Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PD8MaTWqrPM9Ds5nrugqtcI__VY.roa
File: PD8MaTWqrPM9Ds5nrugqtcI__VY.roa (raw, json)
Hash identifier: fmW9udYC2qqTKmY+vAK8YKOlaSf0pPiFjDfwgiU8WQ4=
Subject key identifier: 3C:3F:0C:69:35:AA:AC:F3:3D:0E:CE:67:AE:E8:2A:B5:C2:3F:FD:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EDC10F976E4E86D16F37A46D16A02320
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PD8MaTWqrPM9Ds5nrugqtcI__VY.roa
Signing time: Fri 05 May 2023 21:11:05 +0000
ROA not before: Fri 05 May 2023 21:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:c1:0f:97:6e:4e:86:d1:6f:37:a4:6d:16:a0:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 21:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3f0c6935aaacf33d0ece67aee82ab5c23ffd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:db:d3:3f:cc:fb:aa:fd:bf:0b:09:d2:46:
fc:cf:d7:54:3d:b8:cb:fd:85:0d:42:56:16:dc:7e:
bb:0e:76:3d:7b:b5:d3:40:27:f8:73:e7:07:1c:55:
7c:71:a3:64:7d:bf:bc:d5:34:10:fa:d7:18:4b:a6:
46:30:95:71:1e:5a:8b:8b:69:0f:ac:41:97:c5:e6:
9d:47:8d:db:6d:e9:bd:f0:ff:61:da:13:42:de:ca:
2d:46:05:1c:60:3e:3d:6f:08:b0:af:b6:51:7e:96:
ac:ec:8e:56:ba:90:f0:54:60:56:36:45:fe:b8:48:
82:12:74:4c:01:49:1c:ba:b8:fb:ae:61:ad:65:ed:
c0:2e:9d:d6:a0:2d:ec:7b:76:0f:eb:02:9d:f7:36:
52:ce:3e:cb:f0:b7:b7:74:70:69:d6:48:cf:74:b8:
d0:76:96:cc:34:04:e5:b5:2a:0a:63:d6:89:41:61:
ee:d6:ea:7d:13:db:b1:c5:c6:f0:08:43:0c:54:13:
1b:12:10:26:3a:bb:4f:ce:8e:d4:cd:a0:ee:12:13:
43:db:34:af:06:9c:46:79:52:87:65:67:5a:e3:28:
32:cd:2b:88:b9:38:7e:9a:a4:2d:a0:80:39:c7:44:
68:fc:2d:0f:97:92:db:e2:76:4e:6b:a9:41:e5:ee:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:0C:69:35:AA:AC:F3:3D:0E:CE:67:AE:E8:2A:B5:C2:3F:FD:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PD8MaTWqrPM9Ds5nrugqtcI__VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:f6:54:bb:ff:55:c9:d5:16:da:b6:f9:69:c0:f8:fc:a6:58:
82:90:80:59:a5:88:f7:70:ae:08:38:5f:63:89:79:97:92:fd:
96:53:5e:e2:72:85:c7:4b:79:50:45:f4:2c:ac:95:e5:06:19:
00:38:c4:5d:63:fb:29:0a:46:28:f9:01:04:db:66:f3:e9:1f:
d8:95:0f:89:cd:72:a8:90:a6:e0:48:6a:54:e7:72:d2:19:12:
86:fa:24:fa:42:22:01:b5:c1:0f:9f:df:e9:ce:da:e8:04:8e:
ab:1c:58:b8:8a:4e:9c:9d:7c:fb:58:97:85:07:a6:18:e7:83:
12:71:19:f4:8a:34:6e:df:15:fe:59:6f:b6:42:3d:ff:08:86:
45:42:cf:38:77:b2:1c:13:7a:cf:8d:4c:66:5f:cf:5e:6d:7c:
49:f6:d8:01:6f:87:ee:fa:12:e0:c7:3f:55:a7:2c:c0:02:13:
70:53:19:bf:b8:a8:3b:be:a8:73:f6:78:64:ca:97:47:18:5f:
9b:76:88:53:59:39:b7:8c:91:45:0a:83:67:5d:72:60:14:81:
88:38:a0:7f:0e:6e:c9:44:28:59:b4:46:58:86:60:dc:c3:d0:
fb:a8:06:79:a6:fb:d1:17:b3:d0:1f:15:0c:9d:3e:d1:79:c3:
9a:b5:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:32:57 2025 by rpki-client