Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pj0buEN_9QtQxE00tojSKEhnYsY.roa
File: Pj0buEN_9QtQxE00tojSKEhnYsY.roa (raw, json)
Hash identifier: gFD9J0AoBM6QZne3ZJ/59st4pNdVKAkOUzHBxc+n79A=
Subject key identifier: 3E:3D:1B:B8:43:7F:F5:0B:50:C4:4D:34:B6:88:D2:28:48:67:62:C6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AADCC1E587150C7E4D7FD800CBB90DC6B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pj0buEN_9QtQxE00tojSKEhnYsY.roa
Signing time: Tue 19 Sep 2023 14:15:50 +0000
ROA not before: Tue 19 Sep 2023 14:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:cc:1e:58:71:50:c7:e4:d7:fd:80:0c:bb:90:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 14:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e3d1bb8437ff50b50c44d34b688d228486762c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:d5:e9:cb:58:a1:db:24:76:ce:05:43:61:
72:54:fd:c5:9e:3e:9a:53:f8:5f:8f:81:16:8d:e2:
9d:30:4e:28:60:47:fb:18:fe:d1:30:06:02:7e:ae:
a5:dc:5d:16:08:cb:bc:98:84:5c:c6:09:e6:1b:e9:
5b:56:95:db:e9:d1:50:5c:68:47:b1:b5:a4:08:08:
23:bf:cc:1f:1a:55:d1:b0:f6:b8:2e:98:55:f7:95:
29:72:17:b1:f8:f1:2f:ef:fb:39:49:29:96:bb:20:
58:b9:b6:59:94:2c:4b:c3:1a:64:66:6d:77:e5:66:
7b:d9:b7:8e:ca:4d:7b:69:7d:ee:f9:a4:d1:51:83:
b7:86:70:f2:63:10:69:f8:8a:25:79:f9:6a:09:9b:
4f:17:99:b0:d8:32:b4:67:d0:91:4e:7d:fc:dc:f7:
7d:c7:64:15:b3:b8:e8:00:a2:a0:d9:f1:60:3a:41:
f8:28:89:78:4b:c4:4f:46:cf:b5:65:b3:9e:4a:23:
6e:e6:be:dd:6c:45:98:06:5a:40:a2:41:83:7a:0c:
9c:70:79:3f:1c:76:d5:c7:e0:dc:b4:ba:1c:5b:e6:
ac:ba:85:a8:68:a6:a7:59:90:d5:2b:fa:e7:0b:9f:
e5:f5:34:89:47:bb:b9:54:1a:62:08:9c:69:8e:ad:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:1B:B8:43:7F:F5:0B:50:C4:4D:34:B6:88:D2:28:48:67:62:C6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pj0buEN_9QtQxE00tojSKEhnYsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:8e:aa:56:83:21:45:e2:1f:34:24:2f:1b:ab:e6:41:98:5e:
a4:ed:8d:02:86:6e:c4:ab:73:1c:4b:97:f1:9d:db:00:13:6e:
4b:ee:08:ae:96:14:36:45:33:07:ae:88:fa:26:a5:ac:b8:9c:
2f:82:95:1a:00:f8:bc:fe:3f:0f:ef:ed:cd:ec:b6:ea:61:05:
a5:e9:75:d0:2c:2b:1e:70:47:7d:5a:01:cb:a0:44:79:1a:7b:
72:53:dd:86:e1:36:01:30:9a:33:fb:95:61:49:34:79:a6:ac:
3e:3c:41:8b:6a:be:f7:fd:bc:cb:d0:40:1e:48:84:47:51:6b:
1b:6e:a2:94:f3:c3:b6:af:53:49:01:7b:bb:f3:ad:35:3a:7c:
66:2a:b0:5e:6a:ff:94:44:33:69:31:ff:96:33:03:5c:63:20:
c5:3e:ff:63:77:6e:f2:76:94:d9:69:33:be:8b:d4:f3:5c:a3:
01:c3:bf:c3:83:df:8b:bb:a5:c3:5d:ac:b2:61:87:36:ce:a7:
76:0a:7f:91:38:64:1a:a5:26:91:3f:fd:b6:c3:6f:69:dc:6e:
81:09:dd:50:da:c9:dd:13:f0:10:22:aa:80:ce:5c:f9:fe:43:
54:fd:c3:55:bf:33:21:22:c4:9b:88:66:ad:b7:f6:a6:34:53:
d9:7e:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:11:38 2025 by rpki-client