Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PPNu-viZXSq7jKntNVG2092QqDc.roa
File: PPNu-viZXSq7jKntNVG2092QqDc.roa (raw, json)
Hash identifier: T8xUnMCu7VWXK+0KVNwCNz1J2202SR7f0atnlWqmWGc=
Subject key identifier: 3C:F3:6E:FA:F8:99:5D:2A:BB:8C:A9:ED:35:51:B6:D3:DD:90:A8:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEEFA46A57AA765F876B85B9330FDCF0E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PPNu-viZXSq7jKntNVG2092QqDc.roa
Signing time: Mon 20 Nov 2023 23:04:21 +0000
ROA not before: Mon 20 Nov 2023 23:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:eefa:3a09/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:fa:46:a5:7a:a7:65:f8:76:b8:5b:93:30:fd:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 23:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cf36efaf8995d2abb8ca9ed3551b6d3dd90a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:e6:df:85:fb:9e:19:34:1b:f1:6d:6b:0e:
aa:ed:08:47:6e:97:50:24:17:01:b6:15:d7:ff:c6:
1f:36:29:25:ed:df:b3:2d:64:72:f5:82:55:21:68:
ac:d4:6e:59:80:e6:d6:ad:f5:ae:31:e2:7e:0d:9a:
06:6a:a6:0c:e6:2e:d4:c8:75:c8:1b:ea:1f:11:b5:
75:21:3f:2d:93:76:70:cd:46:d1:76:5d:e0:37:ea:
a3:98:83:0b:0f:c8:3f:2d:2c:33:a8:ed:8f:13:49:
1f:17:fa:07:5a:39:fa:2a:c7:7e:a6:91:cd:b2:38:
ab:64:f2:1e:d2:e2:66:4b:28:bd:48:fa:42:dc:1f:
4d:58:c5:17:a9:49:da:91:77:94:c1:8c:44:c3:d1:
21:6f:f4:c4:2f:54:3f:3b:f7:b1:ec:75:92:b2:4d:
b9:0f:de:99:cb:26:4d:ca:86:55:9f:cf:bb:22:1d:
6d:f5:63:fe:ed:11:d4:fb:73:cb:1f:63:0d:67:ce:
6b:02:e8:c2:93:4f:0e:07:c7:12:63:e1:2a:b0:0a:
07:8b:72:6f:68:51:05:0b:2f:22:f3:67:fa:69:00:
40:83:c9:71:93:63:b4:26:3a:78:fc:a6:32:87:0c:
2d:73:05:b5:1a:b2:fa:cc:9a:c7:c2:05:0c:a9:6b:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:6E:FA:F8:99:5D:2A:BB:8C:A9:ED:35:51:B6:D3:DD:90:A8:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PPNu-viZXSq7jKntNVG2092QqDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:79:d6:cb:59:94:e6:01:2a:86:9f:f3:f0:7e:54:cb:41:49:
90:25:a2:83:05:a9:4a:82:d4:7b:53:ff:a5:26:a8:19:79:dc:
17:30:a6:14:4a:88:f4:10:41:ed:67:c8:0a:77:cd:51:e3:f9:
ec:a5:67:c8:2f:f4:3c:9e:b6:da:91:d5:1a:b7:f4:37:75:2e:
26:88:a8:a4:a9:b8:3c:f9:86:b8:ea:26:fa:85:47:b5:61:2d:
44:2e:1e:30:83:88:44:42:56:aa:e4:b4:54:b6:54:04:79:a2:
c3:c1:93:29:43:b9:6e:ce:92:80:e0:b2:c8:ee:51:ed:94:9a:
9b:64:61:34:9c:07:35:c7:4d:f0:63:93:be:1c:aa:41:03:4e:
f5:67:c3:29:f4:42:ec:bb:47:60:c4:cb:2f:f7:70:07:2f:70:
f7:8d:ae:47:d0:13:98:ae:c9:d6:17:54:c6:28:d7:2a:77:29:
47:8e:d0:ad:0b:a0:e1:72:05:c2:52:aa:db:56:ad:a0:8e:ff:
75:47:b7:48:59:b8:d0:ed:67:92:64:dc:e9:8d:e7:19:3f:9a:
00:82:72:9a:a1:d5:5a:81:6b:08:6f:34:38:cd:38:68:64:b4:
0c:30:60:e9:08:4d:b2:a1:6c:9b:a0:a6:0f:34:98:71:4f:67:
6d:1c:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:29:28 2025 by rpki-client