Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/60-PLTB2J3aTO9T5KivfTYAOgdw.roa
File: 60-PLTB2J3aTO9T5KivfTYAOgdw.roa (raw, json)
Hash identifier: rGrrVt9bX/4NHHbulEaBcv8qk7jxrC8UUAs1Fbs1rTw=
Subject key identifier: EB:4F:8F:2D:30:76:27:76:93:3B:D4:F9:2A:2B:DF:4D:80:0E:81:DC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C68776D285BEF766CAC45E5011C3F4A59
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/60-PLTB2J3aTO9T5KivfTYAOgdw.roa
Signing time: Thu 14 Dec 2023 13:15:06 +0000
ROA not before: Thu 14 Dec 2023 13:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:77:6d:28:5b:ef:76:6c:ac:45:e5:01:1c:3f:4a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 13:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb4f8f2d30762776933bd4f92a2bdf4d800e81dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:09:41:fa:6d:1e:84:27:f8:14:a8:3c:c8:
7b:54:c4:81:e8:69:0e:24:98:99:61:f7:e3:05:5d:
2f:c8:a7:01:cd:c0:47:52:e6:09:39:2a:ba:4e:5f:
22:ca:84:59:71:e2:75:1c:74:ce:9b:44:22:1d:19:
2a:2d:0c:85:3d:81:1b:b0:25:09:fc:ab:6e:86:2e:
de:50:b8:59:ec:53:f5:9e:5c:22:89:4d:8b:79:ce:
51:f2:81:06:da:cc:dd:c5:c7:c9:78:30:8b:07:8f:
c0:38:ba:00:c5:48:ad:da:84:1a:e3:35:c1:62:3f:
a5:aa:e6:8b:69:17:a3:93:4f:8f:3b:6d:b0:7b:d7:
cb:6c:b8:9c:1a:c7:58:c2:f8:6c:65:62:a6:fb:6b:
0b:1c:fd:86:06:36:62:38:12:34:91:a8:77:a9:68:
29:0f:70:c9:b9:a0:d9:d9:7a:a4:54:0e:c4:95:09:
4d:7f:8b:8d:f2:ac:4f:43:79:a1:d0:bd:25:00:04:
ed:68:28:e0:2d:9f:fa:bc:2d:c6:c4:9e:27:45:bd:
16:30:cc:87:a2:5b:05:de:2c:d3:08:f0:38:9d:b1:
3f:27:e5:dc:31:68:fd:12:19:e2:79:13:ca:63:61:
ea:e5:b1:e3:e3:b2:95:30:5b:29:18:36:1c:c3:98:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:8F:2D:30:76:27:76:93:3B:D4:F9:2A:2B:DF:4D:80:0E:81:DC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/60-PLTB2J3aTO9T5KivfTYAOgdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:4f:6d:54:d8:73:87:c6:82:81:fb:a7:36:dd:47:2b:9b:64:
74:96:78:36:b6:ff:6b:77:10:b2:5c:24:10:1e:2f:4b:87:9b:
ca:69:31:19:67:90:00:b8:5d:af:1a:d1:dc:e7:a3:c0:a8:e6:
3f:10:fd:32:96:b6:3f:61:52:6c:51:51:c1:70:57:07:41:13:
5e:fb:e6:3c:55:7b:f6:35:5d:38:69:3e:6f:20:84:8c:0f:ef:
7b:5c:8d:02:6f:59:15:59:4d:6d:2c:27:a4:e6:47:28:24:d2:
bc:f8:5d:24:0c:95:01:19:c0:6b:be:b1:06:50:61:0c:38:bc:
4e:19:da:6a:f7:a3:0f:44:0a:6d:60:ca:8f:a3:cc:94:7c:33:
bf:fe:78:fa:6c:90:22:ca:8c:90:ce:85:b4:7e:b1:e0:01:21:
79:ea:47:4b:56:87:4e:bf:43:4a:f3:6a:f7:b2:8e:ca:ee:a5:
12:90:f1:99:52:2d:f2:f7:4f:ac:ab:80:20:8d:99:c3:df:03:
b9:aa:ee:b2:51:3d:d4:ee:cc:9c:15:47:fc:53:d8:56:44:9d:
f6:6f:a2:bc:2d:e8:ec:60:71:1f:c5:18:b3:2c:f6:7a:c5:d2:
6b:40:26:05:6e:a5:06:12:d8:b7:4d:28:dd:55:e5:d9:79:3e:
0e:b4:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:24:28 2025 by rpki-client