Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PwIuN38qegW-wSAEy0kNaEzFAPk.roa
File: PwIuN38qegW-wSAEy0kNaEzFAPk.roa (raw, json)
Hash identifier: edc+k8VIBNdQ/LgbF6sQOZpzoE8fvRYf4KGAE3+5T2M=
Subject key identifier: 3F:02:2E:37:7F:2A:7A:05:BE:C1:20:04:CB:49:0D:68:4C:C5:00:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDA2E7CD415FBAC6FD5B192F8DAF61D42
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PwIuN38qegW-wSAEy0kNaEzFAPk.roa
Signing time: Thu 16 Nov 2023 22:09:21 +0000
ROA not before: Thu 16 Nov 2023 22:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:2e:7c:d4:15:fb:ac:6f:d5:b1:92:f8:da:f6:1d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 22:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f022e377f2a7a05bec12004cb490d684cc500f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:e0:c3:ab:73:49:55:d8:29:7a:f0:f9:a6:
f2:7e:42:4e:b0:c5:fd:ff:e9:2b:70:92:3c:90:b2:
8d:52:6d:f9:f8:89:10:b1:e6:e1:6b:8e:2f:b2:e9:
d4:9d:57:dd:5e:b1:9f:1c:d4:fa:d7:cc:8d:b9:73:
55:08:c9:49:f2:af:c5:1c:0e:64:6f:e8:94:1d:25:
ac:ce:5c:af:f4:0b:41:cd:ee:da:ea:82:f6:71:07:
6d:c3:44:cb:63:20:04:ac:49:27:52:57:7d:73:c5:
4a:fa:92:48:9d:9a:9e:0f:88:eb:5f:cb:19:d8:98:
25:41:ff:e9:1c:be:7f:28:6d:7e:08:22:df:b8:ff:
d5:10:d5:21:ea:3e:9d:48:8a:02:ed:9c:10:36:c7:
02:74:1b:3c:29:7a:43:0d:7e:6e:ef:b2:df:55:d6:
d5:90:72:c9:02:83:1f:1c:62:85:43:5f:ff:88:c2:
ee:6b:56:a1:0d:e9:73:63:b2:a8:b6:19:25:fd:87:
2c:8a:44:52:1a:ae:76:a9:80:1e:9a:5a:1f:20:64:
ae:eb:af:33:54:77:10:b6:e5:97:03:28:4c:64:3a:
bb:a4:94:65:bd:66:eb:5e:49:7b:6e:47:57:1d:b9:
af:49:03:0f:53:8e:1a:cd:01:1f:9c:73:2b:5c:c1:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:2E:37:7F:2A:7A:05:BE:C1:20:04:CB:49:0D:68:4C:C5:00:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PwIuN38qegW-wSAEy0kNaEzFAPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:f5:b4:cf:e4:78:da:fb:d1:dc:b3:da:71:a6:4e:b6:23:50:
c4:22:a6:b4:e1:c2:b8:55:39:20:cf:18:bb:d5:0f:f8:21:d6:
a1:3b:01:4f:53:75:8d:34:e0:3a:31:f6:f0:33:39:a5:4c:fe:
5e:ca:c4:c9:52:dc:2e:af:3f:05:87:57:5a:3c:ac:2d:43:9f:
0b:c8:e4:82:40:b6:c6:7a:e5:3a:79:87:d8:2c:74:7f:28:1a:
64:2e:53:e0:29:ac:4a:00:4e:f2:b8:9a:28:0a:83:15:2b:95:
a7:08:fc:ef:20:97:94:4a:4e:fa:4e:f1:f7:8b:9a:a0:23:64:
f0:6a:2c:73:38:4c:81:65:12:95:c1:d0:c1:6d:6d:58:98:b3:
c5:e7:98:a0:c8:66:ef:e9:9c:74:62:9a:a8:77:0a:30:6a:01:
b3:a1:11:93:7f:0f:eb:70:96:31:37:0e:80:32:ab:fe:c8:86:
ab:d1:d4:ef:fd:9f:24:bc:a2:3c:b0:a9:9b:dc:91:43:bc:8f:
6b:9e:1e:0b:c1:dd:da:a1:56:d4:41:c9:ed:76:58:17:a5:51:
7b:78:d1:ab:8c:04:f4:fe:c8:31:15:54:66:97:fc:2b:96:c4:
07:44:ee:dc:51:b6:4c:05:08:97:95:95:41:03:26:7a:37:71:
ef:e0:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:19:42 2025 by rpki-client