Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PKyrOh1v1RTUu7HtwF68V_BlfGU.roa
File: PKyrOh1v1RTUu7HtwF68V_BlfGU.roa (raw, json)
Hash identifier: Eu785YZRuD0KM9YgN13g5FASmPNyvCYIFOd1VGqsmF0=
Subject key identifier: 3C:AC:AB:3A:1D:6F:D5:14:D4:BB:B1:ED:C0:5E:BC:57:F0:65:7C:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC1B43F1C93D4546C0C2CBE1783ACE575
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PKyrOh1v1RTUu7HtwF68V_BlfGU.roa
Signing time: Sun 12 Nov 2023 04:04:57 +0000
ROA not before: Sun 12 Nov 2023 04:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c1b4:2f24/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:b4:3f:1c:93:d4:54:6c:0c:2c:be:17:83:ac:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 04:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cacab3a1d6fd514d4bbb1edc05ebc57f0657c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:1f:91:31:75:30:39:74:f7:f2:48:8a:6f:
17:6a:1a:07:fc:7e:0d:b5:71:b5:d7:32:dc:c0:ba:
ab:82:ad:b2:e7:5d:76:7a:7e:9c:bd:0b:1f:54:92:
53:12:8b:f2:38:2f:1d:2f:0b:2f:d0:86:88:fb:a2:
68:22:68:cc:6b:38:48:1f:75:cd:36:99:94:d2:07:
c0:86:14:c7:ea:c8:b3:9a:e9:45:c7:8f:6b:35:71:
38:78:cb:4c:f7:a7:0a:f8:84:bc:f4:8d:f3:0f:4f:
fa:74:f9:6e:cb:52:3b:f2:9d:26:1b:f6:ab:92:3a:
b5:2f:ed:20:d4:4e:c7:87:59:93:80:39:10:33:a4:
53:80:ca:b0:26:03:af:f0:f5:bd:e4:70:1e:96:a6:
4b:a6:26:8a:e2:69:b9:f8:ea:35:ec:60:d8:b6:e4:
cb:3a:dc:61:6a:d2:83:9a:d5:67:55:20:d3:c9:42:
3a:8d:2f:8e:24:55:70:b2:75:6e:2a:78:82:45:bb:
92:a2:5b:d3:a9:f4:32:32:71:d6:2c:64:27:19:18:
73:7d:b4:6d:2d:67:8a:02:d2:77:fd:e0:83:43:0c:
11:ae:95:28:ef:a2:d3:52:ee:d6:20:9c:93:06:b1:
ab:06:aa:7e:63:06:4e:e4:f2:ee:c1:a0:51:f4:2d:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:AB:3A:1D:6F:D5:14:D4:BB:B1:ED:C0:5E:BC:57:F0:65:7C:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PKyrOh1v1RTUu7HtwF68V_BlfGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:27:98:0a:57:db:8d:5c:fa:aa:6a:aa:1c:8a:da:c3:bc:8a:
32:73:1f:37:5e:94:4f:87:34:25:30:22:83:ac:b8:16:53:c0:
25:72:89:2b:bd:73:17:30:00:ba:40:9a:59:b2:55:ce:b6:90:
21:dd:91:21:b2:39:15:23:19:29:37:8d:16:8b:80:ac:8d:ce:
83:04:de:dc:4f:86:08:f6:8c:91:20:db:49:3c:ef:4c:85:9d:
a5:2d:bf:a0:b1:a7:d7:16:1c:1c:18:c8:b1:9f:6c:4c:ca:e5:
3f:33:6a:9c:ac:92:3a:68:c8:f9:78:a1:69:12:2e:0f:4d:ca:
69:27:a7:e8:7e:d2:e5:94:c5:df:60:ed:6f:d3:d0:c2:ab:d8:
26:8b:13:d5:81:48:67:49:46:9f:de:f5:56:5a:55:ad:97:90:
ab:df:2f:c3:1d:72:65:55:8d:b9:2a:b4:dc:a0:f5:ac:73:e1:
43:f0:b4:85:ec:6b:85:a9:8a:4a:c2:b5:65:af:6e:2c:5f:3f:
db:2b:11:8b:16:61:43:14:1f:24:c8:cf:18:92:db:e7:2d:b6:
d5:fc:86:54:e2:31:52:5a:43:f7:ed:1d:e7:7d:75:07:95:c1:
4a:bb:24:3d:a8:cc:72:cd:21:f9:62:44:4a:0b:c3:6d:d9:31:
c6:00:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:42:52 2025 by rpki-client