Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pciui7wm_m2hM9ZgfqVrtM0SnGU.roa
File: Pciui7wm_m2hM9ZgfqVrtM0SnGU.roa (raw, json)
Hash identifier: P/ReJLRBp6T5LG9ObVw41dCcLP4RdJqKtKr2/zebQ+c=
Subject key identifier: 3D:C8:AE:8B:BC:26:FE:6D:A1:33:D6:60:7E:A5:6B:B4:CD:12:9C:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE220C9C75A25C390E0EF5EB74433C855
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pciui7wm_m2hM9ZgfqVrtM0SnGU.roa
Signing time: Sat 18 Nov 2023 11:11:21 +0000
ROA not before: Sat 18 Nov 2023 11:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:20:c9:c7:5a:25:c3:90:e0:ef:5e:b7:44:33:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 11:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc8ae8bbc26fe6da133d6607ea56bb4cd129c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:02:f0:d1:26:15:d5:f3:a6:ee:3a:ad:0d:
21:ac:49:e5:d6:e8:55:3a:43:dd:7e:41:c7:ff:13:
44:1e:ae:40:99:83:7e:69:c0:e7:5d:ab:37:83:b0:
40:cb:79:d7:1e:ab:88:d7:44:09:84:8a:7a:9e:09:
b6:28:53:6b:1f:f9:7d:cf:34:a3:20:4a:03:ec:bb:
a8:f1:79:a7:c2:35:80:c3:21:76:22:84:06:94:3d:
17:f0:9a:54:1f:ca:7d:f9:50:52:58:b8:a4:61:8b:
09:27:08:b3:5e:f5:7b:a3:80:7a:3f:54:12:44:c3:
08:b0:70:40:3d:c3:b0:25:f4:2d:32:ab:bd:d4:63:
a2:a8:a8:8e:b1:17:2c:32:dd:2c:59:10:fb:bb:1f:
f3:fa:d0:e6:1a:b4:ac:8f:94:13:ec:3f:17:02:af:
67:dd:c9:24:4f:13:0f:d7:2c:c8:5a:36:91:f5:cf:
82:c5:f0:97:fa:64:c5:1a:d0:90:1c:6b:86:cb:83:
49:55:61:c8:88:fb:0c:56:66:31:c1:36:5e:d0:a1:
dc:ab:f0:28:6d:f4:4a:07:26:0e:1b:1f:d2:cd:a1:
bc:51:28:73:81:8e:d4:a1:03:7a:c0:cf:8a:c9:93:
1a:3b:da:ab:90:2c:93:f0:da:b1:c2:38:e4:b4:d2:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:AE:8B:BC:26:FE:6D:A1:33:D6:60:7E:A5:6B:B4:CD:12:9C:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pciui7wm_m2hM9ZgfqVrtM0SnGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cf:56:3c:c2:94:3e:f4:78:df:c9:23:5e:81:0b:85:05:cd:21:
86:ef:7a:74:ed:97:f3:93:09:d7:eb:f7:2b:2f:3b:0b:3b:98:
2d:5c:d6:e7:9b:a6:bd:68:de:8d:fd:14:ec:20:f5:e1:1c:8f:
d1:f9:fc:72:99:b7:bc:a2:a3:07:95:0b:c8:8b:38:78:78:52:
22:e0:b0:28:f9:32:ac:69:61:70:ca:85:2f:16:32:02:dd:fd:
a3:05:63:8e:24:a6:88:ac:7a:87:d9:d7:93:b5:fe:9e:e7:c4:
53:21:a6:a9:38:8b:b6:5d:47:71:58:72:27:4b:c8:27:37:97:
7a:a8:ff:e1:12:1f:cc:0f:75:cf:89:84:77:d7:a5:96:0d:9a:
7f:c3:46:60:25:ca:55:54:0c:4d:c2:77:98:3b:3b:d6:5a:cd:
fd:ac:3d:be:d8:71:f4:ec:0b:43:b2:2e:e3:4a:48:a1:21:5c:
2c:d1:1f:90:27:68:02:9d:79:63:4c:b2:50:23:a8:bc:60:3c:
0e:1a:ca:07:b1:63:b3:c1:2a:49:39:6d:8d:c5:83:b5:81:cd:
9f:03:94:eb:ce:5e:14:e9:ce:44:03:68:3e:6f:2b:2e:0d:31:
9e:64:a8:08:b5:af:9f:6f:fb:86:75:04:ba:f9:7e:70:8b:8f:
82:44:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:23 2025 by rpki-client