Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PVkVRdy1CbYrdwti6h1KgjVQI0g.roa
File: PVkVRdy1CbYrdwti6h1KgjVQI0g.roa (raw, json)
Hash identifier: tHiZvgvakfBAe95CqfGDS3Au98sCB56bHRuu1I9xEQE=
Subject key identifier: 3D:59:15:45:DC:B5:09:B6:2B:77:0B:62:EA:1D:4A:82:35:50:23:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBA6892BC26788505C8E6A335129C708F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PVkVRdy1CbYrdwti6h1KgjVQI0g.roa
Signing time: Fri 10 Nov 2023 18:04:57 +0000
ROA not before: Fri 10 Nov 2023 18:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:ba68:1d9d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:68:92:bc:26:78:85:05:c8:e6:a3:35:12:9c:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 18:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d591545dcb509b62b770b62ea1d4a8235502348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:03:6a:e9:0d:4f:e6:96:94:8f:8c:93:b4:
d4:e5:cb:f8:47:dc:42:bf:6d:dd:66:e6:d8:63:70:
d5:a1:44:61:24:b9:6c:6c:a8:c0:f9:52:bb:60:ca:
15:35:ea:8f:27:c9:97:93:43:29:20:9f:18:c5:87:
c9:78:3e:31:f6:3a:99:e7:06:37:ed:eb:0c:ba:93:
39:d4:e0:e6:15:5d:61:60:3f:18:8d:f5:59:80:f8:
f8:f9:1a:b5:6f:04:87:1a:36:bb:a8:20:0f:94:26:
c8:47:8e:f8:a0:6e:ec:27:ec:fe:56:34:e9:2a:b6:
fd:b7:4e:af:12:ff:42:70:95:7e:cb:71:47:05:05:
ea:a5:39:ad:6c:b7:4a:ce:03:05:7d:7a:56:58:1c:
d8:22:28:f1:9b:36:99:f3:f2:42:01:97:00:b3:ec:
3e:7c:9d:8b:63:f2:26:07:b4:0e:bc:c7:25:30:bc:
5c:00:4a:21:f9:b6:63:bc:36:43:ab:5d:aa:77:8c:
fb:af:ce:ad:1c:63:0e:be:27:67:4a:ca:c4:cc:a2:
c0:97:12:44:da:b0:40:3a:94:16:64:2a:9c:57:93:
4c:cb:63:be:c4:39:94:e3:ad:63:53:90:44:92:9a:
c7:01:e3:12:a6:24:fe:eb:f3:8b:3a:34:d9:b1:5d:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:15:45:DC:B5:09:B6:2B:77:0B:62:EA:1D:4A:82:35:50:23:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PVkVRdy1CbYrdwti6h1KgjVQI0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:ea:f1:f1:cd:46:b3:d4:98:76:20:c9:86:cc:9f:49:ab:28:
a9:f9:8c:86:1e:d3:b2:d0:aa:8d:78:75:a0:64:0f:d0:fe:4f:
db:fb:e5:de:97:ae:a3:e6:84:bb:19:2e:27:f5:57:d6:f9:40:
52:5e:71:e7:8a:60:6c:ed:24:47:cd:91:d1:12:9c:51:02:6c:
2d:c6:c1:7e:bb:7c:09:b2:a2:bd:8c:e4:55:b1:e2:c7:9c:ad:
a8:a3:c5:05:81:c6:74:fc:6b:71:ad:b1:37:58:d4:e2:10:bb:
44:c1:46:87:b1:fa:0c:f4:8b:34:3b:1e:89:8c:4c:72:e6:81:
86:5e:45:be:cd:7c:a2:5f:fa:7f:e0:ce:cc:70:f9:34:4c:1e:
2a:72:e2:1e:80:60:8e:bf:4c:68:0e:6d:d5:4c:5e:66:7c:8a:
39:ef:e5:39:e3:29:b7:f5:0e:bf:b4:64:02:0a:23:36:a0:70:
a4:8d:e0:d6:bc:4d:8c:fc:b3:c1:09:96:51:b6:bd:18:03:3f:
9d:cc:10:a4:b2:c6:95:99:54:0d:56:9d:c7:8b:b7:53:12:f2:
e3:f2:73:ef:d6:98:ae:ed:56:4c:21:8d:22:1a:fe:52:09:fd:
88:a5:88:10:ea:77:4a:25:ac:51:f5:a2:49:6c:3a:a0:52:1a:
ae:f3:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:48 2025 by rpki-client