Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PLeVMqU5aTXsbPHApK5cGs0abtY.roa
File: PLeVMqU5aTXsbPHApK5cGs0abtY.roa (raw, json)
Hash identifier: dK37xJpL/fNwnR6gckJK2lfgTTu0BUPLHvKGaiddSM0=
Subject key identifier: 3C:B7:95:32:A5:39:69:35:EC:6C:F1:C0:A4:AE:5C:1A:CD:1A:6E:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABEB573C3050F8C03E06DD1D9564DAF72
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PLeVMqU5aTXsbPHApK5cGs0abtY.roa
Signing time: Fri 22 Sep 2023 21:04:37 +0000
ROA not before: Fri 22 Sep 2023 21:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:beb5:3841/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:b5:73:c3:05:0f:8c:03:e0:6d:d1:d9:56:4d:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 21:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb79532a5396935ec6cf1c0a4ae5c1acd1a6ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:fc:5e:94:ec:f0:15:a2:9c:2f:94:56:34:
b4:aa:eb:1e:43:8e:22:50:2a:ca:83:2c:f4:01:33:
06:ce:53:ad:48:e7:f9:b9:30:14:68:98:10:59:45:
68:fb:cb:7f:01:06:a0:02:17:af:e2:86:b3:6d:77:
f3:f4:ca:80:ab:b7:c1:19:26:bd:0a:5f:0f:aa:d1:
e9:17:e4:22:4c:0e:7f:6c:6f:80:e6:38:c4:2c:b3:
d8:76:bc:16:8e:c6:2a:ad:ec:af:a2:79:aa:ee:d8:
f5:4b:7f:8a:d6:6d:bf:b9:b3:b1:d3:03:34:11:81:
c3:fc:67:9e:77:3f:ed:18:83:ae:34:98:9a:8a:72:
56:0d:9b:f2:9b:95:a9:02:dd:83:c7:10:91:7f:b9:
f3:c2:5a:02:19:c8:77:a7:3d:4b:03:d5:2b:3b:02:
fa:dd:5c:48:3b:ee:15:1c:f0:b1:f4:53:75:51:08:
08:ab:9e:d3:fb:dd:76:15:de:4d:a3:c4:4b:ec:09:
0e:6d:3a:7e:07:8a:7c:41:10:d5:f0:31:75:84:dd:
af:67:32:97:7e:76:cc:7d:69:52:d4:59:74:12:58:
10:03:f8:80:c9:dc:08:41:c6:d1:9b:fe:dc:d4:5f:
67:54:fc:f1:cb:8f:2f:c3:4a:f5:a0:f7:51:c2:88:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:95:32:A5:39:69:35:EC:6C:F1:C0:A4:AE:5C:1A:CD:1A:6E:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PLeVMqU5aTXsbPHApK5cGs0abtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:81:67:b6:a6:dd:6e:82:2c:70:5a:79:59:1c:f3:00:41:f2:
ab:6b:42:2e:12:6a:2e:52:c3:fd:d6:5a:39:ba:3e:28:4c:40:
ef:39:e6:15:2b:dd:cb:73:26:4c:1a:a0:29:7e:b9:f8:81:4f:
70:31:a2:c9:c7:8e:ee:c3:2a:d7:50:9e:e9:15:e7:0a:71:2a:
ef:62:1f:e1:30:cd:e4:89:be:15:00:1a:1e:26:6c:a9:7f:42:
84:1e:2a:5b:f6:c1:3e:43:e7:75:a1:26:e9:a6:7a:8c:2a:99:
60:57:80:0f:d8:a3:d6:fd:92:9b:b1:ad:63:5e:16:dd:8f:74:
5f:ad:39:27:f4:e4:21:f4:c7:74:3d:df:e9:f6:78:b1:99:80:
25:39:9a:86:06:37:24:73:ac:c0:d8:52:5d:7d:0d:78:a0:23:
b4:f6:5c:95:f1:57:93:68:92:08:8b:75:4e:dd:5b:fd:1b:61:
58:ab:3b:c7:1c:2f:2f:66:69:e6:59:c5:65:83:10:33:63:d0:
46:ea:41:73:21:90:1a:f6:91:57:cb:55:e9:e0:b8:77:7d:18:
06:b8:d1:f2:1f:82:19:e2:48:d3:26:76:28:45:5f:3f:59:5c:
90:73:bd:56:4d:91:a6:21:e6:57:32:76:b1:1a:50:95:26:36:
6e:fd:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:31 2025 by rpki-client