Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PGPnfyf5qqgCBj7jo8Zs9GleVjA.roa
File: PGPnfyf5qqgCBj7jo8Zs9GleVjA.roa (raw, json)
Hash identifier: im1/VPXJDQNZY3pJeaWIT68rl66JvTVVrrFMYz7CiBY=
Subject key identifier: 3C:63:E7:7F:27:F9:AA:A8:02:06:3E:E3:A3:C6:6C:F4:69:5E:56:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B728BFB2B9274589A69B7B85012393AA5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PGPnfyf5qqgCBj7jo8Zs9GleVjA.roa
Signing time: Fri 27 Oct 2023 19:10:58 +0000
ROA not before: Fri 27 Oct 2023 19:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7286:c1d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:8b:fb:2b:92:74:58:9a:69:b7:b8:50:12:39:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 19:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c63e77f27f9aaa802063ee3a3c66cf4695e5630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:88:2e:ae:40:83:7a:10:c6:ed:a8:45:82:
c8:57:ee:62:51:13:9a:1d:43:bc:87:0d:26:dd:f1:
46:b4:23:1e:de:30:ff:da:d9:1b:34:df:77:11:cf:
a1:f8:20:63:b3:a1:d4:94:ba:a6:9f:10:c7:f0:44:
0d:11:ac:a8:08:5f:b3:38:40:d3:aa:7b:50:56:fd:
fc:f5:59:05:c8:5f:f4:c8:0a:57:d1:95:53:a0:48:
f6:a4:60:8e:d5:49:ae:32:d0:a6:15:e2:1a:f9:38:
58:8d:3d:21:af:ed:7c:a3:6d:47:80:2e:1f:b4:82:
d3:f5:3e:d8:95:08:6f:0f:71:d8:5a:b5:d9:48:35:
d6:96:62:28:63:b1:37:16:eb:95:39:91:54:da:ce:
67:31:dc:ef:ec:e0:f6:b8:f4:c8:36:8c:4c:d1:bc:
14:df:85:62:e4:18:4c:19:31:c5:81:65:ae:8b:f3:
b9:d7:4a:14:4e:46:99:b8:e7:51:0b:fc:84:cf:21:
32:e3:bb:99:af:57:83:eb:54:39:ce:d7:b2:6f:63:
30:d7:29:d3:3a:f5:02:ac:85:8b:c8:5f:7d:fa:10:
28:a7:3d:6f:26:8a:2d:72:cb:cd:36:24:f6:03:17:
c8:50:05:2e:73:46:d3:9c:46:fb:25:55:de:43:81:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:E7:7F:27:F9:AA:A8:02:06:3E:E3:A3:C6:6C:F4:69:5E:56:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PGPnfyf5qqgCBj7jo8Zs9GleVjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:e5:9b:ac:62:5b:72:4b:e2:ee:71:5b:28:6a:fd:46:a1:6e:
9d:5d:36:35:68:9d:d5:58:e5:0e:a5:15:19:3f:61:f6:b9:36:
15:2c:60:e4:58:fe:d7:bb:2c:71:50:97:e3:62:af:bf:ed:c9:
ad:06:84:c9:63:e6:c9:1b:dd:f5:64:65:0a:3a:4c:52:8a:b6:
10:55:91:8c:c2:55:68:76:11:f7:b8:20:62:64:26:53:e9:e3:
22:3a:e2:66:9e:78:d9:73:cb:e3:ec:bb:07:0f:e8:a2:13:10:
8b:48:18:33:38:9c:83:3c:bb:c1:3f:11:c0:05:6c:e5:0a:c3:
5d:3b:e5:76:c5:e8:48:25:c6:94:6e:33:66:d5:5d:51:2f:71:
82:10:38:56:8e:82:45:36:71:ba:68:2e:65:65:89:74:36:2c:
75:54:20:0b:0e:f5:28:6d:89:36:85:b0:ec:35:d6:f5:b2:8f:
ec:f1:02:4c:a7:ea:f6:f4:f4:6e:2b:47:8a:f6:ac:cc:44:b2:
84:6b:25:07:30:c5:51:7c:3a:c2:d0:c7:01:81:93:b6:a2:b4:
d8:3a:ae:25:0b:2c:da:a7:30:54:d0:ad:ea:61:ae:d0:a0:31:
d0:18:58:d7:e6:14:a2:1f:c1:69:97:09:82:8b:41:ad:af:f2:
32:46:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:03:09 2025 by rpki-client