Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pmNZPEvsfyu78BkhHYY2XCVclNo.roa
File: pmNZPEvsfyu78BkhHYY2XCVclNo.roa (raw, json)
Hash identifier: AFQl6o83A/4RDRN/zqnOYXHVgHp4r6G7Au3nIvwsxDk=
Subject key identifier: A6:63:59:3C:4B:EC:7F:2B:BB:F0:19:21:1D:86:36:5C:25:5C:94:DA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD6F492D6402FAA0F124127A79387FD61
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pmNZPEvsfyu78BkhHYY2XCVclNo.roa
Signing time: Wed 27 Sep 2023 14:04:27 +0000
ROA not before: Wed 27 Sep 2023 14:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:d6f4:5fa1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:f4:92:d6:40:2f:aa:0f:12:41:27:a7:93:87:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 14:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a663593c4bec7f2bbbf019211d86365c255c94da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:46:50:8f:84:72:e7:08:04:8f:18:ac:56:
e8:39:30:ec:a6:03:33:68:72:ac:9e:32:1f:73:83:
50:13:af:c3:fc:4f:87:2b:c1:66:08:2e:fe:51:c9:
bf:f6:fe:b8:68:0b:c4:f5:24:65:43:3f:a6:ef:08:
29:a8:ac:18:e4:5e:f1:45:e4:b3:41:cb:b9:a5:f5:
9f:22:35:a8:61:f1:94:53:fa:7e:5a:5a:07:8d:ae:
4f:bf:42:53:71:26:69:e0:64:94:86:7d:ff:f3:38:
0e:63:68:5f:be:52:93:57:e3:80:52:32:96:8c:2f:
9c:0f:3c:f7:4b:ff:5c:e3:cd:82:be:94:34:1c:b0:
95:4f:b7:63:0d:fb:46:8c:f4:72:d1:65:83:ae:36:
8b:6e:d0:30:af:19:5d:01:ed:4c:eb:4b:89:ac:37:
93:88:60:22:12:06:0d:bb:d3:06:5b:9b:9f:24:25:
7c:be:a0:59:90:a0:40:15:a3:07:1c:de:21:b1:58:
fe:7c:d6:90:b1:10:db:ac:18:16:d5:61:88:d1:3f:
9d:f1:79:3f:d7:af:b7:1c:d5:90:73:c0:e9:4f:a8:
ad:54:c5:6f:02:03:2c:35:d6:3d:ce:aa:68:50:97:
52:b6:0c:6a:4f:67:07:86:df:fe:6e:f5:3b:ec:03:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:59:3C:4B:EC:7F:2B:BB:F0:19:21:1D:86:36:5C:25:5C:94:DA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pmNZPEvsfyu78BkhHYY2XCVclNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:a3:7f:78:19:0c:9d:be:c1:bb:76:17:2b:b9:5b:63:12:96:
90:0f:ca:3a:7d:1d:b5:5a:10:b1:c5:7e:43:ad:fd:f3:d1:e8:
97:00:43:07:2d:44:37:56:e6:2b:13:f3:79:b1:ae:77:74:d8:
df:24:53:8e:6a:fe:f6:6e:36:a7:7f:0b:30:d9:47:4a:08:65:
fd:aa:de:40:37:62:b9:cf:9d:23:bf:20:4a:dd:2d:c6:b2:39:
d3:15:8a:c3:68:3c:b9:06:43:00:6d:15:7d:ef:08:b3:31:a3:
68:ee:47:2f:46:40:ff:4a:3d:74:22:19:0b:60:92:e6:c9:cb:
d8:90:2a:2a:cf:03:73:0b:40:65:80:fb:5d:32:a1:e6:11:37:
31:e7:a4:61:40:0b:1c:53:4d:1c:32:91:04:ee:97:8f:4c:7d:
32:54:9f:69:ad:b4:37:43:b3:29:97:cb:94:11:99:b3:a7:aa:
f6:6c:96:aa:91:6c:64:89:cc:0e:68:e0:f0:02:79:e4:75:da:
45:16:4e:e5:56:f7:bd:46:e4:02:2e:1e:47:e6:e5:c8:a9:ef:
3a:28:59:f9:06:ae:c6:b6:8d:ab:8e:36:1e:3b:97:94:43:07:
3d:59:c7:73:04:b1:2a:e1:3d:14:c1:f2:a7:93:56:ea:4d:50:
50:0f:aa:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrW9JLWQC+qDxJBJ6eTh/1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI3MTQwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjYzNTkzYzRiZWM3ZjJiYmJmMDE5MjExZDg2MzY1YzI1NWM5NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD9GUI+EcucIBI8YrFboOTDspgMz
aHKsnjIfc4NQE6/D/E+HK8FmCC7+Ucm/9v64aAvE9SRlQz+m7wgpqKwY5F7xReSz
Qcu5pfWfIjWoYfGUU/p+WloHja5Pv0JTcSZp4GSUhn3/8zgOY2hfvlKTV+OAUjKW
jC+cDzz3S/9c482CvpQ0HLCVT7djDftGjPRy0WWDrjaLbtAwrxldAe1M60uJrDeT
iGAiEgYNu9MGW5ufJCV8vqBZkKBAFaMHHN4hsVj+fNaQsRDbrBgW1WGI0T+d8Xk/
16+3HNWQc8DpT6itVMVvAgMsNdY9zqpoUJdStgxqT2cHht/+bvU77AMZhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKZjWTxL7H8ru/AZIR2GNlwlXJTaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcG1OWlBFdnNmeXU3OEJraEhZWTJYQ1ZjbE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABWjf3gZDJ2+wbt2Fyu5
W2MSlpAPyjp9HbVaELHFfkOt/fPR6JcAQwctRDdW5isT83mxrnd02N8kU45q/vZu
Nqd/CzDZR0oIZf2q3kA3YrnPnSO/IErdLcayOdMVisNoPLkGQwBtFX3vCLMxo2ju
Ry9GQP9KPXQiGQtgkubJy9iQKirPA3MLQGWA+10yoeYRNzHnpGFACxxTTRwykQTu
l49MfTJUn2mttDdDsymXy5QRmbOnqvZslqqRbGSJzA5o4PACeeR12kUWTuVW971G
5AIuHkfm5cip7zooWfkGrsa2jauONh47l5RDBz1Zx3MEsSrhPRTB8qeTVupNUFAP
qrw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:53 2025 by rpki-client