Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PySlq1BR-za1kZpDqvslrkil7vY.roa
File: PySlq1BR-za1kZpDqvslrkil7vY.roa (raw, json)
Hash identifier: TjeQITO8TBte1CVOX8lqSxDnENWhF4AJIwnokj/CCV8=
Subject key identifier: 3F:24:A5:AB:50:51:FB:36:B5:91:9A:43:AA:FB:25:AE:48:A5:EE:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF4D0C67588DB644915BF6957C0EFDBEE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PySlq1BR-za1kZpDqvslrkil7vY.roa
Signing time: Wed 22 Nov 2023 02:16:44 +0000
ROA not before: Wed 22 Nov 2023 02:16:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:d0:c6:75:88:db:64:49:15:bf:69:57:c0:ef:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 02:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f24a5ab5051fb36b5919a43aafb25ae48a5eef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:f0:c3:e4:e9:79:17:12:18:0a:99:0b:5c:
ff:1b:f0:4a:0e:30:a4:51:de:59:0c:bf:fc:e1:13:
86:fa:87:49:e7:ab:4c:6a:aa:33:3d:32:76:77:50:
6c:8f:ef:d0:bb:75:c2:27:00:48:18:f7:8b:16:62:
7b:a3:e0:b0:85:28:ff:3e:f8:fc:86:8b:4d:3d:f7:
4a:ae:20:97:f8:05:71:3d:32:96:51:72:95:63:40:
7d:af:7d:df:af:ef:94:93:8f:b4:cd:ca:a1:39:6b:
92:62:03:a9:b9:92:92:23:a8:77:d9:cd:50:18:7a:
62:74:85:e8:2b:01:4e:d5:6f:9b:5b:25:c9:6a:65:
0e:ed:a1:fa:70:4d:f8:4a:09:79:e9:1d:77:f9:6f:
ff:cf:0f:ef:ab:4d:5e:0e:b9:87:5b:63:69:45:61:
80:ae:33:0e:b6:7c:d8:87:66:41:6e:ee:11:66:84:
59:8a:59:2c:44:0f:b4:58:a3:40:35:65:c3:26:bc:
24:6d:9c:72:04:be:2e:74:f4:cb:d3:25:bf:60:f4:
0a:01:d1:4c:88:ff:e7:f1:d2:42:ca:f8:d7:4c:f8:
0f:40:30:b5:5f:a3:93:e5:1a:84:24:8b:0f:4e:fe:
53:46:80:4b:5e:7f:52:1c:f5:ab:c8:fa:de:f3:28:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:A5:AB:50:51:FB:36:B5:91:9A:43:AA:FB:25:AE:48:A5:EE:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PySlq1BR-za1kZpDqvslrkil7vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:5f:ca:f6:44:3a:0e:85:6c:3b:86:94:77:38:3a:d7:80:6a:
99:b8:7d:8e:74:6f:b1:02:c0:51:96:47:0e:24:04:72:9c:04:
3a:72:56:4c:a6:c8:c4:2c:e1:6b:67:ad:27:12:4c:bf:dd:a6:
ac:54:2c:86:ff:08:d3:ae:1e:eb:f3:99:03:fd:77:58:f9:73:
21:ba:12:87:fb:2f:c7:0c:f3:c1:aa:40:1b:d3:11:8a:cb:61:
2b:2c:dd:16:a4:1e:7a:f2:22:66:ec:04:6f:84:2f:ce:32:61:
73:95:7f:88:6d:39:16:b7:eb:19:b4:6e:13:f0:9a:43:cc:7f:
63:c9:38:79:44:ed:be:a7:f3:68:e1:0a:9c:c1:29:8e:a9:18:
e6:b9:3a:4d:c1:39:67:bf:68:5a:66:2c:86:8f:47:d1:ad:e7:
d1:94:2c:e0:34:a5:dc:ac:f6:6e:d3:c7:03:99:6b:f2:3d:65:
ec:39:4a:ec:a0:7c:28:21:8d:f5:f2:61:cf:8e:74:19:f1:e9:
4a:5b:cb:87:a6:25:ef:8b:4d:ff:e3:f6:12:1d:3b:06:12:c2:
15:08:f4:a2:9c:fa:57:94:9c:b3:95:64:5e:89:5a:9c:95:9e:
90:19:04:40:46:80:5e:b7:cf:b3:db:98:21:de:5c:d3:85:79:
12:7d:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:20:01 2025 by rpki-client