Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PphnrR53c6ppB7s4B9RU-HYHk5Q.roa
File: PphnrR53c6ppB7s4B9RU-HYHk5Q.roa (raw, json)
Hash identifier: /iNZTEaY7yeckhwK/LsEHNk9Okqixw8PXDqiF8mfdpo=
Subject key identifier: 3E:98:67:AD:1E:77:73:AA:69:07:BB:38:07:D4:54:F8:76:07:93:94
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A59A5112AE26AB3CCF0A5C81019793CCB
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PphnrR53c6ppB7s4B9RU-HYHk5Q.roa
Signing time: Sun 03 Sep 2023 06:05:04 +0000
ROA not before: Sun 03 Sep 2023 06:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:59a4:46ce/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:a5:11:2a:e2:6a:b3:cc:f0:a5:c8:10:19:79:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 06:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e9867ad1e7773aa6907bb3807d454f876079394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:94:a4:f4:89:e9:a4:f4:ee:cb:68:ef:4a:
72:aa:8a:91:6a:92:3d:cd:4c:b4:e4:77:55:26:3e:
00:31:88:ef:3e:f1:6c:b8:c5:ca:bb:01:e4:cd:9b:
8c:66:5d:19:ea:37:9c:83:c0:4e:d2:9d:69:44:0f:
56:b7:a3:08:ff:5b:75:1f:c5:fb:ac:f3:64:29:be:
54:ee:f9:c6:33:20:cf:6d:77:06:a4:03:30:f4:1a:
77:ee:6d:8f:cb:4a:1b:a9:26:2e:b9:d3:e8:6a:a6:
08:93:5b:f2:06:f9:a3:6f:ca:48:f4:2e:5e:ec:92:
a5:ad:f8:5d:33:5d:3d:59:2c:af:21:06:b6:d8:e1:
64:58:9b:f1:c1:ec:50:a9:ab:da:d4:49:25:c3:8a:
79:cc:de:44:a9:f5:14:41:6f:f1:43:04:e1:2d:59:
68:7d:4a:ec:57:f4:4e:34:69:1f:f6:ef:bb:21:57:
cd:d8:1b:86:ae:bd:4f:36:94:eb:bb:68:90:33:af:
0c:6c:7f:98:5c:5c:a1:97:7d:9c:44:e1:4b:a2:d5:
ec:5f:48:73:dd:15:bd:37:84:cf:a3:c1:a8:cb:51:
fa:9c:95:1a:0b:37:e9:11:62:6b:16:fc:50:39:ca:
17:1d:58:7d:04:21:74:97:c8:7f:56:cd:8f:d4:85:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:67:AD:1E:77:73:AA:69:07:BB:38:07:D4:54:F8:76:07:93:94
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PphnrR53c6ppB7s4B9RU-HYHk5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:4c:08:3d:3c:83:4e:3f:30:82:c8:d4:4d:20:4c:4a:be:99:
7f:7e:b0:e2:e3:22:2e:65:81:38:bd:62:db:23:fa:3c:0d:49:
80:c0:0b:4c:fc:3b:43:24:95:68:30:23:b6:49:55:9b:3c:9d:
b7:5e:93:61:56:3c:ab:81:68:e2:55:f3:18:7e:f8:3c:e7:b0:
28:0e:ba:79:60:df:05:31:11:78:b2:ee:c1:af:ee:1a:31:5b:
bb:04:2f:66:dd:3a:7d:3d:a9:ee:f1:e5:16:42:44:93:d8:0d:
bd:16:53:4f:cc:e2:14:d6:43:b3:63:40:6c:2b:9a:d0:39:c8:
7d:14:e9:ff:06:47:ad:03:25:20:fb:46:00:f4:f1:b1:1e:da:
5a:be:18:a0:3f:c7:e5:27:7d:07:c4:a1:ed:96:6f:d3:4a:d9:
d5:5c:ae:1c:72:05:e3:b8:8e:ff:3e:88:61:c0:2f:d0:92:76:
ca:3a:a7:93:c2:98:17:6a:aa:32:e0:0c:12:02:18:28:4a:0d:
81:43:b0:f3:b2:8b:94:f1:5d:17:47:94:fd:d5:12:f1:29:65:
43:98:e5:a8:89:13:89:4f:ad:d4:2e:35:75:cf:16:59:e5:4a:
38:07:46:13:1c:c9:3c:81:b5:5d:9e:99:d4:11:ba:01:25:80:
0d:64:dc:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpZpREq4mqzzPClyBAZeTzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAzMDYwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTk4NjdhZDFlNzc3M2FhNjkwN2JiMzgwN2Q0NTRmODc2MDc5Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUiUpPSJ6aT07sto70pyqoqRapI9
zUy05HdVJj4AMYjvPvFsuMXKuwHkzZuMZl0Z6jecg8BO0p1pRA9Wt6MI/1t1H8X7
rPNkKb5U7vnGMyDPbXcGpAMw9Bp37m2Py0obqSYuudPoaqYIk1vyBvmjb8pI9C5e
7JKlrfhdM109WSyvIQa22OFkWJvxwexQqava1Eklw4p5zN5EqfUUQW/xQwThLVlo
fUrsV/RONGkf9u+7IVfN2BuGrr1PNpTru2iQM68MbH+YXFyhl32cROFLotXsX0hz
3RW9N4TPo8Goy1H6nJUaCzfpEWJrFvxQOcoXHVh9BCF0l8h/Vs2P1IW24QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD6YZ60ed3OqaQe7OAfUVPh2B5OUMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvUHBobnJSNTNjNnBwQjdzNEI5UlUtSFlIazVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFpMCD08g04/MILI1E0g
TEq+mX9+sOLjIi5lgTi9Ytsj+jwNSYDAC0z8O0MklWgwI7ZJVZs8nbdek2FWPKuB
aOJV8xh++DznsCgOunlg3wUxEXiy7sGv7hoxW7sEL2bdOn09qe7x5RZCRJPYDb0W
U0/M4hTWQ7NjQGwrmtA5yH0U6f8GR60DJSD7RgD08bEe2lq+GKA/x+UnfQfEoe2W
b9NK2dVcrhxyBeO4jv8+iGHAL9CSdso6p5PCmBdqqjLgDBICGChKDYFDsPOyi5Tx
XRdHlP3VEvEpZUOY5aiJE4lPrdQuNXXPFlnlSjgHRhMcyTyBtV2emdQRugElgA1k
3Pc=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:33:28 2025 by rpki-client