Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ptf__wWELjgPmdJrLgfOn40dCwA.roa
File: ptf__wWELjgPmdJrLgfOn40dCwA.roa (raw, json)
Hash identifier: qe5Ul+sVEXrJELGe8iZnUVywuy0c0f4NSYX32B2zSus=
Subject key identifier: A6:D7:FF:FF:05:84:2E:38:0F:99:D2:6B:2E:07:CE:9F:8D:1D:0B:00
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF953A756954049116B5FB4623252E5B5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ptf__wWELjgPmdJrLgfOn40dCwA.roa
Signing time: Wed 04 Oct 2023 06:15:23 +0000
ROA not before: Wed 04 Oct 2023 06:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:53:a7:56:95:40:49:11:6b:5f:b4:62:32:52:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 06:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d7ffff05842e380f99d26b2e07ce9f8d1d0b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8b:5c:85:44:a5:41:28:95:91:93:da:4a:1f:
ae:87:50:d7:6e:b0:cc:12:6b:b8:d1:59:41:49:d9:
05:71:5e:e1:1b:c6:b8:b8:62:f2:a7:fb:3c:a8:13:
18:4d:f7:1e:d9:dc:6f:60:99:60:2e:da:58:69:4d:
cc:e4:b2:f4:83:0b:d1:c8:f0:f5:38:f1:da:3a:63:
c7:a2:4b:2a:d2:2b:ac:81:dc:44:04:f5:cb:d6:fa:
62:0f:c3:69:ee:6c:e5:0c:60:39:73:17:bb:43:c6:
76:88:43:ce:36:4d:cf:af:0a:56:9e:63:5a:e4:ea:
aa:5c:0b:ae:ea:5d:84:a3:e5:83:1f:91:7d:1a:d9:
a9:85:e7:f9:75:69:c2:c2:b8:d5:e9:f7:23:cf:1c:
27:f7:64:15:82:5d:b1:e5:db:5f:3c:78:08:31:28:
37:e5:8e:30:94:4b:8c:58:2e:ea:c0:a8:2e:3f:08:
ff:f7:2c:e7:9b:ee:aa:e2:fe:4f:1b:b9:d0:4a:6a:
1e:bf:7c:a0:a0:8a:2f:39:f8:5d:77:f8:68:48:5c:
57:7a:57:7b:c4:fd:c4:1d:6f:ce:04:ea:85:09:91:
3e:30:e5:c1:e8:fa:74:2f:f1:01:f9:37:a4:e1:20:
0f:a4:07:23:4a:c3:75:2c:45:0a:95:85:19:1e:d3:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:FF:FF:05:84:2E:38:0F:99:D2:6B:2E:07:CE:9F:8D:1D:0B:00
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ptf__wWELjgPmdJrLgfOn40dCwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:83:de:8c:4b:b3:c5:cf:1f:38:6f:6b:27:9c:af:cf:ce:47:
d9:86:50:bf:ee:9b:06:c3:0d:cc:e4:7a:c8:aa:41:cb:4c:a3:
5c:46:bd:a5:97:c9:ec:27:52:63:8a:81:78:e0:c5:cb:fe:38:
70:98:0a:b3:c0:62:71:f2:08:ad:ad:6c:2a:e8:1a:f3:77:e6:
61:71:a3:93:8f:da:4e:c7:6c:7e:23:87:f0:ff:5c:d2:57:41:
46:59:50:6b:47:56:9b:89:96:d1:12:b9:2a:8d:c9:86:b4:54:
b2:0b:e4:2e:ae:04:e1:fb:96:24:7c:ca:a2:ca:f3:da:1b:33:
4d:0b:98:5b:a4:3f:54:76:48:9f:57:38:1e:15:32:7f:7e:d8:
4a:a6:fb:a9:d2:3f:ab:a6:63:2e:24:97:b5:ab:57:2b:2e:2d:
79:0d:a5:97:9f:4e:92:b7:ee:db:3f:ad:29:6d:3d:0f:ef:19:
64:f3:35:d5:58:4a:77:26:7c:e0:40:6a:41:07:50:3b:79:99:
ef:2f:b9:3d:78:23:9c:13:87:47:43:be:e5:89:78:a1:ab:6c:
43:57:8d:e2:53:6e:be:19:7e:6a:76:95:06:e7:8c:f4:42:8e:
98:e3:77:77:a9:b9:7a:64:83:67:d6:4c:ff:16:6b:e0:b6:44:
6d:3f:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:11:42 2025 by rpki-client