Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PN9tmpgGluho-XkaK8HJQXcAF8c.roa
File: PN9tmpgGluho-XkaK8HJQXcAF8c.roa (raw, json)
Hash identifier: lWGIf7VlVn8221ykeqgc6GCvOAitxa+m5WHIDOrFLRE=
Subject key identifier: 3C:DF:6D:9A:98:06:96:E8:68:F9:79:1A:2B:C1:C9:41:77:00:17:C7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C30AB9A0440513BD12FB658C6C47E9179
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PN9tmpgGluho-XkaK8HJQXcAF8c.roa
Signing time: Sun 03 Dec 2023 17:13:21 +0000
ROA not before: Sun 03 Dec 2023 17:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:ab:9a:04:40:51:3b:d1:2f:b6:58:c6:c4:7e:91:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 17:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cdf6d9a980696e868f9791a2bc1c941770017c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:a7:42:6f:36:2f:c2:2f:c5:17:91:80:14:
79:90:f4:67:c7:53:86:49:4a:ce:42:af:0a:b3:3c:
cd:f6:87:09:c1:03:57:73:92:18:32:6c:e4:60:c8:
b8:b9:40:97:dc:0d:f0:54:94:3f:3d:66:4b:73:42:
a6:05:78:ec:82:e2:23:89:1a:bc:e0:8f:35:a2:c3:
29:b4:d0:35:6f:74:97:2d:e8:bb:ad:78:1c:84:26:
3c:b3:5b:f3:13:4e:fe:1c:2d:17:59:6b:ab:41:c5:
db:49:66:6e:ad:fd:04:95:98:b1:c0:3a:f2:db:16:
a5:fe:91:bb:02:d5:92:da:d4:62:33:b5:68:b2:7b:
05:3f:46:c4:60:a4:44:7a:18:51:69:31:80:81:f8:
e3:86:86:f2:b8:44:21:d6:26:bc:e3:df:62:12:fc:
59:8b:19:df:1d:37:07:29:eb:dd:50:2a:ff:59:78:
88:21:35:7d:3b:c2:92:d6:10:84:2d:e7:93:31:89:
ad:1d:95:c0:ac:9a:78:a9:aa:8e:c4:2c:65:08:1d:
e5:4e:55:00:77:a0:91:bb:5d:19:06:a3:b5:e4:b6:
dc:fa:66:de:e0:5f:34:f6:26:43:54:75:c2:6d:f1:
c9:9b:f4:db:8f:c7:52:2f:68:bc:f7:fd:c6:90:74:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:6D:9A:98:06:96:E8:68:F9:79:1A:2B:C1:C9:41:77:00:17:C7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PN9tmpgGluho-XkaK8HJQXcAF8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:2a:df:71:7f:4c:50:8c:d2:b4:19:44:f6:8d:bc:13:7b:f0:
8a:de:5c:ca:46:41:50:0c:5f:d8:0b:2b:78:f0:15:a2:f6:15:
ee:c3:0b:03:3c:3d:a1:23:56:be:67:94:01:e0:53:c3:d9:22:
33:73:7f:bb:a7:8c:30:9d:77:bc:ae:7a:3a:35:9a:7f:ca:fa:
1e:b2:8a:1c:6b:4b:a9:24:a1:98:4a:18:b2:b2:48:ba:c3:a4:
e4:c5:f7:82:da:54:02:b7:69:b0:64:5c:b1:c5:a4:9d:46:47:
43:fa:c0:32:47:a4:dc:b4:db:6e:31:a6:50:85:10:a7:e1:aa:
34:0f:25:ca:0a:45:9f:39:86:7c:12:35:51:89:c0:cd:44:2b:
5b:ed:47:3a:c1:c7:53:96:ec:77:5d:05:45:96:5c:b4:f0:a7:
1f:93:97:a9:07:59:83:fb:ad:0b:6c:52:fe:d7:d2:fc:a5:ae:
1d:fe:ce:72:e2:42:0d:d1:8c:f2:3b:e0:93:86:e2:50:d5:61:
bb:ff:e1:ae:f5:c8:be:2a:ea:90:33:94:6a:41:5f:f4:e2:6e:
0d:dd:7b:bf:51:59:19:ee:00:72:2f:e8:05:9f:90:f6:cb:26:
d4:15:e7:bd:e2:c0:cc:2d:be:aa:17:a9:31:76:6e:49:21:fe:
e3:dd:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:24:53 2025 by rpki-client