Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6BLny155cylShSKEatMN59ntVc.roa
File: P6BLny155cylShSKEatMN59ntVc.roa (raw, json)
Hash identifier: cVvmj36ERgb5fDBMmCCbO3RUeeJejjLL0xlpMo4q0rU=
Subject key identifier: 3F:A0:4B:9F:2D:79:E5:CC:A5:4A:14:8A:11:AB:4C:37:9F:67:B5:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB0CD2989F1990CBDCC826AFA2EE328E7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6BLny155cylShSKEatMN59ntVc.roa
Signing time: Wed 20 Sep 2023 04:15:50 +0000
ROA not before: Wed 20 Sep 2023 04:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b0:cd:29:89:f1:99:0c:bd:cc:82:6a:fa:2e:e3:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 04:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa04b9f2d79e5cca54a148a11ab4c379f67b557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:c8:70:02:04:ea:8b:89:32:e1:2c:11:ef:
65:7f:23:4e:95:18:4d:06:b3:e8:bd:99:8b:ca:5e:
03:c4:4d:7a:66:ab:fb:a8:d7:45:24:0c:c5:8a:bb:
ce:02:5f:a9:b6:b0:10:5e:9d:fe:ea:46:47:da:31:
ae:9b:98:4a:22:89:29:37:46:a6:01:85:f2:7a:c9:
07:ab:4e:8d:cf:2c:99:f5:1d:b0:d7:82:bc:25:c3:
55:ec:52:1e:a7:78:6c:89:d7:43:6f:67:86:05:1d:
c0:41:97:37:90:f8:9f:c0:fd:fc:f4:61:af:50:cf:
c0:22:30:eb:42:13:46:ae:28:2e:d6:e4:27:1a:19:
ad:1d:18:da:2a:b4:50:e9:a5:d2:33:7c:9d:92:22:
96:62:c8:e4:12:e5:c1:3d:05:f8:fe:c2:28:a6:f2:
33:5b:29:0f:4f:5c:7a:be:aa:9e:7b:74:bb:15:83:
d1:3c:06:59:c4:4b:1f:74:00:26:28:57:ac:ba:16:
80:db:55:61:27:30:d2:26:d8:45:ef:ca:67:17:7b:
8c:f0:5a:3d:ba:b9:55:b2:b4:06:ac:78:51:e7:60:
7a:ba:87:5a:56:50:84:68:1c:20:44:f3:ce:32:f9:
2e:2d:68:f8:22:a3:d9:1a:55:7a:c8:2c:b2:d5:ec:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:4B:9F:2D:79:E5:CC:A5:4A:14:8A:11:AB:4C:37:9F:67:B5:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6BLny155cylShSKEatMN59ntVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:e3:dc:64:a9:51:4c:af:41:28:f2:38:07:f0:ba:1c:ff:13:
32:42:5a:e2:fa:76:f2:69:1c:ac:e7:d4:a5:90:3f:20:63:16:
12:88:41:79:37:4a:b0:05:0a:34:80:a0:ac:66:ab:6b:f4:4b:
ec:86:83:e9:ab:02:b6:d9:fd:4f:55:e0:96:47:56:1c:f7:0a:
bf:9d:23:75:c2:66:9d:30:24:a4:22:d4:f1:fa:bf:8c:e5:3e:
83:47:e0:d8:ce:f5:16:48:5d:57:4c:fb:a5:7f:40:a2:c3:2b:
ab:64:3c:fd:b6:e2:ce:7b:75:89:c7:45:dd:06:f9:af:9f:4d:
a6:e5:ef:0b:fe:ae:7c:9e:e0:e2:81:6c:ab:9c:42:c4:a8:2f:
58:0d:85:26:3e:e1:2b:4e:b8:23:42:cc:76:1c:2c:75:26:c6:
0a:fc:ea:ce:e1:d0:5d:bb:35:17:f5:6f:92:a9:e4:08:16:af:
49:28:8d:78:44:d6:9b:19:97:05:c9:2d:e3:43:3d:38:dd:17:
eb:52:cd:85:31:70:6a:47:fc:15:c7:d5:ed:97:63:2a:dd:e8:
8e:40:00:15:af:13:d1:37:f1:01:be:05:92:ee:c4:33:91:9f:
c1:51:70:14:d0:83:91:06:72:7d:3b:22:a0:5d:8c:e1:15:ba:
39:9c:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:29 2025 by rpki-client