Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pnbv2CXjdz2qcclKxV7cR4Ts5gg.roa
File: Pnbv2CXjdz2qcclKxV7cR4Ts5gg.roa (raw, json)
Hash identifier: PwIoht9ox6LLZXzyS59us/VszD0dR22u61CJeqkenKI=
Subject key identifier: 3E:76:EF:D8:25:E3:77:3D:AA:71:C9:4A:C5:5E:DC:47:84:EC:E6:08
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC85B222833000015A8FDC03923C27E05
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pnbv2CXjdz2qcclKxV7cR4Ts5gg.roa
Signing time: Mon 13 Nov 2023 11:04:57 +0000
ROA not before: Mon 13 Nov 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:c85a:d8ec/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:5b:22:28:33:00:00:15:a8:fd:c0:39:23:c2:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e76efd825e3773daa71c94ac55edc4784ece608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:7c:bc:53:03:c0:5c:15:70:38:cd:86:ab:
df:d8:31:3a:7c:f1:d4:18:4b:4a:b6:a8:d8:52:fa:
c0:68:99:94:15:6e:15:04:40:1e:00:97:b4:02:51:
40:b4:05:e3:04:12:68:be:4d:fb:d7:fd:02:30:ab:
93:61:8f:9a:56:59:02:85:7b:b6:4b:c6:2c:bc:57:
f0:20:dd:8c:fe:9b:4a:0e:68:be:9c:f4:4f:d7:3c:
cb:96:a2:c4:8a:1b:16:27:75:08:40:4f:73:df:9f:
87:a8:a8:e8:6b:e5:00:0c:2c:58:ef:d0:fe:27:d2:
e9:19:ce:35:31:c6:9c:37:5b:bd:c8:3e:fc:5e:71:
aa:1a:16:20:7e:3e:31:de:df:19:a6:e1:ff:16:a4:
04:26:ed:d8:af:bc:9c:93:ad:17:26:db:1c:fb:53:
dc:15:29:70:e1:d9:a0:8e:02:35:14:d9:3b:3b:e8:
d8:53:72:63:11:f7:4d:7f:73:64:12:22:15:1f:05:
f7:fb:05:b5:a3:d5:1a:88:e0:a8:da:a8:4c:72:8a:
72:eb:f3:0e:fd:10:d3:00:3f:9e:7e:41:ff:2f:60:
a1:ee:2b:4e:eb:6a:af:f1:9b:6e:2a:0d:25:89:62:
ef:9e:58:23:f5:69:92:27:6a:de:c1:0f:a4:5f:27:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:76:EF:D8:25:E3:77:3D:AA:71:C9:4A:C5:5E:DC:47:84:EC:E6:08
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pnbv2CXjdz2qcclKxV7cR4Ts5gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:69:ed:0f:a8:ee:14:77:1f:d0:9c:31:06:e4:73:1f:28:33:
c7:48:f6:0a:bb:04:b7:ab:69:e7:69:53:4c:e6:ba:4a:e6:3d:
d4:ad:b7:8b:62:8b:f0:fe:01:6c:59:d8:f5:c9:ff:ae:46:00:
60:a8:cd:83:26:9c:fd:9a:d7:38:e6:bc:93:61:1a:f9:3f:0a:
85:8a:7d:ce:fa:aa:4e:b5:7d:09:63:51:8c:7d:99:e5:c0:0c:
bd:66:da:33:bf:6b:1d:eb:bc:ea:4f:81:a1:9e:96:2c:03:19:
ab:44:4c:a2:c2:ae:af:29:10:b1:21:77:e7:4d:02:6f:92:ff:
91:13:70:81:9d:93:f6:96:aa:82:0b:8c:1f:f5:af:12:e3:e2:
e5:78:9f:c7:35:44:6e:0e:08:a8:17:c3:68:2a:e2:ce:94:6f:
a5:69:db:4c:10:40:92:57:58:0b:a6:ad:9d:94:80:34:b3:03:
fb:11:6f:ab:59:5c:b2:12:35:ab:eb:29:8f:33:94:3d:ab:24:
43:35:54:0f:57:57:da:6b:82:a3:c6:4d:44:d8:6d:08:fe:a4:
22:d2:63:57:06:f9:48:dc:ec:c1:35:16:c2:a1:52:c2:36:e5:
6b:ab:42:a1:aa:3b:af:c9:1f:ac:50:68:f6:8f:53:86:eb:ca:
66:a1:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:53:33 2025 by rpki-client