Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PMUCqmIGwUlIcoinOIMjbo5TFSU.roa
File: PMUCqmIGwUlIcoinOIMjbo5TFSU.roa (raw, json)
Hash identifier: bCe0PwYp7FKPPqBDehgbV3ZF7Vyt2+KaGcUlhirZ+Uc=
Subject key identifier: 3C:C5:02:AA:62:06:C1:49:48:72:88:A7:38:83:23:6E:8E:53:15:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B842412450A51C3E1248EEFA0BCB352C4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PMUCqmIGwUlIcoinOIMjbo5TFSU.roa
Signing time: Tue 31 Oct 2023 05:10:38 +0000
ROA not before: Tue 31 Oct 2023 05:10:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:841e:7f32/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:24:12:45:0a:51:c3:e1:24:8e:ef:a0:bc:b3:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 05:10:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cc502aa6206c149487288a73883236e8e531525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:fc:92:ab:22:fd:e3:c9:85:a1:a4:6b:28:
18:e9:00:02:2f:a8:91:9f:e0:04:43:a4:32:bb:6d:
bf:eb:bd:06:4c:43:70:21:7f:49:df:e8:57:be:a0:
1a:a5:22:60:50:e7:a5:2d:76:02:31:16:f0:fb:9a:
3b:fd:fd:0e:2b:0a:33:21:cf:bc:9d:5f:62:ad:bc:
f7:15:b6:38:8f:a2:5e:02:e4:4b:57:4b:d3:8a:28:
8e:51:21:4d:ae:e8:2c:df:ce:44:f3:34:37:a0:59:
36:1f:a3:ea:e3:26:46:ab:0f:42:9a:28:c9:af:8b:
93:fb:f2:57:81:89:ed:9f:2a:93:2a:1f:1d:2e:6c:
89:e7:86:f8:a7:67:ff:42:85:d9:02:9b:37:06:98:
95:53:32:34:b6:ab:44:b9:ee:d9:93:d5:5a:17:97:
bc:6a:0e:99:1d:22:d3:07:24:72:59:39:d6:04:3e:
cb:35:0e:8d:6f:f2:8f:82:09:0d:80:11:1f:89:82:
d7:00:f1:f4:b9:d6:ec:7c:a2:52:42:3a:a8:53:c8:
8b:59:62:f5:dd:8f:92:3a:74:e3:2a:8b:bd:36:18:
57:d7:52:21:9c:c8:0f:a1:a6:8d:a3:31:9d:0a:39:
bb:54:25:44:f6:df:fc:b8:24:81:5f:fb:d3:99:b6:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:02:AA:62:06:C1:49:48:72:88:A7:38:83:23:6E:8E:53:15:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PMUCqmIGwUlIcoinOIMjbo5TFSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:d2:ca:1f:32:31:e0:d9:fd:18:d1:6a:a8:12:76:1e:03:c1:
97:39:31:4f:10:4d:15:92:53:e4:64:d7:60:ab:59:e2:6e:2f:
82:72:fd:6b:69:7c:55:be:26:c5:8c:5c:c7:98:1a:98:6c:41:
ac:48:cd:e9:70:58:ef:f5:94:16:9c:5b:c6:2c:2d:7a:86:bc:
79:c1:cd:75:78:82:1d:b2:4c:3b:26:00:19:4a:ff:4f:af:78:
77:e6:26:a1:6d:0b:d0:ed:85:e2:c3:d8:b5:2c:09:8f:79:37:
80:5c:d0:4e:c5:07:5b:df:9a:51:52:52:ab:d5:71:b6:8a:82:
4d:75:57:84:35:83:bd:e4:b5:37:23:9d:96:71:1e:98:07:72:
07:66:dd:45:95:98:1c:fc:52:03:7b:29:25:3e:18:7e:90:13:
51:3e:ee:19:9d:10:c1:22:c8:29:93:fc:e8:62:c3:00:77:8c:
cc:f9:3d:b8:8c:b2:73:ed:da:23:df:9d:01:f0:27:6b:65:a7:
91:c7:1c:d5:25:eb:5a:79:70:45:66:06:36:3f:87:ba:bb:21:
4e:2a:b9:a4:fb:e5:b2:18:cb:42:48:6b:1b:b7:e0:d0:2a:7c:
f4:19:3e:eb:37:a8:5b:ee:b2:7f:e6:0b:67:48:98:f2:46:fe:
5a:35:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:39:13 2025 by rpki-client