Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/paj-QRgDD8g7h-_0fR3d6vn_8J0.roa
File: paj-QRgDD8g7h-_0fR3d6vn_8J0.roa (raw, json)
Hash identifier: hqdFw4pKvN2FY5WJFnowF8N+8FypZNvKvZ7U0KbMRjI=
Subject key identifier: A5:A8:FE:41:18:03:0F:C8:3B:87:EF:F4:7D:1D:DD:EA:F9:FF:F0:9D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC1F0AC9F59EB844FC3D2C6F909CDAF39
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/paj-QRgDD8g7h-_0fR3d6vn_8J0.roa
Signing time: Sun 12 Nov 2023 05:10:57 +0000
ROA not before: Sun 12 Nov 2023 05:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:f0:ac:9f:59:eb:84:4f:c3:d2:c6:f9:09:cd:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 05:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a8fe4118030fc83b87eff47d1dddeaf9fff09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:a6:11:cd:9d:c2:35:d1:81:b7:87:8f:0d:
63:f2:c8:94:9a:f2:47:88:21:8c:2c:d9:3f:b2:9d:
4c:b2:45:34:26:d1:67:c9:31:31:9f:4c:85:bb:49:
22:1d:f7:3f:bf:20:e0:3b:b7:7a:29:64:11:76:d3:
36:a8:8e:5b:92:25:21:8d:02:93:f6:14:2a:af:4d:
c1:d6:e5:23:ac:eb:dc:04:3e:f6:9e:ed:36:47:54:
51:bd:05:ff:02:70:c8:00:34:6b:ed:f3:42:eb:3e:
2a:b4:87:cf:85:48:d8:30:6c:73:cf:13:a4:b7:c7:
51:ef:7a:c2:11:2c:9e:12:71:4e:14:c0:0a:1b:cf:
06:f3:1c:43:93:79:77:f1:f8:f8:4d:03:e7:5f:6e:
4d:75:42:77:2b:05:1f:54:c3:c1:d5:30:12:2c:40:
5d:91:46:87:75:41:fd:a0:52:eb:09:e4:67:20:b0:
e9:7c:a5:66:ce:99:d5:cb:a6:f5:6b:a1:99:95:de:
35:66:c2:89:92:f0:82:60:00:11:1a:15:26:9f:8d:
d8:f3:24:83:9d:05:41:43:0d:22:1e:94:93:25:46:
6c:87:91:98:1d:5e:7b:c2:a7:7e:75:5e:e0:08:33:
e2:31:9c:94:c6:c5:61:74:ed:db:15:d3:29:bb:0a:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:FE:41:18:03:0F:C8:3B:87:EF:F4:7D:1D:DD:EA:F9:FF:F0:9D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/paj-QRgDD8g7h-_0fR3d6vn_8J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:85:85:83:d0:eb:24:6f:21:c4:2c:4a:15:d6:df:36:8b:80:
8f:a9:d8:50:32:61:e1:42:a9:d5:68:de:12:44:1d:6a:d3:b9:
8b:31:7d:e2:30:a1:6a:68:c3:d2:c5:8e:21:9a:04:4b:ba:8b:
e2:04:1f:c9:54:19:91:6d:24:6c:30:9f:92:54:90:73:58:e4:
65:0a:60:9f:6e:0a:5f:53:ec:c0:59:29:20:24:49:5f:24:18:
3f:53:4f:2d:1b:5a:fe:f8:5e:bf:ef:d8:ac:fc:95:88:a7:12:
07:da:0f:15:50:3d:94:7a:89:9e:af:56:b9:f1:e6:c6:b2:da:
f7:19:51:ff:9c:8b:ce:c2:64:21:a5:98:b1:5c:b9:bc:c3:13:
e0:1a:58:ab:30:6a:16:be:33:ef:eb:a9:2e:76:b2:76:6b:80:
10:31:cd:15:52:68:d8:17:45:ea:f7:82:fc:42:66:20:0f:ff:
fc:3a:52:72:5f:91:aa:ec:0f:da:ed:fd:95:de:59:d1:b0:9e:
46:f4:84:2d:da:0b:bb:7a:5b:ac:d3:09:cf:12:e9:27:a3:04:
54:3e:9f:6b:06:17:08:21:41:a8:a6:b9:90:64:5c:df:be:93:
68:db:f1:9e:6e:b4:69:81:dd:ec:bb:04:c0:fb:a0:57:28:04:
dd:0e:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:26:22 2025 by rpki-client