Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PB2IYqP0LAz23zNVUb8FnK4qXVY.roa
File: PB2IYqP0LAz23zNVUb8FnK4qXVY.roa (raw, json)
Hash identifier: qNloi0xxm0rnln6DWj13mApow02abqDwMaB1j30OzhQ=
Subject key identifier: 3C:1D:88:62:A3:F4:2C:0C:F6:DF:33:55:51:BF:05:9C:AE:2A:5D:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3F77A1D626379F42E9A55A7080D1FD5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PB2IYqP0LAz23zNVUb8FnK4qXVY.roa
Signing time: Tue 29 Aug 2023 04:05:19 +0000
ROA not before: Tue 29 Aug 2023 04:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3f77:19b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:77:a1:d6:26:37:9f:42:e9:a5:5a:70:80:d1:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 04:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c1d8862a3f42c0cf6df335551bf059cae2a5d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:c5:21:43:ee:68:cf:31:08:d7:8a:ec:05:
15:af:a8:e0:01:90:26:05:45:ca:2c:53:ad:13:41:
98:ed:32:c8:e9:7c:d2:d9:51:9c:4f:fa:0f:5e:d9:
a2:54:ae:b7:7e:e1:cf:25:03:15:77:bf:f8:cb:d1:
23:90:5d:14:a2:71:30:68:de:40:6a:f6:79:9c:61:
fd:5a:fb:02:a5:07:f0:24:51:18:02:3f:51:f2:1a:
2e:12:c8:97:e3:d1:c8:e1:b7:47:b9:4f:9a:a0:5b:
2e:ec:89:fd:09:97:f0:5e:34:46:99:45:9a:21:d1:
2f:94:c7:4b:1d:69:39:66:c4:1e:bf:2d:89:9d:56:
9f:44:47:e1:7a:ef:e5:ff:25:97:c8:d3:27:1c:c5:
d9:09:bc:af:e7:f3:3c:55:dc:ef:73:af:e9:72:e5:
df:2d:f8:76:a3:54:45:c6:3a:c6:e7:07:e3:68:fc:
56:e9:4c:09:4b:b9:27:bc:2e:20:9f:c2:80:2f:2b:
b6:73:0a:02:7c:7b:8b:2c:a5:dc:62:80:1a:3a:37:
d7:dc:a5:9b:2f:5d:00:eb:cb:5f:f7:8a:0d:bb:69:
9e:12:c5:b8:df:4b:df:8a:86:af:e2:f5:2c:54:fc:
20:09:fa:1b:1d:f7:54:a8:91:d2:6f:03:62:45:2e:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1D:88:62:A3:F4:2C:0C:F6:DF:33:55:51:BF:05:9C:AE:2A:5D:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PB2IYqP0LAz23zNVUb8FnK4qXVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:93:87:7d:5a:ea:1f:56:a9:27:6b:91:93:78:47:60:c9:f8:
00:ee:5f:d6:89:d6:12:e8:10:2b:fa:48:a9:f4:50:0f:8a:7e:
36:81:87:de:c5:bb:60:1f:c8:0a:95:a4:c1:99:0c:d7:2d:fd:
c9:48:e6:14:18:20:18:71:c3:6f:da:41:04:ae:db:91:12:d7:
76:c6:91:4c:b6:82:8d:b9:d8:19:7d:eb:23:7c:0a:c9:e3:bc:
58:46:db:f4:b4:1f:1e:dd:fe:09:e9:7f:6b:1d:52:31:e7:b5:
9e:ac:77:42:a8:19:a9:de:2a:43:06:b7:08:20:57:c4:dc:22:
10:82:08:a6:cd:a8:47:6a:75:4b:db:1f:b2:db:82:ce:f7:76:
5c:64:59:a9:3a:e6:55:09:10:7f:7c:87:7e:19:6a:ea:31:5f:
77:a0:c2:fb:2d:3c:49:e7:3b:93:2d:6f:97:de:b9:85:95:ab:
35:99:0b:e8:32:03:5b:46:01:65:12:f5:56:b5:b7:66:d2:e5:
8a:75:cc:76:fc:b3:e7:5c:2d:f7:81:88:35:80:b7:39:af:05:
c3:1e:f7:ee:42:3b:f4:6a:50:e2:9f:71:f0:ae:cf:3d:eb:d1:
04:4a:7e:26:d4:1f:1a:30:f6:0d:bd:82:c3:21:c8:21:16:ed:
88:c0:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:30 2025 by rpki-client