Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pwzvHqWEg3m9BvTtYZgqBdBjLlA.roa
File: pwzvHqWEg3m9BvTtYZgqBdBjLlA.roa (raw, json)
Hash identifier: NHseVILhc7QAHFt7k6bbQghOHMXgtCr5iu1dAXs1r9Q=
Subject key identifier: A7:0C:EF:1E:A5:84:83:79:BD:06:F4:ED:61:98:2A:05:D0:63:2E:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C770C07DF8C4FD51AB896F33B477F908A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pwzvHqWEg3m9BvTtYZgqBdBjLlA.roa
Signing time: Sun 17 Dec 2023 09:12:06 +0000
ROA not before: Sun 17 Dec 2023 09:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:0c:07:df:8c:4f:d5:1a:b8:96:f3:3b:47:7f:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 09:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a70cef1ea5848379bd06f4ed61982a05d0632e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:5a:2a:f1:17:71:cc:8f:b2:5f:e0:3c:67:
6b:68:74:02:cb:26:e3:89:2f:64:e4:1d:21:4e:26:
bb:83:27:82:48:11:cd:b8:26:e4:ba:5c:47:18:17:
78:41:91:25:88:55:4a:b3:a9:3c:27:b5:39:b9:31:
a9:c2:bb:92:64:10:3d:ee:e4:1c:81:f7:d2:04:65:
ab:80:f8:cd:89:91:ca:4f:b9:f7:0c:6b:e8:88:a5:
59:4c:08:86:1b:8b:a6:35:2a:ff:da:df:08:6c:e1:
93:d9:3a:05:50:49:50:46:06:b8:95:ed:33:bb:55:
60:c6:fd:3d:32:1a:2c:43:29:fd:62:1f:16:b5:8d:
6b:e9:00:48:96:dd:36:79:f8:32:fd:e0:c9:f0:5e:
a4:77:54:85:74:ea:65:ea:44:fd:b8:c6:bf:c6:9f:
c1:cf:f9:6f:2f:be:22:67:63:81:81:7a:a6:6a:b1:
75:e2:5f:8e:ea:ec:31:1a:8b:9e:6b:7b:a9:ab:6e:
03:f2:85:a8:6e:30:15:44:41:00:3f:8c:ae:5a:4a:
0c:04:a4:f1:49:59:33:c6:9a:0b:36:0a:0a:23:5e:
5c:3e:66:bf:5a:75:13:a1:60:9c:fa:5c:3e:0f:06:
c5:68:6b:25:e3:fb:dd:35:de:2e:62:50:39:4d:32:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0C:EF:1E:A5:84:83:79:BD:06:F4:ED:61:98:2A:05:D0:63:2E:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pwzvHqWEg3m9BvTtYZgqBdBjLlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:cc:4b:b9:e1:5e:ce:dd:c8:c2:47:c6:b5:aa:68:22:3f:63:
4c:a6:6f:a3:a4:db:f8:52:d5:d4:19:8f:01:2f:2c:44:5a:61:
6a:0d:a1:13:f3:31:e3:bc:8e:8d:00:bb:01:17:12:8c:d6:04:
3b:d5:af:26:1c:f5:ba:b5:c5:da:fd:67:f3:f2:c4:ed:38:a6:
8f:46:c4:53:cf:82:b3:98:f3:d3:00:c9:29:a7:09:78:52:f1:
0d:e0:e5:5d:a6:e3:ac:31:1d:0b:18:66:1b:db:c8:db:4b:af:
51:62:1b:e3:d9:5f:17:3f:8e:af:e5:cc:67:7d:ca:24:63:f7:
86:b4:6f:47:86:b3:83:3e:68:4d:5e:02:d9:bf:72:a8:33:ea:
1e:6d:7d:fd:67:fb:a0:81:16:85:cd:3e:d5:37:2b:bf:11:b1:
15:c1:2d:50:42:fc:9c:ef:fd:30:8c:c7:5d:b2:0e:32:8a:00:
9d:b9:e7:c2:b5:b0:13:27:f9:8d:16:d9:92:fa:0f:1a:89:43:
15:a4:ff:07:24:bd:5c:24:40:9d:d2:5f:50:d5:66:b9:a4:ed:
38:00:71:b9:08:b3:36:89:e5:d9:00:12:0d:b1:1e:2f:0f:fc:
d8:ea:ef:81:cb:fc:28:49:45:dc:bf:5f:20:94:fa:58:01:66:
2f:c4:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:53:39 2025 by rpki-client