Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ppdUnAP4lzRjqUybW8cfSq3NoKY.roa
File: ppdUnAP4lzRjqUybW8cfSq3NoKY.roa (raw, json)
Hash identifier: 9FBKlpvx91stm3D98dzGSlUbuRsf0oM+q4RexWEOzRo=
Subject key identifier: A6:97:54:9C:03:F8:97:34:63:A9:4C:9B:5B:C7:1F:4A:AD:CD:A0:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD57F096E285C40449DB44F40BB15B6DE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ppdUnAP4lzRjqUybW8cfSq3NoKY.roa
Signing time: Wed 27 Sep 2023 07:16:27 +0000
ROA not before: Wed 27 Sep 2023 07:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:7f:09:6e:28:5c:40:44:9d:b4:4f:40:bb:15:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 07:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a697549c03f8973463a94c9b5bc71f4aadcda0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6e:84:32:ad:77:c2:e4:aa:f2:01:b7:cf:f2:
b7:4c:ff:f6:37:e0:a4:ce:0d:1f:fa:8b:f8:ad:de:
30:95:a7:6e:70:11:64:ae:e2:48:28:17:39:fe:40:
3d:a2:01:b7:31:af:81:6e:de:3b:cf:2b:5a:7c:3b:
24:c2:82:45:ca:74:ab:c0:64:c1:b4:15:fb:d6:c9:
2d:cd:b4:b0:17:a7:09:08:cb:6b:52:2f:93:67:f2:
a3:ed:d2:ec:33:05:c5:88:8d:ab:16:60:fe:49:e1:
e2:d5:da:ae:db:53:9f:40:cd:e8:24:94:32:51:e0:
36:00:3b:8d:88:11:56:bf:d6:c7:ca:be:3b:58:00:
ee:a5:41:76:36:d9:5a:cd:b7:63:9a:f8:ee:ba:24:
fa:95:77:66:e3:be:cf:45:b2:34:c4:04:27:1e:2c:
7a:55:f6:a7:25:46:83:b0:03:57:21:07:a3:8a:ca:
ef:9e:65:dd:9c:de:01:4e:89:0d:ce:9d:93:a3:a6:
b7:e1:41:17:49:4a:c4:c6:f5:32:6b:98:99:81:38:
d2:be:e7:3c:d8:81:21:c9:80:d0:d9:c5:54:dd:21:
76:b1:e4:e5:31:e5:27:b3:4f:8f:26:d3:b6:80:e5:
6b:89:80:37:be:e8:d1:ce:10:35:f8:1a:2a:d3:a9:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:54:9C:03:F8:97:34:63:A9:4C:9B:5B:C7:1F:4A:AD:CD:A0:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ppdUnAP4lzRjqUybW8cfSq3NoKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:e6:46:22:3c:20:4b:a7:9c:a4:47:dd:44:ed:b5:f1:45:35:
5b:54:1c:8c:29:05:fe:6a:5f:53:b7:c0:2b:c3:cf:7e:e7:e7:
f4:5e:20:64:36:91:1d:2f:00:9b:9f:26:ed:88:30:74:6d:f5:
cb:27:bf:29:f7:72:d4:de:4d:31:f8:1a:ee:72:ec:1a:ed:8a:
0e:1d:29:ef:49:53:49:d1:ab:06:a1:bf:d0:15:3c:95:df:ce:
42:95:53:a7:51:db:8b:4f:8f:c4:38:7a:3c:b6:a7:f7:8e:9c:
7e:fc:99:6c:96:95:67:04:b3:cb:9b:d2:dd:7c:c6:14:71:11:
49:5e:59:a8:71:1d:37:66:b0:20:05:79:cd:ff:7a:6b:0b:66:
5e:b1:10:6c:52:a5:9d:0f:10:ac:35:86:c2:fe:b9:28:eb:20:
d7:d9:2e:39:75:00:96:d0:a3:0a:7a:45:19:0e:8e:7f:e7:27:
54:c1:c6:e2:6d:24:c3:92:07:38:55:2a:23:7a:e6:d0:51:bc:
a5:71:fe:cb:a1:77:52:6f:82:54:69:3d:f3:1f:e7:87:dc:3c:
21:b5:7f:93:e1:e7:86:6c:39:81:16:16:71:ae:83:87:57:9c:
35:39:40:71:36:5e:32:7e:c5:80:57:e8:30:21:9b:20:5d:53:
f5:51:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:00 2025 by rpki-client