Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PxuxoLvj_c26YvFKLSL18VWKE-g.roa
File: PxuxoLvj_c26YvFKLSL18VWKE-g.roa (raw, json)
Hash identifier: e9ueVQEvDQLOZZ4KK6jKBI7xBf2SLyvyk8OHe/BpAE4=
Subject key identifier: 3F:1B:B1:A0:BB:E3:FD:CD:BA:62:F1:4A:2D:22:F5:F1:55:8A:13:E8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDDD4530E88CDD54A049B1953ED72187C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PxuxoLvj_c26YvFKLSL18VWKE-g.roa
Signing time: Fri 17 Nov 2023 15:09:21 +0000
ROA not before: Fri 17 Nov 2023 15:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:d4:53:0e:88:cd:d5:4a:04:9b:19:53:ed:72:18:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 15:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f1bb1a0bbe3fdcdba62f14a2d22f5f1558a13e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:0e:a7:e8:84:e5:5d:5c:79:2e:43:1d:1f:
55:ed:4d:6d:00:3b:11:63:0a:f3:cb:de:df:05:de:
44:ec:f4:d7:77:a8:83:07:bd:99:5f:61:88:ad:1a:
e8:22:e2:c7:39:da:a3:57:b7:f5:da:c5:81:d2:b1:
ef:47:f5:84:db:ec:a6:f9:0a:52:ca:10:fa:be:5b:
4a:c8:23:b1:db:a8:51:5b:8a:00:cb:f1:54:95:bd:
db:4f:ec:0f:b8:58:84:8c:69:77:34:64:06:20:7b:
98:f0:b0:40:3c:88:da:ee:84:dd:a2:a3:63:b1:8a:
6c:69:cf:43:92:bf:88:71:6e:26:6d:84:e5:49:c1:
10:cb:8d:96:b3:55:5b:9f:23:1c:2a:4c:cf:b5:3b:
33:ae:fc:2e:bc:5a:cc:43:5c:b4:04:d2:98:7b:34:
fc:79:1d:e1:9c:e3:80:93:2b:15:c9:69:0b:cf:e4:
5e:d0:5d:6f:3b:d2:9a:36:5f:72:db:78:4a:71:33:
e4:fc:30:95:00:15:04:79:92:b8:b9:8d:d3:31:59:
e9:b4:62:a3:a6:23:0b:c5:2f:00:82:4a:3a:df:b2:
78:1e:99:65:67:52:9f:12:dc:d2:cd:68:d6:89:27:
88:78:9c:8b:dd:36:a2:57:e1:b3:c0:33:c0:f1:45:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:B1:A0:BB:E3:FD:CD:BA:62:F1:4A:2D:22:F5:F1:55:8A:13:E8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PxuxoLvj_c26YvFKLSL18VWKE-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:11:a0:5e:6f:3c:ab:d2:1a:b4:17:6e:4f:9e:cb:13:8a:d3:
1c:eb:6a:7d:a9:3f:06:28:87:52:40:23:75:43:63:1c:97:f8:
1e:0a:88:d6:d8:0e:fc:9d:62:0f:ba:ef:29:44:62:a8:04:61:
65:ae:97:c8:ba:d3:92:76:cf:82:1c:9a:d6:c6:c6:10:eb:92:
0e:bd:a4:3a:73:11:c7:f3:5b:91:dc:f0:11:c5:fa:5e:2d:5e:
5a:55:76:0b:3c:20:33:00:15:9a:50:8b:d4:71:8a:70:52:1d:
35:55:d8:11:ed:c7:ac:74:55:8c:76:83:21:cf:ed:a4:ff:af:
7c:c2:7f:ad:cd:e1:cb:1c:77:f3:f9:b5:61:81:69:cd:55:1d:
b2:f4:07:c7:fb:c8:8d:e9:33:8e:a5:7f:e0:de:63:49:93:67:
03:f3:81:b7:9b:e5:94:0f:51:1a:4e:d0:ba:1b:5d:a5:53:bc:
e3:63:c4:28:ec:47:50:a4:87:55:d1:43:9e:e7:d5:7f:95:90:
8f:9e:f4:0f:78:a7:4f:88:62:cc:19:81:87:2c:7e:92:0a:0c:
d2:53:20:8e:69:c6:79:59:d0:5b:81:63:3e:1a:75:3d:31:96:
09:bd:78:5b:99:c0:6b:94:9d:01:2f:16:f5:97:2d:81:b0:2f:
0a:79:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:46:10 2025 by rpki-client