Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P5PgfB8rq0_YLcCpa0Z9r23tL10.roa
File: P5PgfB8rq0_YLcCpa0Z9r23tL10.roa (raw, json)
Hash identifier: WDZkinXAUzQJEApaDzZjZiGqFD8pt8/Ax6qwq6p7KLo=
Subject key identifier: 3F:93:E0:7C:1F:2B:AB:4F:D8:2D:C0:A9:6B:46:7D:AF:6D:ED:2F:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8010FD6224698D81B9FE07048A1E66D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P5PgfB8rq0_YLcCpa0Z9r23tL10.roa
Signing time: Tue 19 Dec 2023 03:14:06 +0000
ROA not before: Tue 19 Dec 2023 03:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:10:fd:62:24:69:8d:81:b9:fe:07:04:8a:1e:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 03:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f93e07c1f2bab4fd82dc0a96b467daf6ded2f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:96:4b:ab:0e:74:20:53:41:d1:a6:6f:92:
5d:b1:c7:5a:76:e9:eb:2a:41:ad:d1:ed:39:8d:3b:
f2:74:12:3b:4d:9b:bf:01:fe:86:f4:90:19:42:d2:
c0:c2:24:84:16:b4:46:4c:d9:43:2b:66:23:a3:81:
0e:5b:0b:89:54:39:27:09:1d:ba:4e:23:46:bc:86:
23:e4:88:38:62:c5:3b:c0:a9:ee:a4:b6:9c:fd:73:
99:44:5f:cd:13:79:2a:7f:b5:22:fd:95:d1:cf:e9:
04:1b:05:33:bd:ba:6b:b2:c3:64:f9:ed:0d:28:4c:
e6:11:95:f7:18:31:53:3c:63:fb:f2:6f:50:c1:ed:
0e:95:b3:11:37:91:4e:3b:21:a6:70:c6:50:39:40:
f5:6d:3c:26:83:f5:73:b0:32:67:a9:19:fa:ff:94:
eb:5b:b3:10:b7:17:f5:18:c8:8c:83:a9:87:e3:52:
98:6a:7e:77:7a:fd:f5:8b:3a:7a:2e:94:36:27:a5:
77:17:d5:aa:4e:05:d5:f2:be:d2:78:17:14:43:dc:
16:27:63:84:00:29:25:14:d8:61:8c:e8:27:a0:bd:
9e:d6:dc:74:9e:38:50:0b:e8:4c:61:34:df:0d:ac:
96:4c:52:dd:67:7d:1d:b5:c6:66:41:1a:71:68:d8:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:93:E0:7C:1F:2B:AB:4F:D8:2D:C0:A9:6B:46:7D:AF:6D:ED:2F:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P5PgfB8rq0_YLcCpa0Z9r23tL10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:3b:b4:0e:c9:92:d3:06:1f:c0:ee:11:68:8d:dd:2d:c3:6b:
bb:b2:8a:da:99:fb:f2:bd:28:2c:a5:03:6b:7b:3e:fd:72:b9:
d3:9c:e1:a8:84:65:7f:38:16:82:b4:b2:96:00:6f:12:79:88:
b1:d1:9b:09:e8:1c:42:a1:b7:02:c9:55:c5:d3:04:a1:0a:85:
bf:cb:e9:89:e2:1a:4e:64:9f:a2:ce:e2:1b:15:8b:73:99:39:
79:51:7d:93:36:cf:3a:50:67:08:73:bc:ba:48:98:9d:76:37:
d7:d1:1e:cc:b9:d6:b1:1d:43:9f:4e:a7:50:91:62:b2:62:08:
1e:d8:44:3f:e7:5c:2e:be:3f:c2:38:14:95:b3:f7:04:75:59:
c5:29:95:3b:a0:43:01:09:2b:b0:b7:02:46:f9:78:56:ce:6d:
c3:8d:a1:c9:53:1b:f5:1b:e3:a0:3a:10:f3:64:3c:60:48:82:
ab:a5:ad:cb:31:65:bc:86:4a:fc:89:3b:72:44:d9:25:74:3b:
9f:9a:4a:e1:68:0f:6a:26:d3:9f:ac:9f:1d:38:c2:c1:af:85:
42:96:c8:f0:ed:06:cb:cc:db:cb:87:71:8c:a2:a4:ec:89:0c:
03:8c:f0:4a:ee:6e:a7:d0:50:37:ed:e0:e8:c6:50:10:2b:d8:
bb:b1:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:39:40 2025 by rpki-client