Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PCdNqA4OuCzEzHPdYTVLu_XMl_4.roa
File: PCdNqA4OuCzEzHPdYTVLu_XMl_4.roa (raw, json)
Hash identifier: 7+UwFzc89FmBVhbHFO1/sIK4gpU3c2vPjkGrsZZzK2k=
Subject key identifier: 3C:27:4D:A8:0E:0E:B8:2C:C4:CC:73:DD:61:35:4B:BB:F5:CC:97:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018950ABA46DCC8280FFD0F08D3801E23FA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PCdNqA4OuCzEzHPdYTVLu_XMl_4.roa
Signing time: Thu 13 Jul 2023 19:12:53 +0000
ROA not before: Thu 13 Jul 2023 19:12:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:ab:a4:6d:cc:82:80:ff:d0:f0:8d:38:01:e2:3f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 19:12:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c274da80e0eb82cc4cc73dd61354bbbf5cc97fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:a9:6c:a2:5e:6a:97:bb:95:94:1a:2a:5a:
6d:38:07:c0:c5:5b:18:01:ba:bc:cc:24:9a:ca:d2:
31:ff:0e:37:de:31:cd:95:38:6a:07:36:04:a2:fa:
83:70:13:1c:8f:e7:de:35:a7:71:85:8d:bb:d0:b8:
1d:57:a1:0e:73:e4:4f:bb:d6:16:59:d2:bf:9b:5c:
bb:f6:83:e6:33:32:84:28:fc:9d:bb:b8:90:ab:81:
16:c2:f1:28:a3:9d:5e:0e:66:e6:07:f9:ce:f0:de:
8a:03:84:b2:1a:68:3b:af:ba:96:7a:a8:02:4e:c3:
36:6a:a3:d8:69:4d:56:02:3e:57:80:cf:5a:7d:68:
ce:7f:d5:d5:4f:25:af:ff:e0:b5:42:1f:f3:18:29:
ed:fc:b1:f8:11:d9:9f:4f:e6:ed:92:cd:91:20:3e:
fa:d5:a9:0f:1e:d8:a2:55:4f:97:25:f5:16:fe:17:
71:40:0e:e3:65:c8:e7:41:9f:29:3d:9e:c5:30:71:
8f:b3:af:19:f0:5e:76:21:db:4b:9a:72:f4:42:be:
20:34:1e:6c:c0:a2:34:cb:4e:c7:4f:6e:3f:9d:26:
99:46:f3:39:74:96:dd:7d:a0:16:df:34:fd:66:bd:
b7:84:1a:f9:e9:a0:aa:42:a8:7c:f3:bb:d6:43:8f:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:4D:A8:0E:0E:B8:2C:C4:CC:73:DD:61:35:4B:BB:F5:CC:97:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PCdNqA4OuCzEzHPdYTVLu_XMl_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:9d:ce:6d:30:0f:84:92:a7:41:b3:2c:a0:41:97:3c:65:fe:
77:74:c9:cd:5a:9c:99:46:0b:9f:96:d2:d3:eb:a2:9c:75:97:
a0:80:da:ab:f6:8f:71:fd:45:0e:75:0e:68:82:b3:37:84:ad:
14:7a:91:9d:4c:a0:50:9c:46:8f:f8:05:de:e7:88:37:0e:1a:
33:2d:99:21:da:78:f6:64:5e:0b:b4:5a:55:0e:a0:93:90:b1:
5c:7a:ea:f9:e9:c0:b6:5a:1c:6a:3a:e6:0e:07:cc:42:e0:30:
e0:89:93:10:86:c2:57:42:c4:2f:dc:7b:41:60:eb:f1:6d:87:
fc:1d:f7:25:20:6b:0e:d0:42:78:cd:d5:fa:4f:4e:d3:97:24:
b3:4f:77:05:95:36:1e:d2:89:60:db:34:bb:56:de:22:05:ed:
01:b7:38:9a:72:36:c8:d1:d6:81:51:80:8a:79:3d:aa:c1:63:
db:7a:32:df:bc:b0:b8:6e:3a:6e:9f:8b:91:d3:1c:a8:d6:a6:
99:cd:88:dd:81:53:0d:10:8b:35:dd:f4:fd:dc:d2:13:3e:d5:
29:6e:f1:ce:57:76:f7:d4:ed:00:68:56:2c:56:2e:c8:a2:82:
c9:4c:b9:85:c5:57:a1:5d:6f:14:e7:5c:a4:da:1f:14:7c:55:
99:36:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:20:34 2025 by rpki-client