Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mapPGKDWXKrkRgh_Rk52p4Z4j98.roa
File: mapPGKDWXKrkRgh_Rk52p4Z4j98.roa (raw, json)
Hash identifier: wyZCnjZLJRjhzg7tjvOgKVhZXvF7EiXLCDK56L08w20=
Subject key identifier: 99:AA:4F:18:A0:D6:5C:AA:E4:46:08:7F:46:4E:76:A7:86:78:8F:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADF5C9013B6869A987A26883D1327FE03
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mapPGKDWXKrkRgh_Rk52p4Z4j98.roa
Signing time: Fri 29 Sep 2023 05:14:59 +0000
ROA not before: Fri 29 Sep 2023 05:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:5c:90:13:b6:86:9a:98:7a:26:88:3d:13:27:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 05:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99aa4f18a0d65caae446087f464e76a786788fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:9d:e2:08:43:26:95:3e:7c:ac:6c:e7:62:
77:cf:1d:a4:5a:26:7c:ff:da:1f:c5:15:13:9b:0b:
8c:c3:4e:8d:f4:1e:9b:0d:14:3c:98:65:6e:81:0d:
68:d5:ee:5f:6b:fd:df:87:cf:10:83:1a:9d:23:20:
48:5d:09:b1:4e:9c:b6:d9:60:1d:36:01:51:4a:ad:
c6:c6:0d:62:24:a0:b6:9b:3a:fa:57:7c:86:3e:90:
4d:41:c5:45:40:91:5a:f8:4d:52:6e:6e:43:ec:63:
51:92:0d:ca:98:6c:7b:2b:ac:ac:90:46:7a:e9:df:
ac:43:30:c6:8c:8a:c7:76:b6:64:86:ba:e0:71:9c:
8e:df:91:11:3d:a9:5e:60:32:9a:6c:17:d8:77:bc:
31:31:eb:7e:9b:55:c7:0d:e6:e0:3c:21:f9:43:b2:
49:8d:33:6a:de:70:61:94:95:38:44:95:9b:ee:5f:
f2:69:3e:9e:38:06:0f:a3:9a:84:e3:07:8f:ce:bd:
ff:f5:31:5e:b9:2b:3e:89:54:49:f6:a5:e6:29:0c:
26:ba:6b:47:26:f4:47:03:28:c3:82:25:2b:02:e3:
53:7f:13:62:f1:ac:e6:b4:2d:56:8b:b0:6f:b2:b6:
80:36:18:a3:48:c9:07:36:d9:b6:f5:8a:83:87:c3:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:4F:18:A0:D6:5C:AA:E4:46:08:7F:46:4E:76:A7:86:78:8F:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mapPGKDWXKrkRgh_Rk52p4Z4j98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:0b:21:bb:b7:0e:c1:d8:4e:62:1c:9b:22:68:19:af:2b:a4:
94:9c:d4:b0:40:40:24:1e:27:19:a1:f6:d0:6b:a3:6f:bf:64:
0c:9b:03:c4:37:ed:47:58:3d:27:dc:d8:d1:e8:e1:bb:31:35:
e5:1b:89:34:0c:99:09:c8:61:d1:73:d0:63:cb:87:13:b1:b0:
79:76:8b:1a:ab:3e:70:03:00:fa:2b:67:eb:5d:07:89:93:cf:
6e:c8:b5:7a:97:76:c5:7f:6f:bf:57:c4:7f:d1:b2:19:39:de:
2d:ad:d9:b8:4d:cc:95:a9:12:a9:63:9f:c0:0f:c1:18:cf:09:
c1:cc:b4:ad:2a:ee:0c:3f:08:23:70:a1:a8:2f:f1:f2:63:87:
9c:75:a8:1b:c4:7e:91:d6:72:8e:a9:12:5a:5c:51:46:56:06:
8d:be:06:5b:8e:e8:f6:3e:db:83:1c:c4:bc:77:3c:02:61:35:
48:8e:fd:bc:12:3a:43:83:12:e6:52:b4:3b:6f:4f:f1:06:86:
5c:19:ce:83:86:15:3e:3f:fd:08:3b:21:10:d9:38:89:68:3c:
61:95:38:54:2a:5e:5e:76:08:39:a9:39:c7:88:01:85:6f:8b:
b1:63:b4:a3:82:df:2e:af:45:6c:13:0c:47:af:4f:0f:31:7a:
16:8d:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:03:06 2025 by rpki-client