Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PilTVltIA8l7SH-v8ONWGM-CIqM.roa
File: PilTVltIA8l7SH-v8ONWGM-CIqM.roa (raw, json)
Hash identifier: IM0WbFnvgPZU9vJoPaGvj3otStkOMq7qCpd417A9Bvk=
Subject key identifier: 3E:29:53:56:5B:48:03:C9:7B:48:7F:AF:F0:E3:56:18:CF:82:22:A3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB3904080BAA1593162CD15436114F908
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PilTVltIA8l7SH-v8ONWGM-CIqM.roa
Signing time: Thu 09 Nov 2023 10:10:57 +0000
ROA not before: Thu 09 Nov 2023 10:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:90:40:80:ba:a1:59:31:62:cd:15:43:61:14:f9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 10:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e2953565b4803c97b487faff0e35618cf8222a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:3c:ec:09:a9:f6:64:dd:cf:79:21:be:ae:
93:ed:6c:84:bf:01:c7:e7:be:57:94:65:e1:1c:ed:
6d:06:fc:e9:dd:d9:45:5e:8a:96:5a:2b:69:41:5a:
21:69:78:64:ff:31:c3:51:97:25:00:cc:e5:bf:df:
c9:18:50:85:46:bf:50:71:57:fe:c3:ac:ba:01:8d:
50:ca:d6:df:25:2f:11:b5:b1:79:8a:50:51:8c:36:
c7:c6:46:27:97:29:b1:92:f3:5d:9e:71:42:58:8c:
2e:90:3f:e0:0e:1e:d5:01:64:2c:3e:ee:7a:4d:66:
a1:87:b2:aa:08:25:fb:51:9f:cf:bb:33:c3:d6:e0:
e0:c6:75:50:dd:e5:24:a0:4b:70:28:56:87:58:b9:
3c:08:f6:dd:5b:14:b5:db:13:39:3d:0f:65:43:1d:
0a:4b:a5:3d:fd:af:bf:8d:7f:c0:5d:3a:ad:ff:9f:
28:53:8b:6e:54:d2:3e:bb:bf:12:a6:57:fd:f8:5d:
12:4c:be:9b:48:ac:8b:af:af:5a:74:bc:43:5b:2c:
80:5b:d5:29:25:9b:d2:d0:6c:49:aa:4c:d8:fb:bc:
2e:c1:64:d0:7e:26:ec:55:46:22:aa:e4:b1:ee:ef:
dd:bf:31:52:dc:78:08:1f:ba:e4:c8:a6:05:9b:0d:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:53:56:5B:48:03:C9:7B:48:7F:AF:F0:E3:56:18:CF:82:22:A3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PilTVltIA8l7SH-v8ONWGM-CIqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:11:45:d1:88:b8:c2:9e:8b:c9:d9:98:cf:81:be:1d:c5:3b:
cf:b3:22:84:d0:5e:4c:ae:97:ed:3b:65:49:79:79:53:42:39:
80:6e:70:c4:fd:bb:75:73:04:96:b7:7c:93:86:2b:2b:7a:1f:
44:fc:88:d9:f9:73:b9:e2:5b:ac:65:a3:84:de:37:1a:fc:a6:
9b:b3:57:6b:fe:fd:d2:5f:9f:2c:bb:65:4a:ee:f2:b7:d8:f1:
bb:5e:de:ce:8c:92:cb:d2:3e:14:eb:08:cf:9e:89:09:c0:81:
50:9e:a9:86:d6:b6:54:94:e7:06:94:e7:e9:8d:97:c1:cc:70:
d5:c7:98:2a:ee:85:f5:7e:fb:74:13:83:76:57:0a:97:87:2c:
7e:58:e0:9e:8f:bc:33:89:a5:b1:90:ad:56:2d:89:6d:43:ec:
c8:d7:0d:f6:ec:2e:90:50:5e:f1:26:b4:c7:5e:a6:28:52:9c:
da:69:a5:ff:4a:17:8c:a7:53:57:16:d5:df:fe:05:ec:cd:91:
fb:d8:0c:6f:95:d5:95:94:e1:63:46:aa:33:bd:f4:30:1f:a5:
59:5b:90:0b:7c:b3:11:01:27:38:7f:b9:c6:d4:54:78:c7:f1:
be:32:33:92:6a:83:de:33:0f:97:07:1a:e8:6d:8c:3f:3c:90:
0b:8b:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:27 2025 by rpki-client