Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P5t3Kzl149e7HOBJ0YOntZWKTqY.roa
File: P5t3Kzl149e7HOBJ0YOntZWKTqY.roa (raw, json)
Hash identifier: hk8UXzknWv5HqjlALgjW/fkGko6rHwHJB2kpCfhzrOI=
Subject key identifier: 3F:9B:77:2B:39:75:E3:D7:BB:1C:E0:49:D1:83:A7:B5:95:8A:4E:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B424567FE4A8D2FDEB9E27BCB7FAFB75A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P5t3Kzl149e7HOBJ0YOntZWKTqY.roa
Signing time: Wed 18 Oct 2023 10:12:06 +0000
ROA not before: Wed 18 Oct 2023 10:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:45:67:fe:4a:8d:2f:de:b9:e2:7b:cb:7f:af:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 10:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f9b772b3975e3d7bb1ce049d183a7b5958a4ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:89:78:fb:76:38:04:ca:2d:53:b3:07:1d:
46:f4:16:21:8f:3b:99:c7:c0:3a:8a:62:30:28:f0:
b6:be:0f:85:80:be:84:33:de:ef:6e:37:d9:ec:33:
cf:ee:e8:9c:c2:2d:64:25:2e:58:b9:13:d7:d6:10:
62:8a:b7:fb:22:af:d8:6b:62:d9:34:c5:e8:0b:45:
a5:62:9f:c9:6b:7b:32:f2:63:48:e3:b9:49:a5:6b:
cb:51:f2:88:14:44:4d:17:54:10:e2:fb:08:ff:a4:
71:b2:c4:d2:a3:a3:4f:b2:d2:05:c0:f1:9f:82:23:
b5:0f:81:98:75:a3:84:51:89:c2:c9:cf:23:5c:43:
29:76:e9:35:b8:18:db:9d:59:24:73:0b:f2:4f:ba:
8f:13:8c:9e:cc:e2:5b:bf:7b:63:db:80:1c:e1:27:
84:fd:db:65:a0:c1:6f:c6:cd:aa:ca:2b:7f:4c:4f:
33:65:79:ef:3e:32:2e:28:6b:e0:8e:1b:14:60:a5:
6e:66:89:70:79:00:cc:e8:a5:c1:5f:89:93:1b:bc:
ee:0e:d9:f5:f1:2d:73:46:26:8f:88:be:66:6d:00:
51:0f:2c:15:80:dd:4b:e8:24:65:70:2b:fb:40:50:
c8:f6:99:22:28:d2:b1:73:c4:6c:81:c2:3a:d9:79:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:77:2B:39:75:E3:D7:BB:1C:E0:49:D1:83:A7:B5:95:8A:4E:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P5t3Kzl149e7HOBJ0YOntZWKTqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:1c:a6:7a:d9:7c:c4:b1:89:6b:cb:22:ae:f9:ad:a0:43:44:
95:de:58:08:af:cd:ab:27:2a:2e:9b:35:fc:89:a8:9f:14:19:
4f:28:69:f7:3b:01:13:7c:4e:ad:e8:53:9b:48:14:ef:46:2c:
c3:09:81:97:14:86:20:65:fd:54:13:8b:53:ca:0b:89:fa:22:
6c:2a:99:a4:f8:c5:d6:ca:f0:92:f6:1a:b9:db:af:c8:d0:68:
a8:1b:7d:e0:f1:ef:ce:cb:75:ab:84:47:3d:1c:de:44:37:fd:
ee:8f:66:fd:6f:84:23:11:80:c7:b4:97:39:d8:e9:81:a3:ca:
5b:ab:df:3d:9f:01:fb:e5:5e:15:0b:50:8f:4c:18:d6:25:03:
50:d3:3a:b6:49:35:fa:80:fe:b4:cc:f7:fe:e8:14:18:a7:d2:
4e:b5:ba:15:01:db:c1:8f:6e:51:3a:b4:c8:3d:6a:2f:15:4d:
d8:d0:4b:39:d9:73:ee:98:1f:1c:21:75:9f:15:ba:0b:38:2f:
bb:bf:db:c2:3a:88:1f:95:a0:b3:97:1e:37:08:1e:67:4c:20:
2a:76:07:a7:aa:d0:c0:35:ab:92:3f:88:d2:d1:27:26:f1:90:
8d:77:17:ee:7d:91:f7:1b:e8:ec:e2:69:7e:41:f2:49:ac:5b:
2c:96:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:06:41 2025 by rpki-client