Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PZYGGyrmi_KztdgNt1TLsUH4G7M.roa
File: PZYGGyrmi_KztdgNt1TLsUH4G7M.roa (raw, json)
Hash identifier: Lv5aazMF9qTxg0ihkRIsyNDwLEzptK5JADvgjUbCv78=
Subject key identifier: 3D:96:06:1B:2A:E6:8B:F2:B3:B5:D8:0D:B7:54:CB:B1:41:F8:1B:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C52989546A8FB35B7DDE8933575C79EDE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PZYGGyrmi_KztdgNt1TLsUH4G7M.roa
Signing time: Sun 10 Dec 2023 07:19:40 +0000
ROA not before: Sun 10 Dec 2023 07:19:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:98:95:46:a8:fb:35:b7:dd:e8:93:35:75:c7:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 07:19:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d96061b2ae68bf2b3b5d80db754cbb141f81bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:eb:fc:41:4c:eb:93:e9:55:c3:e5:ce:87:
77:83:f7:41:fc:63:54:78:35:fb:0c:21:21:5a:f3:
44:1a:be:69:11:4d:d9:11:f7:8e:e8:b0:2b:b6:5c:
dc:d3:bc:06:02:c0:77:2d:ba:ef:d7:b2:4d:1a:71:
b8:6e:d2:b7:3b:e7:f4:bc:64:2d:fc:60:f0:87:47:
55:5f:e5:0a:cb:41:5d:68:e4:63:54:cd:96:36:cf:
78:00:1c:13:a8:8e:2a:51:6e:67:58:07:06:42:38:
87:85:b5:8e:b5:1f:cb:4b:46:a6:cf:de:4f:cd:cf:
46:c7:e5:53:b6:dc:9f:67:9d:00:3f:73:c9:c3:3c:
cc:4a:0c:7a:f3:0a:fd:32:57:1e:5a:ce:4e:ac:4c:
c1:d3:5f:65:1a:53:c0:15:e3:25:aa:8a:66:e5:a3:
c2:a6:dc:f1:cf:63:e7:24:29:94:0b:22:76:d9:7e:
9f:f6:a8:67:8c:2c:2f:ff:1c:45:f3:6b:bd:2b:c8:
e7:c9:f2:48:42:24:e5:93:61:de:70:8b:bb:97:ea:
9e:a2:a9:b7:11:40:b8:cb:1b:c0:6b:f5:53:7f:97:
8f:7f:71:cb:d3:94:be:7c:45:a7:38:0f:a4:52:02:
f4:0b:94:14:ca:00:e3:35:a0:a5:40:b9:c4:08:b2:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:06:1B:2A:E6:8B:F2:B3:B5:D8:0D:B7:54:CB:B1:41:F8:1B:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PZYGGyrmi_KztdgNt1TLsUH4G7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:e6:e6:6c:36:52:b3:e6:fa:8f:04:3d:02:bd:21:a3:67:6d:
18:72:52:ae:0d:18:c5:5e:68:72:82:ec:e9:ef:e4:f1:f8:15:
68:ec:6a:37:56:00:98:ad:2c:ef:71:1f:bb:d2:71:0f:9b:9f:
94:f1:e0:80:13:29:93:49:6d:90:ac:40:fe:0b:61:84:ce:65:
06:09:85:03:00:fc:c2:26:a2:8f:2c:5c:36:c4:19:3c:2b:f8:
bf:7f:84:23:bf:aa:50:ec:94:71:09:ae:42:e7:a9:63:7d:34:
7a:29:40:36:78:74:92:33:6a:88:f3:37:0e:08:47:fe:8f:fe:
a3:69:15:be:54:94:5a:75:01:ac:80:6f:5e:44:5a:05:cc:1b:
0a:f7:a8:12:8d:42:0d:03:2b:a1:96:3d:bc:37:04:18:42:b3:
b3:f3:d4:1f:5d:1b:13:cd:8e:59:76:32:53:96:e0:58:d6:18:
a0:d3:ab:75:24:fa:28:53:ed:9a:a0:ad:95:67:35:94:74:5e:
19:d3:60:f5:90:3a:08:8e:c9:98:79:a0:d8:bb:c2:d1:b6:09:
5a:9d:53:76:aa:95:26:43:c3:07:8b:f9:82:66:ad:c3:53:38:
9b:90:52:b9:5b:dc:5d:9e:2c:54:c1:22:87:fd:b6:01:38:1d:
27:99:26:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:55 2025 by rpki-client