Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pmm-15iSuM7efsKdSNdCmwIkWkE.roa
File: Pmm-15iSuM7efsKdSNdCmwIkWkE.roa (raw, json)
Hash identifier: IELNhHaJLwdy0Q3qRYomIIJHy+Fjr+LnozlOuc/2xcc=
Subject key identifier: 3E:69:BE:D7:98:92:B8:CE:DE:7E:C2:9D:48:D7:42:9B:02:24:5A:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B563DDA49938FA101D55EACDD93CCCB85
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pmm-15iSuM7efsKdSNdCmwIkWkE.roa
Signing time: Sun 22 Oct 2023 07:16:16 +0000
ROA not before: Sun 22 Oct 2023 07:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:3d:da:49:93:8f:a1:01:d5:5e:ac:dd:93:cc:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 07:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e69bed79892b8cede7ec29d48d7429b02245a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:87:54:16:81:2a:26:0e:c0:48:04:36:86:
ec:c8:d7:88:67:cc:36:84:fa:f4:16:4a:e4:48:ab:
be:dd:ed:43:2a:e7:ee:7b:48:b2:01:7b:b0:5f:7f:
d7:02:3c:72:24:1a:33:04:51:a5:d2:8f:59:f3:4b:
7f:c1:17:79:9b:45:1e:ac:a4:66:8b:1f:f6:26:45:
88:7c:0f:34:68:a5:f2:81:b7:fd:16:c4:ab:ec:8d:
ec:fd:0d:f4:92:3f:f3:1f:bd:64:96:08:19:71:25:
b7:ee:69:91:72:34:d0:cb:bd:70:d9:79:0d:23:64:
f1:67:fa:ab:da:96:64:54:ff:24:63:e6:d2:0b:85:
8f:e8:13:70:89:29:ab:10:b7:d4:83:32:25:1d:5d:
66:79:35:6f:5b:c8:6d:5a:52:cd:97:cd:37:e6:a3:
ae:34:54:f9:a6:b2:60:43:32:69:cf:5b:51:f7:e6:
6f:05:53:71:2f:40:6e:2e:2a:12:d8:e0:17:25:5d:
1f:6c:ee:55:ce:3e:be:99:fe:01:32:e8:f1:15:94:
c7:84:d7:64:f7:01:7a:a1:e7:3c:0f:d9:2a:79:6c:
ef:25:ba:c7:bc:6c:ef:58:6c:e8:2c:1e:7f:77:73:
f8:2f:6d:2b:19:06:89:7c:ec:c3:c3:f6:a6:99:99:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:BE:D7:98:92:B8:CE:DE:7E:C2:9D:48:D7:42:9B:02:24:5A:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pmm-15iSuM7efsKdSNdCmwIkWkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:89:ba:f1:5a:6b:3b:1a:4d:f6:87:0d:6f:fd:37:c3:60:52:
df:55:a3:06:ff:4f:19:85:73:36:78:48:37:5a:16:de:6e:f9:
01:db:09:1c:ec:cd:c3:a4:93:f1:bd:7f:78:1a:bb:d9:77:81:
31:7c:2d:c3:fe:83:a4:7c:63:20:de:62:3e:36:94:01:94:df:
06:25:66:56:54:90:81:46:f8:3a:f4:66:de:f2:1f:a9:a5:ca:
66:da:55:e9:34:4e:12:4b:08:25:44:02:54:79:97:d1:3d:7f:
15:fb:85:17:f3:b6:59:96:46:2f:86:31:3b:d6:d4:88:d1:f8:
76:e8:7e:80:73:fd:91:71:0b:d2:ea:39:22:01:0d:8b:72:62:
43:7d:ac:24:81:ec:9e:d1:34:a2:7d:18:ec:2d:75:82:4b:c9:
4a:62:cb:e1:18:fd:e0:92:35:4d:0e:66:17:a6:98:2f:ab:0c:
f3:cf:d2:3d:38:73:3d:ad:c2:9b:de:6e:90:f6:11:15:74:f8:
89:23:64:56:02:4a:40:72:63:f6:68:b5:68:2b:29:99:d5:ec:
7b:87:59:d4:d7:35:3f:fe:fb:88:1a:36:ec:7b:79:3f:19:d2:
50:c1:43:4d:6a:b3:15:e4:18:a4:4b:42:61:96:a8:d5:44:3a:
b2:9e:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:06:55 2025 by rpki-client