Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pn0CgV6_j2PqG2MI7LSfAOugWdo.roa
File: Pn0CgV6_j2PqG2MI7LSfAOugWdo.roa (raw, json)
Hash identifier: N6gL4QQpkGWUfxBUiTk9qYHo50ZJpMeqxQZvTtNk5uc=
Subject key identifier: 3E:7D:02:81:5E:BF:8F:63:EA:1B:63:08:EC:B4:9F:00:EB:A0:59:DA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B93CEA7B6A7354FD7C9A938A8788C200F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pn0CgV6_j2PqG2MI7LSfAOugWdo.roa
Signing time: Fri 03 Nov 2023 06:11:15 +0000
ROA not before: Fri 03 Nov 2023 06:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:ce:a7:b6:a7:35:4f:d7:c9:a9:38:a8:78:8c:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 06:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e7d02815ebf8f63ea1b6308ecb49f00eba059da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:7e:51:61:ed:18:1a:a7:ab:94:49:7a:a5:
c8:e0:12:38:c8:18:1b:e2:fd:b2:33:03:b6:1d:8c:
4e:0a:cf:ec:1e:ba:97:51:42:82:26:20:eb:fa:cd:
89:a0:6d:ca:a9:5d:f8:d5:79:40:8c:9a:03:e0:c7:
fc:56:4f:9a:46:a1:dd:e5:ad:52:cd:23:4c:b0:bb:
69:3c:52:82:05:15:1c:e6:21:f7:7f:9e:46:f6:92:
51:de:4a:39:04:8d:9e:40:41:d0:18:88:12:e0:2a:
a5:05:12:1d:71:9f:8a:a2:4c:0c:1b:e4:ae:fc:59:
44:4e:d5:8c:1f:3a:66:be:1f:7c:51:51:bb:2d:7d:
03:2a:93:a2:db:5b:8b:66:dd:4e:3e:52:2d:6d:cf:
9e:6d:ff:5b:c7:f3:1b:ee:a6:75:18:83:3b:cf:bb:
43:f6:07:a6:a3:43:fa:7a:7d:b0:5c:b6:40:06:3f:
e9:8c:47:6b:5d:c3:03:59:f9:ce:35:e0:10:a3:d2:
b9:20:fc:4f:04:1b:17:d7:45:f4:e1:f3:d5:ae:9f:
b2:82:ac:3e:78:e2:0c:73:87:2a:a5:0d:9a:12:e8:
91:2d:80:16:bd:94:6f:d0:78:66:89:1d:37:5e:38:
9b:b0:21:b3:31:a1:d0:5f:7c:21:3a:c6:b8:b3:3c:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:02:81:5E:BF:8F:63:EA:1B:63:08:EC:B4:9F:00:EB:A0:59:DA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pn0CgV6_j2PqG2MI7LSfAOugWdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:15:17:a5:b9:97:d6:e4:b4:09:d0:b8:81:25:9b:4b:bb:45:
2f:c9:99:3f:f8:16:2e:7f:90:24:81:c1:59:58:b3:0e:5f:d2:
d7:a5:04:5c:9f:1f:15:c1:c1:fd:7f:59:03:d1:3d:ab:86:5f:
85:e5:a8:d2:b9:f6:f9:57:6d:81:90:da:2e:6e:38:1e:ff:d4:
4f:1b:1b:ff:b2:ea:85:1f:7b:36:7f:a0:4c:6c:58:cd:9c:04:
27:cd:53:b5:a1:a0:55:05:12:c5:3c:82:bd:77:98:76:ad:0a:
db:bb:3e:91:f7:38:7f:10:be:ef:60:8b:37:38:7a:7a:e5:58:
a4:3b:84:f1:57:88:be:b2:c3:62:e5:45:5c:e0:f0:0f:d1:67:
0b:a7:b8:f1:45:78:53:81:7c:5b:3b:74:cf:f6:b0:df:e4:45:
20:26:40:c0:b6:ba:3f:a9:85:ff:1b:6a:73:68:61:11:47:2a:
de:32:5e:94:90:61:bd:4a:42:16:b4:1c:12:a7:ee:72:5e:6a:
1a:cd:44:6b:56:44:81:60:e6:3d:96:80:21:69:04:1f:c7:77:
fd:ab:e2:9b:3d:bf:31:58:2d:93:38:25:da:83:d4:3c:33:ec:
a8:0f:10:d0:1a:fd:b9:23:26:c0:44:0a:f6:c3:a1:99:7d:eb:
b6:4f:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:31 2025 by rpki-client