Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pkknRuerwTsVHpHWZQnyCwKoFJU.roa
File: pkknRuerwTsVHpHWZQnyCwKoFJU.roa (raw, json)
Hash identifier: tNhOReeri6lpUhH7STfYa8SNvcVLuWKpx72NZo7jJT0=
Subject key identifier: A6:49:27:46:E7:AB:C1:3B:15:1E:91:D6:65:09:F2:0B:02:A8:14:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD23AE6E71EE8464C981CFBE03696A7D7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pkknRuerwTsVHpHWZQnyCwKoFJU.roa
Signing time: Wed 15 Nov 2023 09:05:57 +0000
ROA not before: Wed 15 Nov 2023 09:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:d23a:56f8/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:3a:e6:e7:1e:e8:46:4c:98:1c:fb:e0:36:96:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 09:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6492746e7abc13b151e91d66509f20b02a81495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:de:31:04:ee:9d:5b:ce:27:23:53:16:18:
08:bd:9d:99:84:93:6c:f8:af:90:fc:24:b6:cf:7e:
50:14:98:29:b4:8e:8a:f4:00:12:f6:9a:aa:2d:88:
05:e9:aa:41:40:5c:bc:d0:54:c7:1c:30:a2:07:a9:
7d:46:ea:dd:35:af:4d:c9:f1:b2:d2:e7:4e:5d:f9:
80:d4:12:e5:bf:fa:b6:eb:70:1b:de:be:a6:4f:48:
0c:c1:a9:a3:34:1f:0d:02:fe:43:b2:e5:fc:a7:ad:
71:11:0a:a1:e3:ac:94:a5:fb:72:97:a9:7d:ec:72:
87:f5:1f:d5:eb:4e:df:59:f6:c5:21:df:8d:6f:a1:
3a:82:06:a5:c9:f6:8d:89:5e:e6:68:d9:71:eb:84:
e8:4f:36:1a:cd:25:d6:d9:ff:34:8f:8b:10:be:85:
9d:f8:64:b3:ab:09:82:0d:7d:39:ad:ea:e6:83:31:
79:cc:f7:9b:f2:06:d0:c3:62:3a:d6:6d:2a:b1:d4:
4d:45:42:2a:16:ef:e2:15:f7:3a:2c:18:ca:e8:05:
2d:fe:7c:f1:86:de:6e:11:6d:5e:60:90:a6:89:38:
02:ed:05:d8:87:3e:95:2d:81:5f:cb:0d:50:a2:02:
69:da:7f:e9:03:79:bc:5e:8c:71:f6:40:bf:6e:87:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:27:46:E7:AB:C1:3B:15:1E:91:D6:65:09:F2:0B:02:A8:14:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pkknRuerwTsVHpHWZQnyCwKoFJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:8e:2d:88:09:64:6c:33:e1:77:b3:ce:2e:e6:5a:7a:0e:63:
5e:aa:52:02:49:a7:45:39:d5:30:fc:af:3d:42:b3:2b:6b:c2:
b4:3f:32:86:50:0a:4e:59:f3:10:4a:c7:fb:43:19:5f:b9:89:
b5:e0:8f:29:48:11:cd:dc:ce:95:9d:bf:e3:f4:49:8e:04:f6:
e6:ac:d0:34:2c:bc:81:8c:d1:e7:24:6e:65:4a:f9:a7:a0:7c:
8c:41:f6:50:33:a4:86:2d:c1:75:46:1d:92:bd:99:bc:8c:ce:
2f:d9:94:5f:ec:e6:1c:7a:6e:9c:d3:a7:5c:e5:ca:72:15:08:
9d:66:7d:4a:ad:8c:d2:25:e5:b6:c3:ac:1b:a8:cf:c4:c9:ce:
4e:e2:96:41:03:5e:ee:1b:de:88:a6:63:0f:90:c0:56:91:50:
d2:a5:bb:d9:37:ff:9d:de:87:be:91:20:ab:38:6c:e5:a9:af:
01:28:65:d3:a7:42:9d:cc:99:5c:0e:0a:c5:a3:49:6e:a0:d0:
48:94:c6:29:4e:2a:fa:26:c7:2b:60:5b:25:0d:92:42:be:b7:
4e:e7:6c:0b:75:06:07:aa:b4:f2:f6:be:01:2a:ad:0f:ff:d0:
76:3c:93:f9:40:ae:63:9c:43:22:82:7a:30:f3:15:ae:7a:0e:
86:36:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:40:57 2025 by rpki-client