d6TT9tH
7h4tMUfO1UvAQbCIZm5+n9rHWcMhH03EJURerIpkUqRIKnVZNm0K7KEUpi93pxG2
WDpXNO8Bl3/VQyoVykz52ghQ7gez0NuJGHMo6WkIjBWSgpPL61PHSgxZULQIbbHF
JZv4rLMYR4+9iL8h4vQkNcsYXfcWS0Xnl2cS9/+Bx1CSSW+ZghCRe23E/ygveReN
FaOBvDoHQJwCpoGpQGc65pkNABwtE/g1ts91mnbRbzsnGCR0M2trVxfhTYjl9yeG
ziM=
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:05:47 2025 by rpki-client