Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P-njdEKxXu8bH1o416tHdlI6eXU.roa
File: P-njdEKxXu8bH1o416tHdlI6eXU.roa (raw, json)
Hash identifier: n3Mk8LStoQ/jXAkEZAPby+dDMxKA+gRMKA0dB3N2xK0=
Subject key identifier: 3F:E9:E3:74:42:B1:5E:EF:1B:1F:5A:38:D7:AB:47:76:52:3A:79:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC11BA0F301567BE30F32262C34DE7A04
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P-njdEKxXu8bH1o416tHdlI6eXU.roa
Signing time: Sat 23 Sep 2023 08:15:27 +0000
ROA not before: Sat 23 Sep 2023 08:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:1b:a0:f3:01:56:7b:e3:0f:32:26:2c:34:de:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 08:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fe9e37442b15eef1b1f5a38d7ab4776523a7975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:b8:02:c2:7e:97:81:5d:84:3d:6a:46:e4:
43:09:c5:b0:5f:65:bc:4c:05:ef:13:1e:03:f0:24:
47:a9:a5:6f:ba:44:c2:96:cf:7a:eb:85:5e:8a:51:
32:7f:7e:06:77:2f:ad:11:8d:7c:bb:7b:5a:52:72:
96:c0:dc:16:4d:b4:78:b7:30:2e:be:70:4f:12:77:
d0:b6:aa:9f:46:a3:f6:7d:65:91:9c:d5:74:0e:b1:
d5:b1:d8:07:02:bf:b9:6a:55:69:d8:08:49:1c:3e:
cb:47:aa:ff:e6:a5:1f:98:97:fb:68:df:56:ba:0d:
aa:f7:41:d6:15:fd:ad:33:f0:2c:cc:ed:e7:65:a0:
3f:8a:64:77:de:6e:48:e7:af:f3:09:91:27:29:6b:
21:3b:4d:9e:7a:89:e1:16:bc:8a:4d:f3:17:16:47:
39:ed:59:e6:6d:14:6d:d0:7f:1a:2e:56:74:b5:1c:
b0:e1:68:16:d8:54:13:99:6f:da:ae:c9:f7:c6:8a:
5f:ab:d9:ea:ea:46:27:0f:7c:fe:8e:51:01:80:50:
af:95:dd:c0:f9:40:5f:1f:49:86:e3:3d:1f:62:57:
83:10:60:2a:34:96:8c:d9:88:f2:c8:d0:72:0a:64:
9d:4e:ec:91:b6:8a:41:2f:b5:50:c2:5e:f7:d0:13:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:E3:74:42:B1:5E:EF:1B:1F:5A:38:D7:AB:47:76:52:3A:79:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P-njdEKxXu8bH1o416tHdlI6eXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:44:51:7e:19:98:a0:0b:c1:ce:da:c4:5c:67:b1:5d:39:02:
e9:08:aa:c7:9f:00:bd:2b:97:01:a4:4c:31:77:1c:38:d9:2e:
4a:91:72:1d:c5:b3:6f:94:48:e7:e4:a1:d4:99:39:fa:12:e8:
b1:25:71:5a:0e:31:70:d3:e3:81:be:f9:9a:1e:6f:90:50:98:
4f:99:e4:2c:29:0b:10:37:30:51:8b:99:7a:45:81:82:5a:13:
f7:62:91:b2:4d:f9:c8:50:0c:dd:c7:b7:ea:ea:71:b5:3b:c1:
7a:1f:97:63:a1:5c:37:e8:ba:e8:bf:db:ee:d9:41:1e:79:04:
10:5e:a9:58:b2:fb:c2:d2:36:13:82:82:c9:fa:f4:b8:cb:00:
9f:00:6e:7f:54:ff:58:00:83:d7:97:c1:90:9d:96:24:08:e7:
69:87:ce:57:a9:0e:cc:0f:d1:1a:1f:3f:70:7c:b7:f5:82:64:
04:dc:f1:c0:e5:f9:cd:40:95:0b:2c:d6:9e:e0:e1:6b:a2:56:
b6:2c:f0:44:1d:33:49:98:01:92:a9:2f:e6:4c:96:fb:54:a0:
7a:cb:60:aa:de:ca:14:47:67:2e:3b:f8:0c:42:45:63:80:5e:
c1:64:af:9c:97:4a:6d:4d:a4:12:68:4c:7a:04:39:f0:ba:bc:
9d:98:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:57:40 2025 by rpki-client