Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PVEDHTtpjfmgCuAu3HfV4ygJhRo.roa
File: PVEDHTtpjfmgCuAu3HfV4ygJhRo.roa (raw, json)
Hash identifier: hQymzhwAR7bcGcWrcZ25f8TEAw2m9iEXVutOVMInqvY=
Subject key identifier: 3D:51:03:1D:3B:69:8D:F9:A0:0A:E0:2E:DC:77:D5:E3:28:09:85:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1CE5A62D9C4F0C9B8B78F36500F7BD35
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PVEDHTtpjfmgCuAu3HfV4ygJhRo.roa
Signing time: Wed 29 Nov 2023 21:04:21 +0000
ROA not before: Wed 29 Nov 2023 21:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:1ce5:9950/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:e5:a6:2d:9c:4f:0c:9b:8b:78:f3:65:00:f7:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 21:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d51031d3b698df9a00ae02edc77d5e32809851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:fc:71:13:19:b9:ec:00:ea:dd:13:e2:c1:
87:4a:eb:89:94:06:76:1a:2c:fb:61:52:58:4b:14:
73:a3:48:49:dc:86:60:e5:9b:b7:c4:b9:54:f8:c1:
7f:4a:62:18:ce:35:e0:7d:a6:81:48:f4:c6:c5:79:
c0:32:40:44:79:27:10:fd:d3:55:a8:18:ef:ee:95:
b7:f9:fa:77:52:87:34:f8:89:da:a4:03:82:88:77:
c0:0f:d4:d6:f8:32:3e:82:2c:40:19:48:5e:ed:81:
04:e4:44:f0:56:5b:57:73:7c:9a:af:79:87:d9:1b:
bf:fb:3c:d3:e7:17:eb:ac:dc:73:19:14:fc:ca:0a:
66:e2:63:98:e2:7d:00:a5:29:41:7a:80:ce:a9:3d:
13:7f:e7:ae:6d:67:70:64:9f:52:04:e2:ce:94:cc:
35:8b:10:29:4d:e9:29:78:6b:17:b5:5b:4d:0d:f9:
cc:26:7e:06:af:ff:5a:fb:5f:4c:2c:56:a1:c8:2d:
2b:e5:71:66:09:3b:4b:43:ab:41:3c:68:4f:f7:f5:
63:37:22:8b:32:39:d6:46:be:05:0a:73:bb:9d:68:
03:03:0f:e6:96:63:7c:64:c1:30:ba:69:23:8f:fb:
16:87:73:96:ea:0e:9f:4f:9e:f0:f5:00:64:e7:b2:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:03:1D:3B:69:8D:F9:A0:0A:E0:2E:DC:77:D5:E3:28:09:85:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PVEDHTtpjfmgCuAu3HfV4ygJhRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:0a:de:2d:d8:db:5c:8c:7a:3a:07:79:fd:41:42:3f:e6:1b:
0e:81:ee:d3:ab:5c:a7:4a:b7:ba:51:15:7d:74:8f:3e:c9:94:
c0:9c:72:b6:6a:9f:18:c6:2b:8b:44:08:ff:a2:d7:69:1e:8d:
97:e0:f3:2d:ac:16:37:7e:35:d4:52:e1:c1:10:10:05:62:b2:
04:6a:67:a0:0d:5b:c9:85:07:78:26:b2:fd:4b:91:8d:0b:aa:
d1:3e:f4:19:f1:76:00:f8:47:4d:dc:2d:45:18:fa:88:cb:f0:
04:e4:70:01:57:7c:9e:0f:8f:95:b1:1c:dc:d3:b5:49:d1:1c:
b2:d5:21:37:f0:92:2e:29:c3:21:41:0d:21:3b:0f:30:a9:7d:
96:bc:82:2e:e2:42:c9:7c:11:08:4b:71:77:82:70:80:fc:52:
4b:37:e7:0e:05:94:1a:4d:65:b5:c8:47:8a:3c:10:11:b6:e4:
36:7f:b3:e4:73:c9:85:b2:74:1b:3c:8d:e8:22:1c:71:2f:73:
3c:ff:05:da:da:74:63:db:0d:3d:71:82:62:c3:e9:82:f2:a8:
96:85:0f:f1:42:fd:d8:1e:c4:82:35:62:a7:30:29:5d:b9:16:
95:8e:7d:ee:cd:15:4f:9b:af:4b:35:dc:ff:ba:1d:e3:02:01:
d1:63:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:39:07 2025 by rpki-client