Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P-nTTtE1AV-B2I0AYBCq2GBoX8Y.roa
File: P-nTTtE1AV-B2I0AYBCq2GBoX8Y.roa (raw, json)
Hash identifier: CVU4BC2EsWUtB5n2mpAfWoLSFM/isaj3H0PIniZpBfw=
Subject key identifier: 3F:E9:D3:4E:D1:35:01:5F:81:D8:8D:00:60:10:AA:D8:60:68:5F:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1F2039E1C5EF6E02B991E29BC92B1C78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P-nTTtE1AV-B2I0AYBCq2GBoX8Y.roa
Signing time: Tue 22 Aug 2023 21:22:00 +0000
ROA not before: Tue 22 Aug 2023 21:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:20:39:e1:c5:ef:6e:02:b9:91:e2:9b:c9:2b:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 21:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fe9d34ed135015f81d88d006010aad860685fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:e8:a7:e6:9f:12:73:f5:fc:1a:db:30:a1:
93:02:e7:bb:c7:05:49:75:ad:d6:8e:aa:2b:9f:ea:
03:d8:34:5a:cd:0a:21:cf:46:8f:ea:ce:59:c2:23:
f8:36:bb:1a:43:b7:4a:7c:63:f0:c6:e5:6b:98:22:
7d:c5:da:17:33:7a:30:71:9a:8e:9c:c5:38:c3:4a:
18:c2:37:0b:7e:cf:7d:bc:ed:26:69:62:73:eb:ca:
c4:f2:6f:2e:14:e4:87:6e:4f:d7:d3:f8:af:0f:c6:
3a:4a:3e:d1:87:a9:6f:b7:9f:36:95:c3:08:32:ba:
ed:0f:05:2d:e7:39:f7:59:88:94:fc:90:4b:a7:21:
3d:dd:2e:c9:8e:75:89:0d:35:4b:b5:2e:42:3b:56:
cb:50:7c:7c:bf:a0:eb:fe:8e:ee:45:1e:79:e2:d9:
15:f7:51:43:f6:bf:ea:be:61:cd:a5:2e:c8:3a:6f:
8d:c5:6b:e1:04:fa:9b:76:4f:27:67:bb:f9:98:42:
d8:09:ba:c5:1a:22:30:8a:7d:18:7e:97:76:4b:cc:
8b:43:24:61:45:e9:f0:34:f0:86:32:56:68:f8:e2:
a8:e6:0c:a1:a7:17:30:6e:cd:02:aa:b0:be:aa:e1:
99:03:c9:3c:1f:cf:2e:55:46:27:fb:df:81:84:fd:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:D3:4E:D1:35:01:5F:81:D8:8D:00:60:10:AA:D8:60:68:5F:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P-nTTtE1AV-B2I0AYBCq2GBoX8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:92:6f:1e:02:b9:a0:51:81:e4:55:0d:6b:31:ff:21:ee:cc:
c5:63:3d:6d:39:a0:01:74:a1:a9:17:af:5e:f0:d8:d3:4c:d4:
7a:1b:71:6a:e9:05:d7:72:77:3c:6c:03:07:ae:f6:96:29:6b:
33:d0:38:ae:e0:aa:d3:b0:38:a0:01:f9:97:92:86:62:a9:1f:
28:06:a2:66:29:22:ba:6b:7e:26:a0:f4:aa:04:36:67:f8:42:
70:99:2f:64:b9:1d:57:0c:d5:3b:8b:9b:d8:5e:49:ef:3c:4f:
4d:a0:f7:03:3c:5c:53:fd:46:a8:15:bf:db:ed:50:5d:fe:59:
5b:9b:b7:a2:ac:c3:56:2d:ac:9c:24:60:5c:7b:0f:eb:b0:32:
26:37:b4:00:8b:51:75:95:5c:9a:d2:50:02:44:36:69:45:c0:
9b:18:14:6d:c5:ba:57:78:5c:ce:7d:3f:91:dd:eb:20:f8:0e:
3d:a2:9e:16:8e:9f:58:55:4d:63:56:bb:8c:47:2c:91:8f:70:
2f:e4:66:6f:c9:f8:4c:48:1c:7d:46:15:1a:61:3a:ef:63:8a:
22:61:db:16:e0:c6:5f:27:45:01:be:ff:ea:c7:43:35:26:4e:
58:68:21:43:7b:bf:a6:4f:5f:5b:89:11:bb:d5:0f:90:91:d6:
19:1b:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:09:26 2025 by rpki-client