Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pmCcDynoDOQRxwRHBuc2gIlOKm8.roa
File: pmCcDynoDOQRxwRHBuc2gIlOKm8.roa (raw, json)
Hash identifier: BqtV37lOYnZUahPXg0oVLxnYihqK7vcxJYJvgMQwWzA=
Subject key identifier: A6:60:9C:0F:29:E8:0C:E4:11:C7:04:47:06:E7:36:80:89:4E:2A:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4BEF4D3237E89007801F56BFA8BCA144
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pmCcDynoDOQRxwRHBuc2gIlOKm8.roa
Signing time: Fri 20 Oct 2023 07:14:15 +0000
ROA not before: Fri 20 Oct 2023 07:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:ef:4d:32:37:e8:90:07:80:1f:56:bf:a8:bc:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 07:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6609c0f29e80ce411c7044706e73680894e2a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:1b:2d:49:10:cc:2d:2c:d7:f9:ff:39:fb:
a8:b8:8a:8d:b4:b3:63:70:e6:aa:4c:a2:29:9e:51:
e0:92:d4:d9:1e:70:9e:fb:9a:8e:1b:1c:94:e8:b6:
ac:33:4c:88:7e:de:1b:19:b6:58:08:e6:b6:5f:c8:
62:e2:df:71:a9:3a:1a:29:82:4d:cd:36:56:bc:11:
04:47:55:29:5b:e9:10:ed:b2:e0:bb:ca:e8:41:45:
ad:05:d5:54:9e:6b:21:da:43:1b:31:36:59:84:af:
04:a6:1f:f5:25:8a:33:fe:f9:bb:f6:d3:a4:67:e2:
c9:6c:fd:50:08:76:da:26:0d:44:8e:d9:ad:f9:c8:
41:07:2b:6d:18:ca:c8:26:e1:6e:7f:63:7a:10:06:
f1:1b:ed:9a:81:37:d1:ad:0d:b6:14:c8:7b:c0:a7:
26:65:59:da:18:dd:4b:e6:aa:c1:8a:97:46:3c:86:
22:8d:10:0a:3d:ba:21:ce:73:4d:05:41:5f:96:ff:
42:0c:4e:7e:0c:3b:17:8e:a8:e7:72:51:9c:51:a7:
9e:cf:32:11:55:d2:5c:35:a1:be:a2:bf:b8:8c:eb:
18:82:28:19:4e:e6:49:11:4e:1f:41:fe:77:a6:03:
52:b8:06:be:f0:73:74:d7:a9:8f:a0:d7:22:4f:38:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:9C:0F:29:E8:0C:E4:11:C7:04:47:06:E7:36:80:89:4E:2A:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pmCcDynoDOQRxwRHBuc2gIlOKm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:6a:ae:46:3f:5f:35:30:75:de:73:9f:99:a7:ff:ed:6a:f3:
ad:fe:50:ea:9e:cf:97:c1:9d:2e:3f:af:f5:f6:77:b0:43:7c:
d6:0e:1a:cb:43:e0:e2:2d:92:7a:80:f9:76:35:84:7e:6d:2e:
c1:72:bc:f2:65:d3:0e:2a:29:39:bb:b1:1b:a5:21:2f:b6:20:
e7:66:27:a5:1a:2a:77:b7:0b:b2:a1:64:6d:bb:6a:0f:8c:51:
07:ff:d1:19:85:c0:45:10:9a:a1:88:25:b5:d8:41:ae:66:77:
06:8c:84:db:cf:ad:c6:b4:22:64:7c:cf:38:65:da:5f:a4:ec:
c7:2b:a4:9a:1c:e3:d4:58:fa:26:88:99:8b:be:ad:b7:23:41:
24:b5:07:fc:73:8e:c7:b5:be:68:bb:bb:89:76:ad:f7:6b:f4:
a9:b0:78:b0:73:25:08:18:a6:76:bb:6a:c5:d6:c4:5f:27:64:
33:99:12:f5:bf:07:ca:61:e5:85:af:c3:c0:42:63:96:78:b7:
70:91:a8:cd:8a:39:18:27:ef:e6:f4:15:23:9e:23:73:16:f2:
88:a3:a7:cd:69:24:9d:a4:e0:d1:2f:26:84:bc:28:06:63:10:
d8:ae:5e:f4:60:a1:aa:4b:f1:7d:0e:9f:6a:65:0d:ef:ac:05:
7e:88:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:08 2025 by rpki-client