Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ph_-Ki8JtT65tWkc6khyuzti8XE.roa
File: Ph_-Ki8JtT65tWkc6khyuzti8XE.roa (raw, json)
Hash identifier: +4CNxUDTc9a30TLY5xrbF2giTB/D1+1LYL7c4YHifGE=
Subject key identifier: 3E:1F:FE:2A:2F:09:B5:3E:B9:B5:69:1C:EA:48:72:BB:3B:62:F1:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE7F0B080BB2C49CD92E9F88246A6EBD5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ph_-Ki8JtT65tWkc6khyuzti8XE.roa
Signing time: Sun 19 Nov 2023 14:16:32 +0000
ROA not before: Sun 19 Nov 2023 14:16:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:f0:b0:80:bb:2c:49:cd:92:e9:f8:82:46:a6:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 14:16:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e1ffe2a2f09b53eb9b5691cea4872bb3b62f171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:41:46:81:69:39:8c:f0:ca:a4:95:6a:8c:
38:3a:4e:01:bc:57:10:38:74:b9:2b:78:91:9a:25:
9e:b5:9d:7e:df:77:00:5d:c6:b3:aa:98:61:6c:48:
18:0c:5f:c6:c0:b6:cd:5a:2c:55:1c:1f:86:c5:bd:
11:12:db:ac:70:15:0e:63:b0:db:18:5a:bf:ab:71:
21:91:a1:30:bf:5d:35:cf:67:d1:95:ff:dd:87:c4:
28:5b:26:bb:0a:f0:5b:66:45:99:d7:b9:c0:2e:0b:
73:1a:3a:de:ef:4a:e6:93:1b:87:b9:aa:b3:4d:2e:
ec:10:50:34:25:b5:9f:ff:f8:e4:69:cc:37:00:19:
b9:73:28:62:4c:34:78:02:8d:d2:ce:b4:0b:f1:2e:
99:ba:df:68:b2:60:cd:61:03:a6:b2:25:5d:19:b7:
d9:7e:44:e9:14:db:f8:0e:88:48:7f:d9:17:ff:ca:
b5:08:41:83:be:13:61:ed:7d:bb:ed:d2:8b:a3:cd:
90:48:49:04:2e:d7:ff:81:67:6b:7c:64:23:6d:9d:
06:e9:92:85:26:95:8e:d3:48:3c:0a:63:38:42:d1:
a6:0c:ab:e4:c6:22:9a:69:b1:76:c7:53:6a:a9:c4:
97:89:d2:8a:0f:c9:d2:4b:a7:07:21:34:11:35:b5:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:FE:2A:2F:09:B5:3E:B9:B5:69:1C:EA:48:72:BB:3B:62:F1:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ph_-Ki8JtT65tWkc6khyuzti8XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:40:ad:ca:98:af:71:a9:82:68:9b:8f:2c:b1:5a:7f:49:ee:
23:8f:0a:6b:97:49:dd:a8:de:fd:f9:a5:39:b8:56:58:4b:3c:
f3:ea:f6:aa:4f:4e:64:e3:54:0c:95:d8:fe:77:9c:12:de:8d:
8a:8c:0b:09:73:8a:0f:da:87:70:47:60:c4:9a:85:2e:7c:f8:
0d:24:a6:53:ed:3c:1c:70:39:f8:a5:8c:a5:8f:e8:12:35:a6:
39:a4:fd:b7:3d:7a:e6:ea:1c:e1:70:4b:69:27:68:83:c2:8e:
b4:2f:f4:a2:1f:88:34:da:a0:6b:0a:8d:34:fc:3d:00:1b:b9:
15:ac:25:49:46:1e:a8:8c:4f:87:84:3a:f9:02:c3:6f:37:62:
af:84:5d:35:22:cc:35:a5:a2:53:c5:89:e7:a9:04:58:6b:3b:
62:7f:68:7b:3f:d0:fa:73:3c:55:27:0c:af:39:a4:e7:1b:93:
4e:1f:96:ce:68:15:24:0a:bc:df:54:72:f0:fa:73:72:e6:ac:
66:c3:26:55:a5:cc:6b:c0:01:3b:75:fc:6a:7d:03:99:d6:dc:
fc:6b:f0:00:66:8b:72:54:64:1f:eb:ff:37:ae:c8:20:92:4d:
e8:d0:28:87:2d:57:a3:c6:73:b6:10:56:90:39:cd:26:bd:7d:
b9:f2:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:56 2025 by rpki-client