Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pp8Xy5_ci0T1kSs8d_yiRSVmkeo.roa
File: Pp8Xy5_ci0T1kSs8d_yiRSVmkeo.roa (raw, json)
Hash identifier: ru4qQOxag5D9WuDF4giq3dJ8XmMWmzbfcgrn4oizTMY=
Subject key identifier: 3E:9F:17:CB:9F:DC:8B:44:F5:91:2B:3C:77:FC:A2:45:25:66:91:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B54447B3592EA979FBA0CD2AD90F0B84E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pp8Xy5_ci0T1kSs8d_yiRSVmkeo.roa
Signing time: Sat 21 Oct 2023 22:04:15 +0000
ROA not before: Sat 21 Oct 2023 22:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:5444:6c48/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:44:7b:35:92:ea:97:9f:ba:0c:d2:ad:90:f0:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 22:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e9f17cb9fdc8b44f5912b3c77fca245256691ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:79:30:24:9d:3d:a6:f8:2f:5d:db:10:79:
cb:83:07:f9:8a:25:72:ba:ef:9a:a3:3f:95:90:56:
50:ad:77:cc:0f:fb:18:b7:f5:91:f1:ee:1c:43:dc:
26:28:46:ef:43:05:a5:57:2b:91:f7:1e:d7:c1:17:
66:aa:21:57:29:5e:74:40:82:e1:94:3e:27:27:cd:
aa:b3:93:2d:53:cd:43:6a:d6:78:6b:51:6f:72:f5:
7e:55:e6:6c:c5:ee:19:28:7e:bc:68:06:22:89:bf:
ac:3c:51:f9:66:e0:44:f1:1c:92:22:34:c0:f3:23:
f7:7d:f6:ce:a3:ed:fa:fc:63:8b:f8:d5:7e:85:62:
84:eb:18:49:69:de:97:a8:c3:c6:f3:5b:e8:bf:3a:
c4:e5:10:11:1d:13:ed:7c:6d:9e:c8:7b:92:10:7e:
a0:43:a1:ec:c3:2c:8f:b5:3a:4c:1a:3f:de:6c:52:
b8:be:d0:55:36:ba:c0:9b:96:51:fc:a2:7c:56:ab:
54:ad:6a:3d:32:8c:53:ed:99:a4:40:cb:c4:91:c8:
d1:da:0e:3f:a1:01:3d:ca:bb:ca:d4:14:e7:38:60:
6f:25:d2:2e:1b:41:14:09:2b:54:33:3a:a8:7c:18:
a4:1a:f0:e5:38:e3:28:88:9c:3c:37:78:2e:9d:c8:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9F:17:CB:9F:DC:8B:44:F5:91:2B:3C:77:FC:A2:45:25:66:91:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Pp8Xy5_ci0T1kSs8d_yiRSVmkeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:3e:8b:15:24:86:3d:89:d0:99:f2:0e:6d:ea:1d:73:17:24:
15:d7:67:d8:20:c5:a8:ab:fe:cc:58:aa:b9:a4:a2:05:bd:d4:
55:1b:fc:18:42:d1:57:ef:f0:b9:5b:f7:3d:6e:9b:57:e8:f4:
1e:69:0f:df:02:f4:72:e4:41:1c:9a:12:7d:f8:13:89:c3:73:
31:9b:22:e0:29:46:4e:85:d8:01:e9:e7:75:2a:04:3f:a9:7a:
5d:84:c5:44:34:d5:86:1a:a1:8c:6a:fd:60:2b:e0:9d:bc:ce:
b9:81:a4:54:3f:83:66:f6:e0:dd:f5:f2:cc:9c:02:c4:29:01:
0a:ca:3e:ab:52:4e:39:44:c9:f4:88:d1:8c:f1:5b:36:73:b9:
34:cf:58:91:20:87:28:d6:60:08:55:9e:bc:a9:49:d8:dc:03:
30:bc:bb:74:88:bc:ce:c6:75:de:be:73:84:fc:08:04:52:1b:
57:08:3e:e0:b8:d6:91:1e:50:1d:5f:49:72:22:b5:ba:25:84:
06:e8:51:0f:b5:65:82:2a:b5:98:ae:03:17:fd:75:c1:70:bb:
8e:43:d3:e9:b3:ed:cf:96:7f:c2:13:b9:63:0b:ac:c7:71:9b:
46:7f:ec:91:f2:a3:18:61:f6:2e:87:f3:da:d0:e5:20:65:ae:
8f:3b:eb:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtURHs1kuqXn7oM0q2Q8LhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIxMjIwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTlmMTdjYjlmZGM4YjQ0ZjU5MTJiM2M3N2ZjYTI0NTI1NjY5MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8l5MCSdPab4L13bEHnLgwf5iiVy
uu+aoz+VkFZQrXfMD/sYt/WR8e4cQ9wmKEbvQwWlVyuR9x7XwRdmqiFXKV50QILh
lD4nJ82qs5MtU81DatZ4a1FvcvV+VeZsxe4ZKH68aAYiib+sPFH5ZuBE8RySIjTA
8yP3ffbOo+36/GOL+NV+hWKE6xhJad6XqMPG81vovzrE5RARHRPtfG2eyHuSEH6g
Q6HswyyPtTpMGj/ebFK4vtBVNrrAm5ZR/KJ8VqtUrWo9MoxT7ZmkQMvEkcjR2g4/
oQE9yrvK1BTnOGBvJdIuG0EUCStUMzqofBikGvDlOOMoiJw8N3guncgwnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD6fF8uf3ItE9ZErPHf8okUlZpHqMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUHA4WHk1X2NpMFQxa1NzOGRfeWlSU1Zta2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACE+ixUkhj2J0JnyDm3q
HXMXJBXXZ9ggxair/sxYqrmkogW91FUb/BhC0Vfv8Llb9z1um1fo9B5pD98C9HLk
QRyaEn34E4nDczGbIuApRk6F2AHp53UqBD+pel2ExUQ01YYaoYxq/WAr4J28zrmB
pFQ/g2b24N318sycAsQpAQrKPqtSTjlEyfSI0YzxWzZzuTTPWJEghyjWYAhVnryp
SdjcAzC8u3SIvM7Gdd6+c4T8CARSG1cIPuC41pEeUB1fSXIitbolhAboUQ+1ZYIq
tZiuAxf9dcFwu45D0+mz7c+Wf8ITuWMLrMdxm0Z/7JHyoxhh9i6H89rQ5SBlro87
67E=
-----END CERTIFICATE-----
Generated at Mon May 12 12:55:59 2025 by rpki-client