Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PJq8X7GvUuhu5izwwttVWcb9F3w.roa
File: PJq8X7GvUuhu5izwwttVWcb9F3w.roa (raw, json)
Hash identifier: HGkEw/LeyY5SMPKkIGFDFxrVnF7k50htgvyoqm1JYhM=
Subject key identifier: 3C:9A:BC:5F:B1:AF:52:E8:6E:E6:2C:F0:C2:DB:55:59:C6:FD:17:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3679D4C2A07229B85A35C707FD751C68
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PJq8X7GvUuhu5izwwttVWcb9F3w.roa
Signing time: Mon 16 Oct 2023 03:13:55 +0000
ROA not before: Mon 16 Oct 2023 03:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:79:d4:c2:a0:72:29:b8:5a:35:c7:07:fd:75:1c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 03:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c9abc5fb1af52e86ee62cf0c2db5559c6fd177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:dd:13:2c:03:e1:44:0a:18:94:67:17:03:
c4:9a:f6:0a:e6:65:7d:1f:d1:b8:5b:bd:85:3e:2a:
a3:f8:f0:84:8c:92:38:b4:ef:3a:c3:bc:ca:41:33:
56:4e:8c:89:1f:b9:81:32:84:09:dc:29:67:15:f7:
3e:18:c6:8d:51:d8:5e:66:b7:29:d8:0f:2b:d5:99:
62:bf:6f:32:7a:40:90:81:a3:0f:c2:41:7a:20:59:
27:d3:0a:94:c6:96:56:b6:14:8e:27:6e:f2:6e:a3:
d2:ec:27:73:e4:f6:2c:4e:21:fd:75:34:40:6e:47:
01:a5:74:8d:48:fa:3e:eb:2e:b2:ec:49:37:f0:0a:
aa:6d:7f:b7:46:f6:eb:69:fa:65:05:5f:51:c3:5d:
79:d2:d8:ea:c3:0a:dc:8e:91:c0:8f:62:29:13:b4:
e8:30:a0:ce:be:27:de:69:cd:91:ee:99:93:06:12:
0c:31:6d:61:5e:4a:e8:eb:7b:a2:05:6c:86:75:6d:
67:1b:a9:e5:aa:ef:3e:ab:5c:41:1f:26:f1:65:d4:
a0:3e:0d:d0:1c:0a:42:83:2e:61:cb:34:4b:d9:ca:
37:7f:e5:cd:fc:2b:89:4a:74:7b:ce:95:b9:62:73:
ee:07:67:f6:48:54:ae:e0:43:a5:aa:f4:83:19:45:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:BC:5F:B1:AF:52:E8:6E:E6:2C:F0:C2:DB:55:59:C6:FD:17:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PJq8X7GvUuhu5izwwttVWcb9F3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:55:91:75:01:ee:84:6f:1c:4b:49:60:19:b7:f2:63:be:5a:
07:0a:d0:0f:9b:66:2c:7c:af:93:c4:81:5c:a9:f1:8f:35:59:
11:80:76:35:13:99:a1:56:d6:84:9c:b4:4c:bd:80:19:56:69:
0f:91:67:9c:a5:e5:c2:4d:e1:b2:a4:05:82:c9:51:8b:4a:3b:
ce:05:94:f6:28:33:be:0c:cc:ed:6c:d7:ac:c3:1d:89:c7:a3:
69:13:3d:0b:09:15:f2:86:91:05:c9:ea:61:4f:25:e6:25:60:
a5:ff:33:d1:d4:60:0f:e8:28:2c:5c:d6:10:e4:af:f0:17:52:
90:89:36:c6:01:e9:fb:9e:29:0c:2c:30:4a:aa:17:eb:66:62:
3b:e1:2b:cb:dd:10:3e:01:81:75:f6:7c:b7:04:ac:af:d4:e5:
7b:2f:4f:d6:00:6c:18:08:25:6c:6a:60:00:19:44:a9:25:28:
6b:0c:74:db:43:c6:2f:0f:d9:3f:f8:09:ef:3a:e6:3e:f6:af:
7d:c0:ee:e1:b3:45:c6:ce:85:21:dc:d5:58:d9:9e:bb:03:40:
a8:37:74:98:ce:6a:0f:db:d5:9e:c2:6b:d0:67:29:dd:27:ff:
19:3b:82:a9:8a:b3:3f:3e:12:a7:24:79:e2:5c:ac:33:68:ea:
c0:9e:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:10 2025 by rpki-client