Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PHeeqw6Bag9xHk1wDoJF5p6MNas.roa
File: PHeeqw6Bag9xHk1wDoJF5p6MNas.roa (raw, json)
Hash identifier: aTYLvvihCogT7FezfB6fFPftuzJOWCH/uEKfC2deysI=
Subject key identifier: 3C:77:9E:AB:0E:81:6A:0F:71:1E:4D:70:0E:82:45:E6:9E:8C:35:AB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB9C3C682244A8C94AC46C6F6B1E8CAEC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PHeeqw6Bag9xHk1wDoJF5p6MNas.roa
Signing time: Fri 10 Nov 2023 15:04:57 +0000
ROA not before: Fri 10 Nov 2023 15:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:b9c3:3981/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:c3:c6:82:24:4a:8c:94:ac:46:c6:f6:b1:e8:ca:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 15:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c779eab0e816a0f711e4d700e8245e69e8c35ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:ab:5b:ca:8b:b1:6a:d7:d5:a9:3d:01:1e:
54:70:d6:e7:55:fc:5a:fc:cb:67:bf:2e:88:c3:42:
fa:b1:33:36:a8:ba:ce:68:84:47:a3:5f:4b:ee:50:
4c:39:8b:37:83:8e:e0:c1:c3:f6:4e:49:aa:d2:c6:
7e:fe:06:f8:c1:73:52:fc:25:c8:47:0e:09:8c:8d:
01:d0:f0:f7:4d:d5:d0:b2:90:63:19:23:12:00:e7:
2c:ad:88:dc:f8:16:92:da:80:f1:27:a7:ff:f6:50:
2e:f1:d5:78:92:55:62:0a:1d:f6:37:a2:81:28:af:
2c:b9:d4:1e:2f:4e:8f:bc:40:46:fc:b4:ad:24:dd:
1b:3e:c3:78:a3:1b:0a:9c:47:5c:a1:ea:27:4a:81:
dd:51:9f:7f:8b:db:10:40:8b:ab:f7:b2:bf:89:8b:
af:d5:54:a7:57:3c:ab:dd:58:52:cc:0e:b3:cd:c6:
38:28:4a:9c:67:ed:47:0a:91:0e:2d:c1:f0:7a:62:
a9:08:4c:f1:c7:48:d4:c2:82:6b:06:b1:c6:dd:51:
39:67:fb:ec:44:19:65:79:a0:86:a1:9d:0c:7d:71:
e7:c5:18:a8:0c:84:db:e9:03:85:ae:88:70:1f:72:
56:4e:26:51:86:30:c2:fd:fa:c2:5c:d1:27:c0:20:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:9E:AB:0E:81:6A:0F:71:1E:4D:70:0E:82:45:E6:9E:8C:35:AB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PHeeqw6Bag9xHk1wDoJF5p6MNas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:8b:7f:f7:52:8e:5c:1c:82:99:1f:36:ed:d8:ce:20:6b:46:
1c:9d:3a:2d:7d:63:35:a4:87:3d:70:44:ca:bf:b9:6e:8b:07:
7c:fc:a2:90:b3:9d:b7:8c:c9:6a:e6:34:68:33:f6:8e:e4:1a:
a9:1d:bc:a4:bb:d1:e3:a3:a5:e9:7b:56:2b:fe:a0:8b:93:02:
9f:fe:c6:18:86:92:5c:de:60:91:49:bc:cf:e4:36:54:d3:cd:
b2:1e:e9:a8:38:21:95:89:ae:96:7f:27:70:8d:f7:e8:30:19:
d0:d7:22:7b:dd:91:28:66:fd:a1:dc:09:51:89:f6:f5:ed:62:
e4:e2:ee:69:31:e6:fb:77:f6:6e:2c:97:92:97:e2:04:81:4c:
e7:97:ac:fa:2b:7f:40:7c:a6:13:42:f7:8b:c6:99:5a:c7:aa:
a3:62:01:5d:17:5a:cf:0f:17:54:5b:cc:22:ab:38:74:b3:61:
ab:44:c7:c9:6a:23:20:bb:25:66:5c:83:03:f3:47:7f:a3:b6:
2f:38:99:48:c6:b6:f1:4a:17:19:96:b8:19:37:4a:50:46:f0:
5f:fe:8e:ae:45:2e:30:91:c8:fe:22:0f:04:38:59:48:9f:b0:
de:72:fc:4f:73:ed:ec:a7:6b:06:ac:4c:d6:0d:65:e5:4b:90:
80:06:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:14:18 2025 by rpki-client