Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PF2CGuCLKXyo5MPZjWouWxITSZY.roa
File: PF2CGuCLKXyo5MPZjWouWxITSZY.roa (raw, json)
Hash identifier: w3V6wCgyb66oaijh4JRpXlInkZCbBpLdPC5imvoVrGE=
Subject key identifier: 3C:5D:82:1A:E0:8B:29:7C:A8:E4:C3:D9:8D:6A:2E:5B:12:13:49:96
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8E7149B9F76DB074959AD977522F27BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PF2CGuCLKXyo5MPZjWouWxITSZY.roa
Signing time: Thu 21 Dec 2023 22:13:58 +0000
ROA not before: Thu 21 Dec 2023 22:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:71:49:b9:f7:6d:b0:74:95:9a:d9:77:52:2f:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 22:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c5d821ae08b297ca8e4c3d98d6a2e5b12134996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:99:7a:bc:74:df:14:7e:b6:e8:eb:c7:09:
60:3a:fb:27:a1:7a:e2:81:a9:db:af:d5:e2:05:23:
ca:06:14:bd:2f:90:b5:db:f2:a5:d0:42:6c:82:38:
95:40:3e:5f:69:01:af:bf:dd:69:70:a2:52:a3:0d:
5f:21:74:ef:34:31:00:3c:a5:d2:7f:5e:37:ba:e0:
c6:69:9b:04:3f:11:66:86:c5:cb:26:15:70:61:c0:
35:5f:5c:c8:fe:63:82:79:af:fb:80:0d:b2:2f:cf:
58:5c:68:8d:aa:1a:a4:d2:c6:63:b9:27:7a:5f:e3:
9a:f4:8d:f2:c8:36:f1:2f:38:67:1e:07:c8:9a:f9:
b1:18:49:6e:cd:57:39:ba:9e:00:a9:f3:91:ab:fe:
a7:cf:f4:d1:19:d0:f9:74:39:05:ff:34:45:25:ae:
e4:c5:5a:72:ea:99:9c:66:79:81:d9:b4:07:dc:8b:
7c:0a:8b:a6:b8:c4:3d:19:d4:ad:a9:0d:d3:eb:aa:
0e:a2:4a:d4:51:b3:38:5e:22:9b:05:9c:d4:1f:81:
4f:d7:e6:18:ef:21:86:ec:9f:6a:2b:07:d6:1c:02:
cf:63:fd:28:01:77:6b:eb:67:ed:5e:d6:fa:1d:ff:
70:3c:57:61:32:74:f0:8e:f3:19:09:6b:f4:6d:b1:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:82:1A:E0:8B:29:7C:A8:E4:C3:D9:8D:6A:2E:5B:12:13:49:96
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PF2CGuCLKXyo5MPZjWouWxITSZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:98:0b:27:5a:f3:9c:fc:3b:b5:b9:6e:80:3a:d0:e6:c1:32:
8a:3e:8b:3a:2a:b6:02:be:bc:d1:9e:83:22:ac:da:86:4d:c8:
21:f7:8e:14:c8:9c:c0:ef:f4:44:26:69:3d:54:c9:0c:4b:7f:
17:9e:4e:b0:53:f3:37:b3:bd:e2:e5:0e:96:83:e5:dc:5c:e2:
dc:2a:71:aa:23:07:ad:21:e0:07:05:3b:35:08:06:e3:4d:b3:
1a:dc:b5:78:a8:3a:3d:d8:96:bb:6b:d3:5b:66:4d:b6:ff:2b:
4e:8b:22:8e:b3:04:d0:0f:24:fe:e4:7d:59:4f:aa:73:01:b6:
e1:2b:af:1e:30:9e:12:5a:e1:94:94:b6:ae:a2:fb:04:53:c0:
90:6b:13:ad:00:63:b3:0a:28:a1:43:e1:93:f5:f9:b3:a2:d2:
95:37:64:3b:ff:c0:76:a6:44:62:54:65:df:b4:b8:64:dc:d3:
80:bd:96:9e:b0:a3:9a:ba:11:55:dd:00:6d:0c:21:2e:c0:4b:
e2:b0:d2:8d:3b:f3:13:2f:1a:3a:b0:10:22:e8:b8:86:a7:bd:
39:45:6f:2c:d1:c8:b2:ab:4e:5f:bf:f5:f1:97:69:26:a0:c4:
c6:c4:1b:90:7b:78:09:02:9a:61:d4:53:eb:07:e8:c5:ab:80:
6d:5a:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:07 2025 by rpki-client