Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PlBfUr3GkCkdjgaZPEUFwgTeWFw.roa
File: PlBfUr3GkCkdjgaZPEUFwgTeWFw.roa (raw, json)
Hash identifier: 0KXTTuFaUXWw1JrwpBqDeS+Mfi0xARna3lmJGM70yqE=
Subject key identifier: 3E:50:5F:52:BD:C6:90:29:1D:8E:06:99:3C:45:05:C2:04:DE:58:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFFF0C514F4820D9C940F5E7EAAA5314F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PlBfUr3GkCkdjgaZPEUFwgTeWFw.roa
Signing time: Thu 05 Oct 2023 13:04:43 +0000
ROA not before: Thu 05 Oct 2023 13:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:fff0:5b4e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:f0:c5:14:f4:82:0d:9c:94:0f:5e:7e:aa:a5:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 13:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e505f52bdc690291d8e06993c4505c204de585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:23:08:e7:7d:9f:75:77:2e:e8:49:51:b5:
68:7f:f5:0d:93:63:60:17:4d:76:31:26:27:e1:73:
af:3d:a3:6a:24:c5:eb:ab:c3:a6:7a:6a:76:31:3b:
c7:67:f0:18:5c:a8:c5:8f:4e:90:75:e7:4d:95:ca:
cf:8f:f8:a3:fd:e9:c3:d5:c4:87:2b:af:78:d5:62:
85:d0:34:74:37:57:b2:22:b9:9b:26:e8:45:37:ac:
6d:0e:b1:fa:71:d8:b0:2e:8c:25:d2:57:d1:27:6a:
89:2e:64:bf:52:e4:c0:8b:c0:62:ba:5c:30:27:19:
00:d4:46:0a:c3:74:fd:f3:e6:5a:57:98:be:b4:d0:
c1:57:5c:32:f5:29:39:81:6d:ed:2b:83:9b:93:e3:
2f:ac:a6:05:b1:d5:92:df:c1:da:07:df:61:c2:90:
ca:29:c9:6f:5d:8c:ba:6d:f2:84:6b:53:1d:12:cd:
86:65:be:57:ee:f3:cb:bb:02:ca:c7:56:93:36:87:
70:99:31:13:b0:35:c8:57:f0:e2:47:50:c6:ea:33:
05:49:5c:07:2d:17:aa:eb:bd:53:1d:bd:e3:42:42:
26:e5:6a:40:96:85:92:dc:10:2e:97:39:b4:22:a9:
c0:3e:d5:b4:d5:b7:93:20:26:1b:52:eb:4b:65:6d:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:5F:52:BD:C6:90:29:1D:8E:06:99:3C:45:05:C2:04:DE:58:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PlBfUr3GkCkdjgaZPEUFwgTeWFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:9f:6d:47:79:52:37:e5:1d:34:14:76:e4:6e:fb:ff:c4:36:
f8:5f:26:14:45:0c:32:97:79:79:b7:98:1e:32:88:7d:dc:c9:
ff:53:4f:8e:66:4d:c6:ef:ed:17:83:d2:ec:a0:3a:0f:df:a1:
c3:a7:11:e2:0e:f7:d8:d6:d8:42:2e:e2:84:ea:6f:5e:49:49:
c5:8e:2a:b2:84:e5:76:77:fa:28:63:08:f9:ae:a8:84:92:48:
79:5a:14:1c:0b:a4:fe:e7:d4:07:cc:12:e7:16:be:59:50:62:
40:b1:fa:42:61:ea:41:48:11:76:b6:31:78:39:91:a8:6c:f3:
68:41:77:97:d3:be:7e:6b:8d:af:73:e4:60:e3:a6:47:79:c1:
45:1b:37:a9:82:21:0c:a0:3a:2b:ae:87:36:84:23:8b:cb:35:
44:f2:d2:b6:2c:1e:60:20:15:28:1c:75:de:c0:86:a1:27:ba:
5d:26:a8:bc:53:bf:94:31:4b:4e:fd:f6:83:4a:a5:66:78:2e:
87:a6:a2:2d:cf:8a:8f:e9:b8:0c:a6:8e:2a:34:d8:2c:9b:e3:
c3:9f:68:fd:c2:81:ba:fc:ba:e4:50:e6:f9:b9:21:51:9a:bc:
dc:0e:6a:96:95:6e:18:1b:1f:60:1a:e5:78:af:76:6f:76:a1:
a7:7a:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:04 2025 by rpki-client