Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/phl5ADT4JOxw9LjD_howBB9yfb0.roa
File: phl5ADT4JOxw9LjD_howBB9yfb0.roa (raw, json)
Hash identifier: 82y/mhEJRV2o/QC0q9OGEvAp2yixVnuDKDU0FyYM5oM=
Subject key identifier: A6:19:79:00:34:F8:24:EC:70:F4:B8:C3:FE:1A:30:04:1F:72:7D:BD
Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Certificate serial: 019422FC4C4EED0EB6F9B53D9F57E985CA1C
Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/phl5ADT4JOxw9LjD_howBB9yfb0.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206251
IP address blocks: 185.191.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4c:4e:ed:0e:b6:f9:b5:3d:9f:57:e9:85:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a619790034f824ec70f4b8c3fe1a30041f727dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:ed:88:1c:4b:61:8a:08:3f:54:4e:fd:ce:
bb:1c:c0:31:ac:79:6f:1b:60:53:18:ba:0f:5d:d5:
c2:67:67:2c:c4:ab:2a:d2:db:b6:fb:b3:a2:b3:68:
4e:63:da:a5:6f:b7:f8:6e:20:e5:6a:5a:2e:fd:30:
be:4e:13:51:5f:30:5a:9e:ad:40:fa:0a:d6:5c:dc:
55:6a:ec:96:b6:22:2d:d9:a2:a5:ac:f4:c8:b0:c1:
20:25:2d:82:e9:80:a3:30:4d:61:0d:1d:2d:27:69:
39:1c:1d:3f:d8:cd:b4:ec:ab:84:1c:ac:fa:6e:ec:
be:8e:5d:46:73:4e:f5:99:a9:b0:40:cf:76:ee:53:
8d:de:7f:64:a7:de:c9:41:37:3a:e3:b4:5f:69:ac:
fa:45:9c:e2:92:42:66:0d:a4:71:1a:76:d5:2c:bf:
56:1b:2f:ad:0f:9d:6a:68:5f:3d:c5:81:a2:2e:ae:
10:90:b1:c6:e4:bf:36:f4:4b:fb:92:a0:84:bf:81:
07:e9:f5:f1:cd:1e:f7:4d:03:b9:28:09:e6:82:e7:
17:60:c0:d2:8d:70:12:fd:14:96:c7:db:7d:4f:6f:
63:ee:f8:11:2f:34:56:53:01:66:48:2b:4c:32:58:
42:5f:67:d5:8f:de:7f:ae:1f:17:9e:ee:58:a9:8f:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:79:00:34:F8:24:EC:70:F4:B8:C3:FE:1A:30:04:1F:72:7D:BD
X509v3 Authority Key Identifier:
keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/phl5ADT4JOxw9LjD_howBB9yfb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:24:64:15:f9:08:38:6a:72:b6:dc:6a:99:f3:68:c5:f6:62:
76:3d:e0:a0:d3:fa:4b:d7:0b:5c:56:89:ba:43:34:d4:d1:56:
3d:81:4e:df:07:a7:5e:19:62:0d:d2:62:22:86:49:ee:3d:e4:
2e:b5:1d:07:d8:b2:c2:fe:3b:36:0d:a3:48:2a:c6:e7:ed:8f:
90:18:6e:9e:f0:e6:7c:a8:52:93:92:df:f9:b0:d2:6c:62:34:
f3:42:75:13:37:e4:ed:59:3a:e6:23:1b:78:f3:f4:e9:04:3e:
94:0a:dd:57:fa:fc:fc:b4:7d:f6:9b:57:fd:e4:27:1d:cf:cd:
33:ec:47:ad:4a:31:a0:b0:cc:9c:d7:58:ef:e8:2d:27:e7:f9:
fe:92:3e:6e:40:95:d0:45:46:1c:7e:0c:2c:ab:eb:dc:2a:d9:
fb:97:f7:f9:a3:5d:5b:08:93:36:40:9a:08:d7:54:d5:4b:95:
3d:49:09:27:a3:f0:17:65:0c:57:00:49:1f:79:6f:36:c8:54:
b3:56:3a:5b:2c:92:e0:92:56:ca:ad:83:28:d7:6d:5d:94:67:
3f:ac:1a:ad:9c:a1:7b:0d:55:1a:f0:a7:19:bb:26:c8:1e:e2:
34:7c:cf:1a:ce:7f:1e:e3:ce:81:76:91:09:39:61:8e:52:38:
37:9e:c2:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/ExO7Q62+bU9n1fphcocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0
MzExYjEwHhcNMjUwMTAxMTc0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjE5NzkwMDM0ZjgyNGVjNzBmNGI4YzNmZTFhMzAwNDFmNzI3ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t3tiBxLYYoIP1RO/c67HMAxrHlv
G2BTGLoPXdXCZ2csxKsq0tu2+7Ois2hOY9qlb7f4biDlalou/TC+ThNRXzBanq1A
+grWXNxVauyWtiIt2aKlrPTIsMEgJS2C6YCjME1hDR0tJ2k5HB0/2M207KuEHKz6
buy+jl1Gc071mamwQM927lON3n9kp97JQTc647Rfaaz6RZzikkJmDaRxGnbVLL9W
Gy+tD51qaF89xYGiLq4QkLHG5L829Ev7kqCEv4EH6fXxzR73TQO5KAnmgucXYMDS
jXAS/RSWx9t9T29j7vgRLzRWUwFmSCtMMlhCX2fVj95/rh8Xnu5YqY87nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYZeQA0+CTscPS4w/4aMAQfcn29MB8GA1UdIwQY
MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt
MDU5MDM5NGEyZWZhLzEvcGhsNUFEVDRKT3h3OUxqRF9ob3dCQjl5ZmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUtMDU5MDM5NGEyZWZh
LzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub/0MA0G
CSqGSIb3DQEBCwUAA4IBAQAMJGQV+Qg4anK23GqZ82jF9mJ2PeCg0/pL1wtcVom6
QzTU0VY9gU7fB6deGWIN0mIihknuPeQutR0H2LLC/js2DaNIKsbn7Y+QGG6e8OZ8
qFKTkt/5sNJsYjTzQnUTN+TtWTrmIxt48/TpBD6UCt1X+vz8tH32m1f95Ccdz80z
7EetSjGgsMyc11jv6C0n5/n+kj5uQJXQRUYcfgwsq+vcKtn7l/f5o11bCJM2QJoI
11TVS5U9SQkno/AXZQxXAEkfeW82yFSzVjpbLJLgklbKrYMo121dlGc/rBqtnKF7
DVUa8KcZuybIHuI0fM8azn8e486BdpEJOWGOUjg3nsLl
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:00 2025 by rpki-client