Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pi69nd-TpwYSmdv6lN46rsWqoMI.roa
File: pi69nd-TpwYSmdv6lN46rsWqoMI.roa (raw, json)
Hash identifier: pYcHOtI8uO92v6FiBgpVmnBeU+ByH2MGhp/gSoV0cIg=
Subject key identifier: A6:2E:BD:9D:DF:93:A7:06:12:99:DB:FA:94:DE:3A:AE:C5:AA:A0:C2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6C1D43068296EB0ADE1916CA71C40806
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pi69nd-TpwYSmdv6lN46rsWqoMI.roa
Signing time: Fri 15 Dec 2023 06:15:06 +0000
ROA not before: Fri 15 Dec 2023 06:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:1d:43:06:82:96:eb:0a:de:19:16:ca:71:c4:08:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 06:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a62ebd9ddf93a7061299dbfa94de3aaec5aaa0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:7f:c7:c8:2b:17:d0:1f:03:ee:ef:2c:da:
81:7f:df:85:06:d2:a7:25:2a:90:0b:d0:78:ad:96:
87:a9:21:35:83:f9:48:2a:9f:8b:f1:85:4a:e5:3e:
26:b8:d8:c9:16:2f:44:e0:81:f5:c3:82:e8:ad:5b:
7b:0f:c2:28:47:92:1f:93:4b:43:64:0c:b3:3a:76:
e8:d8:f9:40:d8:51:0a:49:39:a9:08:b1:39:53:bc:
6e:45:08:c8:18:c8:42:83:2b:b0:ca:77:cb:1b:10:
cd:df:35:13:7a:f2:f2:f3:58:f3:d6:16:0a:8e:f8:
0b:ee:e9:44:e9:fd:dd:dd:12:a5:8f:7e:53:47:36:
37:4f:1b:46:10:7c:7e:7f:2b:4d:ee:b6:c4:6b:43:
45:15:23:8a:b5:f1:b8:a5:4f:4d:a5:ba:f0:77:24:
b1:bc:47:28:91:51:19:25:8a:0b:26:b3:0c:ab:c1:
7c:20:17:28:c3:d8:bf:fd:52:ef:d3:7e:f2:2b:b9:
87:55:3b:da:a3:00:9c:03:30:12:84:88:d0:00:6f:
56:6b:cd:ee:4c:69:6d:d6:b7:89:8b:c2:59:2e:b5:
4b:42:70:06:dc:f8:ac:7c:d6:cc:20:85:66:45:dd:
3e:11:a5:16:83:ba:39:09:92:59:05:f5:1d:62:04:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:BD:9D:DF:93:A7:06:12:99:DB:FA:94:DE:3A:AE:C5:AA:A0:C2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pi69nd-TpwYSmdv6lN46rsWqoMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:8f:7d:71:77:6b:ac:dc:ab:ef:af:cf:f7:22:74:a9:3e:10:
8b:f8:c8:50:76:35:dc:67:79:51:cb:70:1d:d1:04:16:ce:ec:
71:69:48:d1:a0:79:80:a0:79:ba:c4:e1:45:96:e3:3e:fc:98:
c5:1f:75:ed:05:5b:20:e8:7c:99:10:68:b6:83:05:de:80:97:
52:4c:8c:17:c1:97:98:74:ef:b8:48:b7:09:e6:fb:48:21:84:
02:e5:f6:0f:cc:f2:b0:1a:63:7c:b2:a2:d3:d1:e2:28:0f:42:
03:36:00:4f:8f:42:c5:e2:98:d0:35:ab:9b:4e:84:95:3e:fb:
5c:17:81:a7:bb:81:6d:d8:32:4a:6c:bb:66:9f:27:dc:d8:d6:
1e:e6:ae:bc:b5:8e:7b:90:a9:e5:73:e9:13:49:de:7d:aa:76:
eb:45:52:7f:12:94:0d:b5:ef:c6:44:c2:b6:b5:6c:0f:7b:78:
0b:1d:97:b2:4f:ad:2b:6d:e8:ae:d7:7c:23:4f:ae:8e:8d:b0:
64:61:eb:85:2e:5f:dc:5e:1e:b5:81:3c:a6:34:8e:3a:8f:2c:
ad:01:7d:c9:5e:d4:ba:95:39:b3:e8:b4:ff:10:01:d5:7f:97:
38:ae:c8:31:44:67:32:59:54:9d:b2:7b:0a:07:42:5d:4d:6e:
f6:33:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:07 2025 by rpki-client