Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P4gGxPT2GU8QpQRy1zslx5ZZW8o.roa
File: P4gGxPT2GU8QpQRy1zslx5ZZW8o.roa (raw, json)
Hash identifier: RrKptN9Y5SfcaXcEhQneY84fI2B7ZyKSMYjdecOYtQY=
Subject key identifier: 3F:88:06:C4:F4:F6:19:4F:10:A5:04:72:D7:3B:25:C7:96:59:5B:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B94A5CE6EAA185F99F7FB8E09ADF906D9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P4gGxPT2GU8QpQRy1zslx5ZZW8o.roa
Signing time: Fri 03 Nov 2023 10:06:16 +0000
ROA not before: Fri 03 Nov 2023 10:06:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:94a5:8e9a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:a5:ce:6e:aa:18:5f:99:f7:fb:8e:09:ad:f9:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 10:06:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8806c4f4f6194f10a50472d73b25c796595bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:ba:0c:ec:ce:3e:14:5d:76:25:a8:9c:7a:
98:a3:bb:62:1d:56:34:47:86:b7:36:86:98:f4:1d:
7c:0f:ac:65:6c:fd:d4:14:d0:2f:2d:32:2b:55:92:
fd:be:0d:72:ba:24:99:c0:90:9a:98:12:44:02:94:
93:65:66:13:c3:21:b1:4a:f6:79:98:ac:44:98:4d:
83:dc:9e:79:7b:ca:30:28:7e:d6:0c:9d:ef:8b:b9:
28:ef:bc:29:ff:78:6c:29:1b:48:f2:b8:9f:98:a7:
82:67:44:0e:a7:22:4b:79:2d:1d:33:f3:4f:93:7f:
9c:e0:5e:46:d8:33:cd:a3:f0:0a:42:05:51:dc:28:
73:b1:13:86:ec:70:df:33:ca:6c:7e:81:eb:c1:8e:
27:4e:19:6a:4a:eb:90:9a:70:71:2e:7a:3d:c7:5c:
0d:be:b2:e2:f8:7e:2c:79:03:b4:59:4e:fc:a0:03:
22:2b:5e:c8:e2:5c:a8:c7:c0:dd:6f:74:3f:a1:db:
26:56:b3:42:2d:d8:1f:43:ac:e7:03:84:47:16:1c:
93:50:aa:ec:0e:15:0c:4d:2a:d8:2a:97:d1:f0:a9:
1f:b9:f4:e2:0d:77:48:3c:47:99:46:c9:82:7b:49:
c9:95:2c:2a:17:c7:00:8e:97:22:97:c9:c8:ea:98:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:06:C4:F4:F6:19:4F:10:A5:04:72:D7:3B:25:C7:96:59:5B:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P4gGxPT2GU8QpQRy1zslx5ZZW8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:83:7e:08:33:24:47:c2:e7:79:cd:c2:f5:74:31:79:76:dc:
d4:9f:15:e7:e2:83:9e:92:f0:33:de:a3:f3:d1:93:91:a8:94:
91:6a:40:2e:ef:d2:7e:7b:b1:c2:b9:de:f0:de:46:ca:eb:9e:
93:a7:fd:4f:cf:15:2f:4d:19:d7:9c:42:35:0f:60:bc:4f:13:
f1:ec:27:f8:94:80:4e:d3:f5:4c:44:06:b6:50:34:17:53:54:
03:07:11:38:36:a7:d7:01:cd:ea:6c:4a:02:d9:8f:98:b0:da:
6c:6b:44:90:06:b4:ae:b0:3e:42:df:7a:25:5b:4d:79:6d:0d:
97:10:13:f5:02:d2:4b:4d:e2:bd:9e:ff:fc:7a:c1:11:12:f8:
37:38:cf:99:d7:03:67:f8:5b:62:90:97:6d:52:ff:6d:17:bd:
1a:b9:7d:43:2d:96:7e:6c:3b:68:da:57:9e:cc:9a:4f:2c:eb:
d9:59:4c:58:64:50:61:9c:38:4d:26:4c:05:70:e1:25:fa:4f:
30:64:28:1e:1e:55:a5:7d:ea:b2:a6:34:7f:b4:9d:e6:be:6b:
60:2d:12:19:c9:18:f5:84:68:6b:99:cc:fb:c1:ab:75:b0:8c:
bb:06:82:3d:36:46:ae:48:56:45:3f:ff:a2:72:a9:0c:39:4d:
0d:6c:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:28 2025 by rpki-client