Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pnNg5mTz5hie5T0e8fT10zERxns.roa
File: pnNg5mTz5hie5T0e8fT10zERxns.roa (raw, json)
Hash identifier: JxFs9TAQnHWhiWdad3YLzcsB/+WClVQW2+rGKzbuQbw=
Subject key identifier: A6:73:60:E6:64:F3:E6:18:9E:E5:3D:1E:F1:F4:F5:D3:31:11:C6:7B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFAD2F75EA8454FF14861213A7C952A44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pnNg5mTz5hie5T0e8fT10zERxns.roa
Signing time: Thu 23 Nov 2023 06:16:51 +0000
ROA not before: Thu 23 Nov 2023 06:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:d2:f7:5e:a8:45:4f:f1:48:61:21:3a:7c:95:2a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 06:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a67360e664f3e6189ee53d1ef1f4f5d33111c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:c0:92:f2:fe:88:bd:bc:fe:48:cf:95:e4:
c7:6d:af:8d:09:07:c8:9b:68:dc:74:c2:f7:14:76:
f0:aa:5c:2b:93:24:8d:f3:1d:63:b6:2e:f5:92:3f:
5e:73:75:e2:03:fc:3a:31:d4:07:3d:b7:b1:9a:25:
a2:7f:2a:3a:cd:85:9b:6c:b5:21:a8:9d:67:b5:ed:
87:fa:9f:b6:ab:61:93:66:ac:ea:26:c9:5c:8c:6f:
e3:cf:72:8c:d3:e4:bd:00:ed:50:e0:39:47:54:6e:
e6:c0:32:a6:cf:82:79:d0:32:3e:89:d5:df:c4:2e:
57:14:10:36:d4:f6:42:c3:d4:ac:2e:04:da:a5:90:
2a:ca:32:38:f6:56:e3:ea:f4:86:b6:86:6f:4e:37:
2c:fb:74:35:dc:1d:20:87:b7:c6:a9:e7:dd:97:cd:
7b:34:c7:23:b7:05:03:43:4f:f0:fd:ed:57:9b:a0:
e5:8c:27:95:1d:4b:86:ab:04:0b:96:78:0f:c3:f8:
fd:5e:04:3e:5e:0c:83:1d:db:d0:98:23:f9:5b:67:
c5:44:a1:ea:65:26:97:26:3a:ac:7b:51:eb:4b:76:
82:bb:90:c5:d7:23:91:ad:f6:26:7f:b1:4c:1c:b1:
00:c5:b0:56:74:6e:c5:a2:f3:b0:b1:18:a4:01:52:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:60:E6:64:F3:E6:18:9E:E5:3D:1E:F1:F4:F5:D3:31:11:C6:7B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pnNg5mTz5hie5T0e8fT10zERxns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:fb:bf:cf:94:31:c1:58:e3:e7:f9:34:a9:ff:d2:9d:44:e5:
c0:f0:5c:68:42:6c:f8:eb:ab:e5:35:0f:c1:c7:4b:5d:ed:68:
d1:ea:56:55:42:3e:03:f8:a4:e6:32:6a:a3:22:0f:8e:d5:d6:
62:40:33:c9:36:0b:f1:eb:0e:76:20:fa:46:42:e2:b5:8e:19:
62:2c:f5:2e:55:9d:01:c2:1b:dc:1a:5e:04:89:60:45:48:e2:
7d:99:26:0f:1b:8d:ae:e6:48:7a:5f:82:98:03:5d:75:64:33:
5f:1e:18:07:3e:cb:65:d3:9b:d5:7d:b7:f4:8b:2f:98:8e:e2:
37:52:f2:8b:c9:b4:e3:50:41:8e:0f:77:e1:a6:e6:6e:ef:ed:
b0:a5:62:7e:a3:d6:91:ce:94:f7:dc:23:36:2e:cf:8b:94:8c:
b7:a7:1c:35:ac:b8:fa:f6:e8:a1:d0:84:ff:99:27:77:f4:61:
a7:48:0f:c9:0f:af:96:5f:5b:bf:7d:fe:a2:38:36:55:0b:c8:
e0:71:fb:37:bd:1b:4a:a2:21:26:db:6c:9d:1e:96:0a:4c:c3:
a4:5e:b7:26:2a:44:24:5c:b6:83:c6:30:06:b0:f2:ae:c5:10:
03:49:f9:65:5e:88:14:64:2f:ca:bc:00:fb:18:82:66:d9:73:
ae:de:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:21:47 2025 by rpki-client