Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PdQsiET8i8KRkyu-JV2GywzFvbU.roa
File: PdQsiET8i8KRkyu-JV2GywzFvbU.roa (raw, json)
Hash identifier: thsXIgsq1/R3rzUuPynr/uXQohG51RvH7enR+5a0Yhk=
Subject key identifier: 3D:D4:2C:88:44:FC:8B:C2:91:93:2B:BE:25:5D:86:CB:0C:C5:BD:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB3FF08318DEC2C9460015AE93928AF8E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PdQsiET8i8KRkyu-JV2GywzFvbU.roa
Signing time: Thu 09 Nov 2023 12:11:57 +0000
ROA not before: Thu 09 Nov 2023 12:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:ff:08:31:8d:ec:2c:94:60:01:5a:e9:39:28:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 12:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dd42c8844fc8bc291932bbe255d86cb0cc5bdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f7:f1:ee:3e:a0:54:ca:05:be:99:43:2c:3e:
fa:91:70:a6:8f:6a:38:65:d3:1e:79:d8:66:cb:e6:
fe:c7:94:21:77:df:e5:3e:6d:73:88:96:ed:4c:30:
d1:e4:42:c7:d3:0b:27:75:20:f0:ac:1a:c9:e4:3e:
e5:47:fa:ae:3e:96:23:64:45:53:6a:7a:c9:ce:15:
32:99:99:23:15:e6:c5:c9:7c:89:a8:9e:12:e1:65:
06:5f:37:d3:f0:08:1f:25:13:59:b2:a3:77:96:e5:
24:b5:c3:89:e6:86:a8:f6:19:d9:62:7a:ea:11:14:
22:a0:69:de:50:84:7c:a9:04:d7:ef:db:23:d8:b0:
89:26:98:be:98:66:28:ac:7e:5f:66:89:dc:28:f1:
38:82:1c:67:bd:cc:35:c0:dc:85:9c:f7:d8:22:bf:
b6:6f:0a:1f:5a:9c:bb:ea:d1:bd:fd:07:c4:b8:1d:
1a:03:5e:f6:a3:27:36:79:bb:3b:c2:2a:68:65:ef:
38:d5:08:91:74:6e:8d:18:b5:68:12:76:3b:41:71:
02:38:50:95:f6:ea:67:12:db:e9:f8:d9:3f:5f:a0:
c8:e0:23:a3:db:0e:d9:72:0a:46:40:bb:16:56:ea:
9f:7f:56:a7:b3:ef:30:8b:d6:e0:f4:4d:32:d6:2f:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D4:2C:88:44:FC:8B:C2:91:93:2B:BE:25:5D:86:CB:0C:C5:BD:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PdQsiET8i8KRkyu-JV2GywzFvbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:89:3d:66:6d:87:ca:44:15:03:d5:63:17:60:27:0b:1f:4a:
d3:9b:6a:a1:e8:ba:e0:a4:a3:62:53:0c:93:c9:12:a2:0b:e2:
7c:0c:5f:b7:b0:9b:49:54:bd:56:3e:78:f7:72:aa:5b:4c:15:
90:4e:0a:56:93:f9:8a:82:d7:9f:d8:da:7f:d7:54:04:c2:40:
98:7f:52:c5:f9:cb:60:c7:c7:54:5b:71:0c:0d:f8:cf:b9:8c:
9f:40:86:ff:57:ba:60:fc:b4:df:68:0f:63:a6:1a:2d:a5:51:
0e:cf:3b:46:a1:16:a5:0c:73:8f:ef:d6:45:91:15:7a:0d:5b:
0f:16:94:49:da:24:d2:6e:39:cb:97:b3:8a:8d:eb:39:0e:ae:
57:81:0a:ee:9c:c6:04:8f:e1:85:cc:82:6c:3d:d3:7d:0f:af:
fe:92:e7:25:9b:b4:c4:fc:47:b5:0f:ad:57:08:8e:ba:89:08:
49:66:17:01:ef:e2:23:b9:11:4d:13:28:21:66:eb:27:5c:f6:
73:84:b8:65:56:b3:41:0d:ad:20:ce:ca:7c:62:6a:82:d1:f7:
f4:48:ae:a3:97:73:3f:74:d5:74:9a:a5:28:47:a8:a2:c3:e8:
de:4d:3d:2b:61:50:27:0c:75:e0:b3:48:8c:48:1a:69:76:54:
92:39:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:01 2025 by rpki-client