Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PD7tRSg1Nsep0Wncf9tLnUrLi3M.roa
File: PD7tRSg1Nsep0Wncf9tLnUrLi3M.roa (raw, json)
Hash identifier: KKW1tKwmRH3BMkZLlIqMtNggvuK8CJBuEHd7jslaLLw=
Subject key identifier: 3C:3E:ED:45:28:35:36:C7:A9:D1:69:DC:7F:DB:4B:9D:4A:CB:8B:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189668F91460E2F6020C74732673EE9B959
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PD7tRSg1Nsep0Wncf9tLnUrLi3M.roa
Signing time: Tue 18 Jul 2023 01:13:52 +0000
ROA not before: Tue 18 Jul 2023 01:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:66:8f:91:46:0e:2f:60:20:c7:47:32:67:3e:e9:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 01:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3eed45283536c7a9d169dc7fdb4b9d4acb8b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:4a:f7:49:15:70:4f:91:fa:5b:78:b5:67:
32:b3:43:ec:c7:87:37:52:bc:9c:42:b6:f1:3b:46:
82:7c:98:fb:8a:e7:9d:8e:c8:42:f8:2f:ff:28:00:
0f:1b:cb:92:7e:d5:43:f8:80:61:36:f8:60:89:a4:
8a:aa:b4:91:ce:86:52:29:5a:01:38:3d:c1:a6:96:
7a:88:b1:ff:f3:f7:86:99:ee:43:7c:ee:d2:04:db:
93:7f:66:6f:00:8b:e5:7a:28:c0:11:f0:84:bb:c4:
fe:c8:e9:15:65:9d:be:a9:49:c1:2d:05:59:5e:8c:
17:59:36:f0:de:fe:7d:ad:4c:2f:00:de:11:c6:4c:
b9:d0:19:fc:46:76:d8:75:4c:f1:51:91:e1:89:86:
d3:4b:62:28:ba:cf:ff:7f:bd:76:82:dd:2e:86:24:
99:e6:61:e1:12:d8:11:b4:4b:08:4f:4e:72:ec:fe:
5c:90:a3:9b:9e:7a:80:ab:12:54:fa:38:e2:79:c5:
66:a8:7c:ab:46:a8:94:be:6a:17:36:37:fc:b4:09:
1c:21:50:f3:c7:cc:7e:07:ff:1d:ac:3e:ad:36:e7:
5f:d1:eb:53:9f:57:57:2d:5d:bb:dc:e9:4d:2b:a9:
d7:42:ca:95:4b:72:40:1b:51:fa:79:fe:4a:f5:cd:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:ED:45:28:35:36:C7:A9:D1:69:DC:7F:DB:4B:9D:4A:CB:8B:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PD7tRSg1Nsep0Wncf9tLnUrLi3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:84:13:81:00:c5:32:19:1a:f4:69:a0:54:08:5b:fa:3f:11:
53:e2:52:d3:bc:4c:4c:dc:35:a0:57:9e:ef:17:bd:21:c0:4f:
c3:64:82:3b:e8:7e:13:48:46:74:72:ea:4f:3f:8c:7b:57:aa:
63:91:53:d7:9e:8b:49:f3:1c:38:18:cc:01:e4:d8:2e:a9:a4:
42:a9:f8:7c:a1:d0:4e:b8:16:0a:54:52:3b:fc:dc:6d:46:58:
df:cf:82:ac:0f:97:5c:e4:4d:fe:29:f1:f9:4d:94:74:ea:65:
05:34:77:e7:38:16:22:7d:df:e9:cb:f4:90:fd:30:06:68:2e:
00:6f:36:54:87:bd:f2:8c:53:bc:ed:46:91:b0:42:fa:93:65:
3c:fd:6f:9f:4c:9a:55:31:3c:4d:0a:a9:97:b7:02:92:05:3d:
ec:e2:69:b1:ca:d0:a3:7e:1b:31:97:3b:c9:c0:7a:cf:f1:23:
93:ac:97:b0:70:7c:58:7f:ff:6e:b5:d6:58:2b:cc:b8:2a:f4:
ba:eb:7d:f7:ab:9e:c6:80:14:f2:d3:df:f5:25:c2:60:8f:65:
71:14:9d:26:b7:2a:21:9c:89:0e:eb:f4:dd:6d:8d:a2:dc:f8:
4c:1e:93:63:00:61:01:f9:44:c4:26:29:79:70:b0:f9:9d:3a:
d9:c9:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:31:08 2025 by rpki-client