Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pxsV81s1beZWd8sLYuextsSA6RY.roa
File: pxsV81s1beZWd8sLYuextsSA6RY.roa (raw, json)
Hash identifier: 4Xui+o8ZtYwZrz3myhc5MzOtxVZ1IICbY3jeb9kfizI=
Subject key identifier: A7:1B:15:F3:5B:35:6D:E6:56:77:CB:0B:62:E7:B1:B6:C4:80:E9:16
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD6FBE590064DA030CF59723C7B7D1B6D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pxsV81s1beZWd8sLYuextsSA6RY.roa
Signing time: Wed 27 Sep 2023 14:12:27 +0000
ROA not before: Wed 27 Sep 2023 14:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:fb:e5:90:06:4d:a0:30:cf:59:72:3c:7b:7d:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 14:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71b15f35b356de65677cb0b62e7b1b6c480e916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:f7:a2:f3:9e:92:35:76:01:c6:f2:51:c8:
89:c3:57:23:90:e2:33:0b:d8:11:38:fa:52:f5:40:
a9:85:d4:81:24:f1:0e:f6:14:21:6d:4f:8e:38:d7:
21:89:cd:ec:c9:01:2d:25:e2:01:0c:91:8d:3a:2a:
57:9d:b1:7d:5d:34:65:c5:4e:33:03:a2:ff:4d:f4:
42:6f:5f:69:00:42:db:d6:f1:58:bd:8b:21:b9:01:
92:61:9e:7a:a6:fd:59:e0:10:23:6a:cc:03:1f:8a:
52:f7:2d:d4:02:9b:8f:47:5c:82:13:02:f6:2b:50:
02:8b:cc:e4:89:fe:ff:37:56:db:db:5b:52:34:d1:
e2:e0:8f:1f:0f:96:99:96:80:c3:ed:98:9b:0f:17:
b2:15:72:42:9a:7f:e0:6d:ed:67:85:d0:82:78:91:
44:97:c8:eb:c3:5f:3a:f5:cc:2f:f7:e8:03:ee:41:
77:d8:58:f2:be:9a:5e:0a:ab:67:e5:b4:2c:b2:15:
94:1c:ad:cb:a7:b8:f3:30:f6:20:43:c9:9f:7f:70:
e1:7d:77:fc:0a:e5:da:70:0c:a4:7f:2c:f5:32:0d:
e3:b4:b4:af:af:e9:61:50:e1:ed:3a:4d:bc:a0:a7:
56:22:f7:84:71:fb:89:b1:7f:81:b3:d1:a7:db:47:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:15:F3:5B:35:6D:E6:56:77:CB:0B:62:E7:B1:B6:C4:80:E9:16
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pxsV81s1beZWd8sLYuextsSA6RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ff:6c:11:c5:e9:a0:c5:2a:41:98:eb:57:17:f2:c9:58:81:
76:61:e8:52:04:08:dc:b4:24:90:4f:df:0f:19:0a:ff:11:d0:
1b:3f:4d:96:bc:b5:82:9c:1a:cd:10:94:fa:b3:2f:8b:50:5c:
d8:21:d9:50:ac:d6:20:9b:ba:12:6f:a5:40:dd:a2:20:6c:62:
91:84:7a:67:76:ec:f2:87:42:b3:c1:7c:92:c2:2b:ba:95:eb:
31:97:f2:aa:0a:28:d0:ae:11:3d:83:b2:2f:f9:4e:7c:70:23:
40:08:3f:8a:11:c5:49:f3:77:8b:68:bf:4e:50:59:0b:4c:ca:
75:0e:5f:0a:5a:c9:bf:b2:3a:33:30:f4:de:54:41:51:09:10:
f6:d7:cf:86:11:bf:87:d0:70:d0:21:32:be:e9:2e:32:f7:17:
ef:8a:44:b3:df:ca:fc:68:7f:35:2b:ac:14:b4:f3:4c:e0:20:
c0:38:c7:46:28:0b:f2:0d:30:0b:5b:14:5a:ed:a8:62:0e:95:
17:3e:7e:9e:26:76:46:e5:33:b1:be:30:7f:ad:52:b7:1f:52:
a7:77:29:70:40:e4:ef:5e:87:62:81:38:0b:d9:57:55:18:08:
a1:a9:e1:6c:93:c2:fa:ec:76:aa:b4:bf:09:c9:3f:6f:1a:f1:
bb:54:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:45 2025 by rpki-client