Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pbsn5VEXbTZoFIQIoeZFzp9LxFM.roa
File: pbsn5VEXbTZoFIQIoeZFzp9LxFM.roa (raw, json)
Hash identifier: i0a3o+vjyqX3bVSxmnCl0JG1TGyeguvCUY82yqM3MS8=
Subject key identifier: A5:BB:27:E5:51:17:6D:36:68:14:84:08:A1:E6:45:CE:9F:4B:C4:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE93A8080FA437E1556A4564E67A6EE36
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pbsn5VEXbTZoFIQIoeZFzp9LxFM.roa
Signing time: Sun 01 Oct 2023 03:13:59 +0000
ROA not before: Sun 01 Oct 2023 03:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e9:3a:80:80:fa:43:7e:15:56:a4:56:4e:67:a6:ee:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 03:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5bb27e551176d3668148408a1e645ce9f4bc453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:34:7c:a1:0a:92:ad:2e:51:2d:1f:71:a0:
48:bc:06:8b:4c:a0:e6:8f:ab:3e:06:e5:a7:c8:28:
65:57:f7:85:ed:b3:44:66:9e:97:ca:59:76:e3:f2:
a1:1c:d2:ff:06:33:8c:6f:8a:e1:99:75:37:00:e2:
92:ec:0b:5a:02:31:b1:c7:a2:e5:c0:ae:3c:e1:3d:
72:47:10:1f:e2:09:0c:92:07:59:3d:31:39:3b:53:
ca:5c:1f:31:9c:9d:f2:da:30:d0:c9:35:0c:e1:88:
3f:11:ba:a6:0a:b4:1b:bd:46:4e:32:34:1f:1e:e2:
48:8c:1d:33:28:32:42:95:41:05:0e:75:d9:09:fa:
3e:51:b6:67:4c:d2:3f:52:f6:d1:f0:b5:26:a5:4f:
41:68:7a:6a:53:0f:18:57:e6:c9:9b:db:cf:11:c2:
97:50:ea:32:80:13:e9:07:85:80:ee:f8:d3:3e:58:
9d:1e:30:1f:71:b8:98:10:9e:90:be:73:9e:11:8e:
ce:c6:7f:ae:5f:03:a1:e7:9c:4a:84:21:7a:8c:14:
a0:a5:96:b7:46:ed:00:88:cf:c4:d4:02:80:e5:54:
7d:8f:8d:6e:8e:50:c2:70:11:68:bd:23:62:40:84:
25:fb:f5:03:2e:8d:bd:0c:4f:0c:61:6c:28:79:15:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:27:E5:51:17:6D:36:68:14:84:08:A1:E6:45:CE:9F:4B:C4:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pbsn5VEXbTZoFIQIoeZFzp9LxFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:38:25:37:9b:e7:b4:0e:a0:1e:76:05:ee:06:9e:37:92:8b:
72:f0:6d:83:fa:f6:a6:d5:7c:94:87:ed:93:d1:1d:d2:7c:74:
1f:43:57:80:fb:db:8a:b5:fd:88:1f:6a:cb:9c:10:03:e0:28:
87:e9:b8:74:bb:b4:02:b6:5d:c6:fc:c1:ce:8e:e8:9a:41:37:
8e:e6:6f:0b:37:52:ab:21:f3:06:b0:4e:e6:14:70:f5:e1:05:
c1:3a:a0:ca:8e:bb:f5:b3:fe:99:a8:6c:f0:1c:97:c6:44:f9:
fd:f0:91:08:c1:9a:97:16:06:db:2d:8e:ac:3c:9c:7e:ec:d9:
c3:2d:77:72:9c:d7:00:95:a4:d4:90:70:ac:e2:a9:c8:9b:e7:
4f:96:cd:92:82:c9:90:ca:3a:10:82:e5:24:4e:a2:eb:99:56:
d5:4b:ef:ee:a7:6d:d6:5d:b6:95:02:bd:51:12:97:04:ee:1d:
5e:bf:eb:85:62:54:0e:43:06:62:dc:72:fa:3d:00:61:c9:5b:
96:74:c2:1c:3c:7c:d9:3f:71:33:a7:46:02:37:36:c0:ca:b3:
2d:fb:af:79:3d:11:5c:32:98:f1:70:5f:30:bc:66:52:25:c7:
0a:91:8f:9d:44:2d:e9:ce:d0:ff:f5:6b:71:bb:e4:27:fc:63:
68:8a:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:28:42 2025 by rpki-client