Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PEu602e8vgNpc3G8_wZHoOEQVz8.roa
File: PEu602e8vgNpc3G8_wZHoOEQVz8.roa (raw, json)
Hash identifier: 0baUKtYxRDcIoY2yApSsXimFwOxJBmwuCtQFf4Tr2GM=
Subject key identifier: 3C:4B:BA:D3:67:BC:BE:03:69:73:71:BC:FF:06:47:A0:E1:10:57:3F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C815C68B676ADB2B0B752F1EE26F9C22D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PEu602e8vgNpc3G8_wZHoOEQVz8.roa
Signing time: Tue 19 Dec 2023 09:16:06 +0000
ROA not before: Tue 19 Dec 2023 09:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:5c:68:b6:76:ad:b2:b0:b7:52:f1:ee:26:f9:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 09:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c4bbad367bcbe03697371bcff0647a0e110573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:9c:18:f6:30:85:ab:88:4b:19:5f:6f:8e:
44:ba:ae:ad:a7:65:b1:c4:2e:a4:14:88:06:91:e0:
de:b0:21:9c:29:29:03:9f:85:35:1c:a7:1c:13:3d:
9b:06:42:a8:98:1b:df:34:cc:d4:9d:34:e0:b0:cb:
ac:66:41:1f:56:17:56:c3:2a:8e:aa:2d:1f:8c:bd:
53:ab:ee:25:74:fe:c5:c3:84:4d:d6:20:8d:92:11:
36:9f:ec:07:bc:43:d7:c7:03:14:53:30:b5:d8:23:
c6:68:d3:05:48:4b:39:64:41:9d:f2:0d:5d:61:1d:
49:38:14:f8:9b:8d:d2:02:43:a4:92:04:0f:66:bf:
03:22:ad:18:1d:8c:ff:53:75:99:89:f0:5b:ca:20:
5a:d5:3d:93:bb:43:a0:0e:5d:e2:7a:4b:b0:a9:e9:
97:a2:df:56:68:0f:29:3f:6a:e7:c1:b3:6c:e5:78:
a8:a2:75:23:ae:a4:b7:19:d5:81:fa:36:5f:67:ab:
98:d7:b5:b8:7b:ce:36:ae:10:37:21:d9:f8:2f:b5:
81:1d:f0:01:98:0f:2a:27:37:d7:f4:31:4e:03:8e:
fd:ea:bd:b7:88:9a:6e:dc:bf:c8:66:aa:97:c3:fb:
8d:bd:fa:5e:5c:d5:7e:e6:b1:05:18:ba:8f:56:dc:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:BA:D3:67:BC:BE:03:69:73:71:BC:FF:06:47:A0:E1:10:57:3F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PEu602e8vgNpc3G8_wZHoOEQVz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:5a:69:00:12:47:f4:51:1c:27:4c:4e:fb:74:5c:dc:54:8e:
32:e9:d4:6c:19:84:0d:0a:b7:62:03:2c:21:ee:d2:7a:9f:59:
c9:f7:4c:d5:34:4c:44:22:91:b6:54:56:33:64:bb:d3:97:48:
90:83:a6:79:20:f0:11:da:1c:26:61:89:9a:29:25:22:e1:ae:
3c:fa:10:3f:59:c3:8f:e5:a1:ff:45:ce:ad:4c:f1:bb:a9:da:
1a:68:ab:08:8e:5c:58:d9:e3:d3:3a:83:f5:ef:71:ce:6d:e1:
6c:a9:69:98:36:0d:9c:6a:7d:22:a3:da:8d:ef:62:3c:d2:83:
d3:65:2d:ed:0f:8a:9a:ea:be:3e:d0:25:6c:f2:db:c9:e4:9e:
72:d2:b4:e7:84:db:89:10:64:39:14:a7:eb:f7:95:af:d7:b3:
01:8b:2b:05:53:42:96:a1:d2:00:35:1a:26:07:5a:97:7e:27:
bf:5e:8e:56:9a:ac:e9:7e:f0:b2:7e:3d:2c:e0:e7:eb:e4:cf:
83:d6:0f:15:3c:89:72:53:c7:1f:5b:e3:a0:a2:4b:87:2a:63:
86:c3:46:01:06:81:1f:75:1d:2f:31:78:ea:87:88:c5:c2:6b:
e5:34:6e:e0:09:14:43:23:7e:03:a1:d3:9a:05:05:1d:e9:be:
24:8f:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:39 2025 by rpki-client