Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pySyHOi-MxRieo2q0P6UCkgExvY.roa
File: pySyHOi-MxRieo2q0P6UCkgExvY.roa (raw, json)
Hash identifier: sIbYzS8fGwZlVVeVJ4bueA7jQ/6vtAjYdb168P6M1iQ=
Subject key identifier: A7:24:B2:1C:E8:BE:33:14:62:7A:8D:AA:D0:FE:94:0A:48:04:C6:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACFA9F778C9B8E044DF10CF93F0526243
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pySyHOi-MxRieo2q0P6UCkgExvY.roa
Signing time: Tue 26 Sep 2023 04:05:37 +0000
ROA not before: Tue 26 Sep 2023 04:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:cfa9:dda/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:a9:f7:78:c9:b8:e0:44:df:10:cf:93:f0:52:62:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 04:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a724b21ce8be3314627a8daad0fe940a4804c6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:ff:dc:e4:66:6f:fb:42:6a:5d:02:39:28:
93:15:b5:4e:fd:b2:9f:bd:de:70:93:a6:82:be:58:
cf:83:ba:83:4d:e9:34:b4:18:0f:47:d3:98:0b:aa:
a2:87:28:f1:56:52:61:16:de:fa:74:10:80:5f:ad:
05:11:df:97:22:69:c5:ef:00:c0:51:a9:35:39:75:
8f:1a:8b:f0:f5:8a:07:36:1c:ea:41:a6:e3:86:0f:
29:90:67:3f:5d:2d:c6:d9:43:46:bb:9b:95:11:28:
3e:33:62:91:5d:ee:64:42:76:50:33:3d:af:0a:5d:
a8:e0:cf:5e:49:f6:77:da:b5:c8:99:70:93:8f:49:
30:25:3c:86:c4:21:d5:fc:25:15:27:20:c2:d6:d9:
2b:21:e8:68:74:b8:db:86:5d:4b:dd:22:72:41:e6:
1a:ea:14:c6:3b:70:e1:f8:ce:b1:92:3d:26:5a:b9:
75:3d:a0:de:3f:36:e8:47:6f:cd:96:04:10:5f:5f:
36:a9:37:d1:56:85:38:0a:b9:c7:91:d1:63:05:b0:
3e:e2:cc:07:95:46:6b:67:f5:39:1a:c8:f3:13:38:
56:70:a0:b8:6b:74:2e:d7:5f:64:c4:f1:02:1d:47:
e8:dd:65:32:03:4f:a0:0f:4b:1a:03:9f:ca:2b:81:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:24:B2:1C:E8:BE:33:14:62:7A:8D:AA:D0:FE:94:0A:48:04:C6:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pySyHOi-MxRieo2q0P6UCkgExvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bb:9d:54:b5:7a:bd:ea:41:52:f7:64:0f:ab:17:ba:2c:e9:44:
9c:ab:16:07:2a:14:19:b6:ef:10:69:05:ad:1c:31:4e:9a:96:
eb:84:8b:51:2a:84:48:0c:19:68:03:fb:1d:25:1a:7a:ae:b9:
31:16:86:01:58:ba:58:ec:8f:08:3a:40:11:9e:92:84:82:e7:
5f:8d:2c:83:b1:b0:b1:c3:d4:be:88:45:49:5e:dd:b1:b8:53:
58:73:78:14:04:3a:80:c1:68:92:26:68:2a:af:6c:cd:49:33:
64:fa:86:2c:6f:25:ae:f3:5b:c5:bc:89:1f:d0:3f:ba:8a:13:
d5:91:20:a5:66:d9:8b:21:5e:65:a5:30:ea:22:29:58:d1:63:
4b:8f:b9:ec:0d:19:78:d2:c9:2c:5a:8b:b3:72:d5:4e:0a:18:
ae:62:3d:5d:12:a9:a1:30:75:01:73:d7:04:8d:57:9d:0f:01:
87:6f:a7:93:0a:4a:99:ab:1f:67:5e:17:09:9d:66:47:69:76:
17:90:c2:5c:7a:86:82:15:91:f6:40:fc:86:bc:3c:22:2d:a8:
c8:59:92:a3:01:7b:ca:e9:3a:bf:a0:2c:0b:18:7b:8e:df:57:
53:96:a0:52:fd:1b:f9:4f:16:a4:43:5e:d5:ac:f6:51:f3:e9:
69:4b:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:09 2025 by rpki-client