Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDN_Y5kA5MBrS14KhVyE2DUMlsA.roa
File: PDN_Y5kA5MBrS14KhVyE2DUMlsA.roa (raw, json)
Hash identifier: vYAEZ47chB9R1vKlvlc6YwYKXf/5ig0cwjoHWf8Qd9E=
Subject key identifier: 3C:33:7F:63:99:00:E4:C0:6B:4B:5E:0A:85:5C:84:D8:35:0C:96:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895F43E1D155FD9C29504F0ECCF98046DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDN_Y5kA5MBrS14KhVyE2DUMlsA.roa
Signing time: Sun 16 Jul 2023 15:13:51 +0000
ROA not before: Sun 16 Jul 2023 15:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5f:43:e1:d1:55:fd:9c:29:50:4f:0e:cc:f9:80:46:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 15:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c337f639900e4c06b4b5e0a855c84d8350c96c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:69:e4:c9:98:72:98:06:86:9b:56:11:4f:
b6:a3:db:bb:fe:ab:0e:b9:f4:fe:ef:07:20:5d:b0:
85:90:05:7b:47:c8:99:51:aa:9b:5b:39:c0:3a:11:
e4:ad:04:c2:6a:52:64:6e:f3:ae:b6:80:94:e1:20:
4e:d4:4b:9b:8b:2a:1b:5a:b9:04:4b:d6:a5:ad:14:
09:02:28:74:2d:38:c7:ec:62:b9:99:9d:b0:e5:18:
64:bf:c7:b9:64:87:25:99:10:d6:a4:01:42:68:3e:
fe:30:0e:6a:32:cf:64:94:1e:3d:57:d1:ef:3f:3f:
78:7a:85:34:3a:7e:da:c9:36:13:3e:7c:66:03:b8:
c7:a0:a2:c3:e6:65:b7:97:41:aa:80:98:ee:64:71:
c3:b1:02:96:d6:30:57:bc:68:23:45:eb:bf:b7:eb:
93:4f:84:aa:bb:8b:80:3d:c8:c7:8f:d3:e9:b3:f7:
20:5e:c6:28:a5:6b:80:1d:0e:03:20:12:f6:f0:03:
67:ac:1d:66:91:87:c1:f2:2b:15:17:a3:a6:dd:a0:
c6:e8:5b:96:89:a3:87:23:3d:9c:72:fb:99:7d:cc:
7e:93:db:3c:8f:94:c7:5e:e6:80:96:73:10:1f:88:
7e:11:02:51:5a:15:06:64:ac:69:8d:b4:04:2b:4f:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:7F:63:99:00:E4:C0:6B:4B:5E:0A:85:5C:84:D8:35:0C:96:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDN_Y5kA5MBrS14KhVyE2DUMlsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:df:95:84:29:3c:34:b2:51:70:8c:46:4b:a3:27:47:87:05:
d1:91:84:8d:6c:76:c3:b9:e0:31:1d:06:21:44:77:81:37:90:
04:48:3a:c1:c3:df:03:50:87:43:d3:84:bd:f4:79:dc:d7:98:
ed:45:67:38:f7:82:2e:ef:53:a5:4e:fa:55:86:43:5d:65:67:
e4:8b:28:05:04:31:5b:49:ac:7e:07:a8:f4:0f:ca:84:bb:00:
ce:e1:fa:6b:53:bc:4a:e1:8c:63:47:dd:bf:48:66:b4:74:4d:
bf:f5:bc:c6:31:61:aa:15:b2:d3:30:8a:b6:be:2e:58:a8:f6:
1b:3c:2b:a6:f4:20:ca:3f:36:3a:19:a4:3d:af:7b:1e:df:da:
77:64:52:fe:8f:62:7a:63:ce:04:79:82:88:7a:13:e7:52:96:
22:59:23:d2:47:e2:72:e9:10:04:ba:03:8f:a6:68:c9:9b:25:
d8:82:01:c8:04:45:a8:38:6a:ea:6a:a2:2c:5a:71:e5:81:c6:
5b:63:d0:83:65:b3:c0:dc:04:15:2d:dc:4e:dc:c1:fb:bf:53:
52:12:2b:a5:37:7d:73:c8:84:fd:ef:fc:0f:dc:4e:0a:9f:3e:
b4:6b:b8:c2:b8:77:51:7b:73:f1:da:09:61:dd:9e:93:99:32:
54:ee:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:55 2025 by rpki-client