Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PBoDSgCHfNip28fx4nO4K9-9pNs.roa
File: PBoDSgCHfNip28fx4nO4K9-9pNs.roa (raw, json)
Hash identifier: fFRheCViyO8LHIFjMLrBvzHOGPDC7sdtfwuU8sSVQOM=
Subject key identifier: 3C:1A:03:4A:00:87:7C:D8:A9:DB:C7:F1:E2:73:B8:2B:DF:BD:A4:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018409733959904B97A1CE8962B1F4864EA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PBoDSgCHfNip28fx4nO4K9-9pNs.roa
Signing time: Mon 24 Oct 2022 10:04:17 +0000
ROA not before: Mon 24 Oct 2022 10:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:973:36a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:73:39:59:90:4b:97:a1:ce:89:62:b1:f4:86:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 24 10:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c1a034a00877cd8a9dbc7f1e273b82bdfbda4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:a0:c0:7c:88:30:0e:b6:28:b3:98:56:90:
72:a0:69:89:94:b6:0d:f1:0c:dd:1a:81:8a:a7:8a:
d8:1c:65:bd:28:fa:16:25:b5:8b:5b:e3:f8:4a:c4:
4d:26:b1:83:05:97:9c:9f:9d:0e:a8:5c:d2:eb:82:
f1:c7:e5:b6:e3:a6:82:a4:5b:fc:7c:32:89:2e:78:
7e:52:3e:f4:12:1a:9a:b0:50:c0:d3:91:f5:2e:c9:
8d:b5:6c:ce:65:26:09:97:b9:6b:59:25:19:6b:c0:
24:f5:07:e7:2f:f3:95:2f:b2:26:17:f5:02:c2:35:
ea:b9:6f:aa:49:88:49:4d:60:98:00:d6:8e:57:8f:
39:bb:87:8b:74:93:99:8e:0c:db:57:7e:16:cb:27:
a1:0b:24:83:c2:90:bb:c5:6f:8c:0b:aa:36:ea:89:
88:ec:54:fc:7a:37:05:18:af:0d:55:e3:33:98:a9:
d7:0e:8b:3b:ae:66:ba:d0:57:4e:35:f2:e5:11:94:
ab:ca:63:5f:fc:a7:07:99:58:c8:0d:8f:67:7a:a9:
73:2f:53:fd:b2:63:20:86:ad:d7:de:ca:99:35:3a:
b6:04:41:5d:f5:01:29:5c:1e:12:57:b0:de:71:2e:
1b:27:59:d4:23:0b:9a:f4:4b:f1:e8:b5:a3:1f:8e:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:03:4A:00:87:7C:D8:A9:DB:C7:F1:E2:73:B8:2B:DF:BD:A4:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PBoDSgCHfNip28fx4nO4K9-9pNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:db:44:db:7d:f2:67:7e:0a:59:5c:b9:3c:04:90:7d:89:31:
ea:15:bf:7c:f0:57:7a:79:1b:6d:54:1c:60:38:60:c1:b3:8e:
6d:1c:5e:e2:d6:bc:cd:b8:07:1d:4a:ca:08:29:fb:82:3a:c8:
a0:1b:41:0e:cc:ce:8e:50:10:8c:0f:11:d5:2e:34:71:0c:48:
95:01:94:09:df:96:8c:47:6c:71:a9:fb:56:12:c0:19:9c:a4:
01:19:fc:06:78:4f:c0:3e:5e:a4:54:bb:45:e9:00:9a:f7:40:
55:b6:7f:b4:84:04:1e:8f:9c:02:7e:c4:ec:22:08:eb:e4:80:
63:41:2b:04:a3:49:cb:a8:be:1a:e3:78:81:81:a5:f3:52:66:
d6:0b:59:0a:5e:f7:34:7c:4b:ee:05:3d:c4:51:fd:29:bb:cc:
83:3a:e1:b3:c0:ee:66:8b:d8:f5:a0:c0:0a:2f:1a:e0:f0:cb:
f9:7f:04:30:5d:be:2a:ac:2f:49:06:6a:7e:50:e4:14:4c:32:
85:28:2e:1d:e2:eb:10:ad:64:28:fd:45:43:c6:17:aa:09:ba:
d5:2b:4f:a3:3d:82:62:ee:3b:0b:09:9e:95:2d:19:5c:c9:77:
67:4b:2e:af:a8:4e:0c:f6:d7:41:2e:85:d4:60:10:9f:56:8f:
d1:af:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client