Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PTHYxODOg88wB9PuJ27LS_QmUTI.roa
File: PTHYxODOg88wB9PuJ27LS_QmUTI.roa (raw, json)
Hash identifier: 2FOEwwbTuzM6kGH0fd017kRh2C1LkPSz5Ui3EHwh5sg=
Subject key identifier: 3D:31:D8:C4:E0:CE:83:CF:30:07:D3:EE:27:6E:CB:4B:F4:26:51:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFA9B04B437F0A31AB6E78A8B8E39E8CF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PTHYxODOg88wB9PuJ27LS_QmUTI.roa
Signing time: Wed 04 Oct 2023 12:12:57 +0000
ROA not before: Wed 04 Oct 2023 12:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:9b:04:b4:37:f0:a3:1a:b6:e7:8a:8b:8e:39:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 12:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d31d8c4e0ce83cf3007d3ee276ecb4bf4265132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:3b:cf:83:af:34:a1:8a:00:b1:c6:17:60:
6e:8f:12:f2:4e:4f:95:1a:48:8e:70:ad:6e:ce:35:
5c:3f:47:0d:ff:3a:dd:41:ef:d3:a4:25:0a:98:48:
30:31:76:4a:d5:6e:cc:d2:33:bb:a8:79:bf:90:c3:
5a:ee:c6:01:05:e3:6e:aa:0d:73:9b:57:a0:68:fd:
65:64:e5:1f:bd:15:1b:62:88:55:09:f3:ca:36:ff:
d6:d4:84:a6:62:95:6e:5e:d0:86:62:b5:37:d3:9b:
a5:bc:76:c3:0f:88:ea:1c:e6:33:17:5a:29:32:47:
b3:60:97:e2:8a:c9:ea:14:11:00:98:3d:45:6f:95:
9c:95:a9:23:a1:77:18:c3:ce:b5:0a:89:d0:18:91:
a8:80:e7:40:c9:44:a2:74:c5:96:8d:0d:55:1a:8f:
a0:38:d4:c0:9a:cc:fd:d8:ff:c7:96:ba:10:0e:c9:
60:3d:e3:3d:4d:fc:e1:24:5d:55:97:20:31:8d:35:
a1:6e:a0:a1:3a:a6:bb:01:12:8d:9e:3f:e1:48:49:
2c:0b:a4:d1:5f:50:7f:fa:e8:f8:b2:86:26:9e:06:
55:97:41:ca:df:0b:0d:f6:8c:9d:45:3b:93:8e:9f:
8e:7b:1a:22:8b:de:70:6d:50:96:75:de:3c:b2:fd:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:D8:C4:E0:CE:83:CF:30:07:D3:EE:27:6E:CB:4B:F4:26:51:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PTHYxODOg88wB9PuJ27LS_QmUTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:86:2d:26:09:0e:b5:5a:64:e6:f8:55:3f:0c:90:96:b7:a6:
3b:ba:df:f4:36:e9:e1:2b:c5:6d:a1:a3:05:b8:34:23:44:80:
11:84:1c:02:87:a6:1d:20:c0:e0:3e:60:d9:03:ab:f2:05:92:
20:80:c3:0d:c9:cd:cb:18:b7:29:46:19:4d:26:23:1c:96:7c:
26:29:d1:44:e6:2a:b5:61:69:64:0c:15:8a:0d:0d:65:55:29:
ca:32:b2:87:bb:52:9f:85:f1:6d:39:82:04:56:f2:45:8d:c2:
72:37:af:97:a1:f8:6e:8f:73:ad:f6:86:9c:c8:e7:e4:1e:c8:
80:49:30:8f:25:66:6f:49:74:14:d8:12:f8:cf:67:ad:65:ac:
dc:93:03:1a:dd:4b:bb:40:e8:68:49:3e:29:4e:15:46:6e:8e:
3b:26:7f:f8:19:99:7f:d1:91:6c:18:b5:49:46:3d:48:9e:59:
91:b5:23:9d:64:56:22:db:c2:06:49:75:95:0a:d8:5b:03:73:
36:e4:1a:71:d8:48:8c:70:e4:f0:0a:d0:04:4d:6e:ca:6c:67:
2d:fa:6f:6a:5f:ea:56:32:3c:12:3a:31:80:1c:d5:b5:c4:32:
94:91:1f:26:e6:34:07:a9:19:b8:a3:20:b8:21:00:e0:50:51:
2f:c2:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:17 2025 by rpki-client