Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pGYx-049nRZZpPaavLDUHMJgGDs.roa
File: pGYx-049nRZZpPaavLDUHMJgGDs.roa (raw, json)
Hash identifier: qArDJpoU/f7XC0DAxo5g8ht7wDSnqTInsYhjdpoE+O8=
Subject key identifier: A4:66:31:FB:4E:3D:9D:16:59:A4:F6:9A:BC:B0:D4:1C:C2:60:18:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B691FD79F9646532C903595D49B824864
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pGYx-049nRZZpPaavLDUHMJgGDs.roa
Signing time: Wed 25 Oct 2023 23:16:16 +0000
ROA not before: Wed 25 Oct 2023 23:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:1f:d7:9f:96:46:53:2c:90:35:95:d4:9b:82:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 23:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46631fb4e3d9d1659a4f69abcb0d41cc260183b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:e6:29:84:cc:a3:50:d0:10:5b:f4:21:18:
d2:cd:04:0b:2c:57:ce:63:6a:96:c3:07:00:e9:e5:
0c:b2:54:2f:02:bb:d3:48:3a:22:37:54:6c:4b:25:
7e:4a:dd:fb:56:8b:57:be:8c:d9:62:c4:6b:2a:a3:
0a:94:71:77:cc:32:33:15:d0:16:5d:7b:5a:19:04:
47:16:1a:1f:49:d6:10:04:07:38:6e:8b:26:1d:d3:
f0:c0:47:06:5b:84:1f:d1:70:e3:3c:64:5e:dd:da:
a6:9d:d9:a9:2f:7f:8c:25:d4:70:e8:59:23:df:39:
46:ca:3d:65:7a:3b:29:aa:97:18:e1:41:d3:3e:d7:
55:1e:12:04:77:db:b9:fa:7a:53:87:b2:df:b1:2c:
4b:02:85:dd:6a:b5:1e:21:d2:79:d8:72:cc:01:1b:
65:49:72:74:79:3d:dd:56:98:63:5e:46:32:03:fa:
9c:d3:9b:72:4f:b2:21:86:bb:18:ae:5c:64:59:ff:
e5:05:3a:5e:81:a7:e9:2f:db:24:e1:ba:23:8d:98:
3d:a4:85:e0:34:ac:34:f1:32:45:c4:4b:8c:96:0d:
a0:39:b8:2a:d5:79:cf:7b:e1:98:dd:5d:d3:2c:b7:
a3:fb:c5:fd:cc:4e:37:52:3b:5c:19:39:36:31:c2:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:31:FB:4E:3D:9D:16:59:A4:F6:9A:BC:B0:D4:1C:C2:60:18:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pGYx-049nRZZpPaavLDUHMJgGDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:38:29:be:c8:dd:7b:7a:98:3e:6d:27:08:ed:54:53:fa:80:
8e:a1:d3:19:04:64:80:9d:3d:1c:08:f2:2e:ea:31:8e:a2:77:
24:4f:ee:41:03:1f:60:53:76:5a:89:e3:81:15:24:db:2c:62:
b1:c1:5e:1d:3d:af:ac:21:b9:c7:22:5b:e5:e2:b4:e1:1e:49:
17:28:8a:be:5f:5c:fa:ef:b9:aa:b7:46:9d:14:8d:79:ee:bf:
15:b3:2f:4a:6a:a2:a7:d9:ce:31:65:9a:64:26:fc:07:04:ab:
08:87:bd:4f:3c:a9:2f:5b:e9:24:e1:84:18:62:d9:25:e6:7c:
26:07:97:0e:78:7a:2e:d9:2f:a8:de:94:92:82:c6:4a:a4:a8:
74:c1:4d:b3:d3:8b:49:0b:38:7d:96:b1:41:01:de:51:75:30:
20:56:9d:d8:a7:f5:c3:30:df:2e:eb:55:14:b4:a5:0d:4f:5e:
14:bb:16:b7:a8:51:dd:a8:a2:83:c4:2d:16:4c:31:69:8b:56:
58:c4:0e:56:34:a1:bf:1c:f3:20:7d:da:29:44:dc:9f:fe:61:
23:6c:0f:69:a5:16:40:c6:f3:f3:61:7a:2f:1b:8c:9a:a7:f6:
08:35:52:26:24:d8:65:38:e2:77:a1:0d:81:ec:35:7e:c5:d9:
25:60:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:27:09 2025 by rpki-client