Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pPoeh94pZGZWyZfp99J_h0ubnd4.roa
File: pPoeh94pZGZWyZfp99J_h0ubnd4.roa (raw, json)
Hash identifier: UOe3wUqILIyugFDENhHVe078TJhp6IEnhckymBm3a8o=
Subject key identifier: A4:FA:1E:87:DE:29:64:66:56:C9:97:E9:F7:D2:7F:87:4B:9B:9D:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABCD0E90FE271605C391F6C869061B0BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pPoeh94pZGZWyZfp99J_h0ubnd4.roa
Signing time: Fri 22 Sep 2023 12:15:22 +0000
ROA not before: Fri 22 Sep 2023 12:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:d0:e9:0f:e2:71:60:5c:39:1f:6c:86:90:61:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 12:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4fa1e87de29646656c997e9f7d27f874b9b9dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:e4:06:4e:99:03:a5:53:a3:38:86:26:13:
60:07:ec:9f:10:50:7e:fd:22:5e:5d:ea:74:14:79:
d1:dc:80:4f:55:a0:37:ec:91:8f:72:ff:9a:ca:4b:
84:97:b7:6f:90:32:ab:cb:94:97:cc:0a:c3:c7:c5:
d0:a5:72:01:23:98:a2:0b:c1:d9:a2:4e:51:5a:d1:
e5:5d:f1:9b:9f:42:20:31:aa:2d:6c:b3:0b:9c:4e:
2c:8d:e2:35:45:62:8b:09:ae:40:42:61:aa:a3:a5:
6a:a7:6a:41:96:a1:1e:e2:dc:01:3a:16:ef:67:31:
b2:af:23:e8:7f:58:2f:e7:28:b6:b8:6b:c7:eb:b9:
ca:0b:d6:49:4c:02:b1:4f:74:58:19:8b:b5:92:80:
94:6f:e5:6d:89:16:a9:07:6b:7c:60:58:49:53:24:
e8:c7:0a:d0:fd:68:5c:42:d0:f1:3c:e8:59:62:30:
49:35:a1:a1:d9:49:9b:54:15:e8:bd:2b:02:d7:06:
2b:79:00:cc:91:21:50:da:de:a2:a5:ef:5c:f6:b7:
b4:72:52:1d:ca:7a:14:3e:0e:e7:e4:55:a0:fe:61:
61:ad:39:c9:10:63:eb:b5:b7:20:3c:08:e4:87:7a:
cd:9f:9e:3e:88:5a:1a:34:cb:e2:09:58:2d:71:15:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:1E:87:DE:29:64:66:56:C9:97:E9:F7:D2:7F:87:4B:9B:9D:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pPoeh94pZGZWyZfp99J_h0ubnd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:28:39:d3:8f:84:5b:17:53:ac:66:ad:6c:a1:6b:1d:f1:8f:
17:b6:c2:7a:39:e5:72:c6:e6:f4:f0:e7:df:77:c7:ad:5b:cc:
4c:bf:14:5b:00:6c:8f:53:5f:28:ed:18:80:b9:78:9c:72:8e:
05:c9:6e:99:d3:19:b0:53:8b:63:17:6f:bb:3c:6e:be:67:f4:
f3:84:f4:23:c0:a7:d0:2c:6c:6f:ab:1a:cb:9a:89:ee:c1:3c:
ae:cf:1e:e2:17:c1:68:03:ab:87:4d:66:fe:3e:ba:44:28:26:
b2:0b:2b:ba:77:ce:77:09:28:ed:eb:d7:42:41:34:2f:8c:0a:
5e:ea:e7:f5:3e:a6:45:95:40:39:be:fe:6a:30:8b:b5:db:20:
ed:34:d8:99:2a:97:bf:12:40:ad:b3:c9:6e:d3:4d:fc:5f:12:
f7:70:37:d6:35:0e:cd:3d:47:d0:31:88:71:bb:d4:a9:7c:fa:
48:05:6e:96:32:45:05:2c:68:87:62:02:f2:9d:23:a3:4d:b4:
66:73:5a:61:41:39:0c:84:76:31:31:a8:4d:5a:27:fb:b2:0b:
af:17:94:79:55:92:2d:04:d4:b6:0d:4b:2b:39:da:f7:ae:40:
3f:7e:53:5e:21:48:64:13:b5:75:42:0d:96:74:3e:d6:85:16:
ec:d2:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:42:48 2025 by rpki-client