Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PCNKO-AMuRtR9_SrvPDCld4OSrk.roa
File: PCNKO-AMuRtR9_SrvPDCld4OSrk.roa (raw, json)
Hash identifier: a/XUM1n6JXFVT8i2+WIydiZKOKBSu8QtpIpUwBnQHMg=
Subject key identifier: 3C:23:4A:3B:E0:0C:B9:1B:51:F7:F4:AB:BC:F0:C2:95:DE:0E:4A:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A190D70B1BF083FB4B71998EBA3FCD73
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PCNKO-AMuRtR9_SrvPDCld4OSrk.roa
Signing time: Thu 02 Mar 2023 09:04:29 +0000
ROA not before: Thu 02 Mar 2023 09:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:a190:9985/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:90:d7:0b:1b:f0:83:fb:4b:71:99:8e:ba:3f:cd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 09:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c234a3be00cb91b51f7f4abbcf0c295de0e4ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:b7:7c:b0:f8:95:91:84:fe:e4:c7:50:d6:
fe:73:46:f2:80:74:be:9d:7e:e0:42:98:a5:8b:df:
2a:47:eb:13:e4:f1:68:cf:95:eb:ce:a0:17:d1:fa:
37:00:19:27:7f:67:91:15:6e:6b:e8:8a:68:f1:62:
0e:80:75:fa:e9:a9:36:4a:19:ff:c4:3c:6d:53:b3:
0c:d4:b4:77:5a:58:4e:fc:0a:57:46:14:69:9b:43:
77:e2:47:5c:6d:af:fa:30:bd:08:63:d2:01:b4:bf:
aa:ae:e8:fd:3e:19:b3:0a:ec:8e:10:10:b0:2e:3f:
4f:68:29:87:2d:5e:13:a0:bb:e5:41:48:2e:67:74:
42:d2:07:d8:23:39:f2:5a:cb:80:cb:87:2d:ee:4c:
6e:7c:11:7b:84:e5:af:80:33:05:0a:15:0e:77:f9:
42:63:a2:d0:bf:21:1d:3f:90:6d:27:80:f5:b8:c8:
54:8a:3a:3f:ce:6b:79:30:da:a8:27:80:bf:55:e4:
69:b3:2f:8b:5a:e6:ab:9e:6d:0a:98:fc:2f:d5:4b:
a2:06:4d:7a:5a:f7:44:28:bc:d4:e5:33:e3:be:ce:
e4:50:f8:b9:8a:20:5d:43:fd:81:b0:ca:f1:89:59:
3a:0e:e5:2b:c2:49:4e:95:fa:7c:46:b4:1b:6b:ba:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:4A:3B:E0:0C:B9:1B:51:F7:F4:AB:BC:F0:C2:95:DE:0E:4A:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PCNKO-AMuRtR9_SrvPDCld4OSrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:8a:f6:18:66:42:91:24:9d:80:c7:97:63:96:39:90:47:ea:
1a:60:ec:49:3b:c9:5d:2b:9b:0d:f6:99:35:c8:37:f3:3e:b0:
b1:7c:91:2d:ae:f8:4c:92:be:c3:71:ce:23:c8:d4:62:3d:31:
46:9c:f6:d7:e4:de:8b:f9:bd:95:24:7f:f4:7e:ec:be:18:b2:
5c:f0:44:26:89:d3:c9:da:bf:94:5c:b1:e9:c1:39:64:14:06:
17:8d:2c:ef:15:d5:2f:0d:ba:cb:d3:c5:1d:46:8f:eb:ab:ba:
32:9e:46:c4:d6:41:74:13:7f:6d:e4:66:8b:48:81:7a:e1:4a:
9d:55:12:93:e3:ff:d7:ff:ce:f3:8e:06:03:be:5f:7f:25:6a:
c1:38:96:82:83:f0:7d:64:58:2e:6d:d6:51:1d:95:c6:7a:f9:
61:a2:6b:48:f0:0e:75:e3:21:76:0f:7f:6f:f3:f3:5a:de:40:
42:5a:67:4e:09:8d:e0:f3:28:b9:bc:22:60:fd:43:51:e7:82:
e8:2c:4f:d5:34:59:7c:16:20:a9:b2:4d:6f:d7:27:aa:60:e1:
80:82:71:3e:7a:a2:f4:2b:79:30:a7:ce:d8:6b:94:c4:fa:69:
ed:32:68:42:68:73:a1:78:8e:c7:e8:c4:93:e2:e1:a1:8a:50:
7b:3f:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:15 2025 by rpki-client