Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDV9Gct6_Hyni3kcipYIJAMWIt4.roa
File: PDV9Gct6_Hyni3kcipYIJAMWIt4.roa (raw, json)
Hash identifier: W5cBDBtGRI/5MVMpmt2vCc68ctTiVYSZeizQpar1ypk=
Subject key identifier: 3C:35:7D:19:CB:7A:FC:7C:A7:8B:79:1C:8A:96:08:24:03:16:22:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859C3AD3F41EE426681BBE45E8179978D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDV9Gct6_Hyni3kcipYIJAMWIt4.roa
Signing time: Tue 10 Jan 2023 15:09:39 +0000
ROA not before: Tue 10 Jan 2023 15:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:3a:d3:f4:1e:e4:26:68:1b:be:45:e8:17:99:78:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 15:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c357d19cb7afc7ca78b791c8a960824031622de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:3d:29:af:24:16:8b:f3:0d:e8:40:2f:59:
c3:34:78:1a:cc:3a:95:e5:f0:8e:a6:a2:7f:fe:ff:
e2:b0:66:74:5d:2e:91:57:9f:d0:26:c5:4a:7a:3f:
f7:fb:e7:51:cc:e5:ee:47:33:c5:4a:d7:66:b4:39:
c0:cd:e5:53:17:bc:9d:12:73:ad:5f:ab:83:1d:40:
d4:5b:f9:92:dc:8e:79:94:91:7d:b5:a7:8d:34:00:
74:9f:a5:97:d0:05:a5:4b:3b:d7:0c:44:c3:e6:25:
9e:8f:b3:0b:3d:f1:d8:45:4c:c3:0f:81:21:4c:36:
5c:8d:a7:ca:c8:a1:4d:b3:0c:95:89:6b:f1:20:dc:
64:33:9c:2d:fa:d3:23:a9:02:3a:5c:7a:39:ee:ae:
e8:96:99:3a:cc:f0:5f:5d:c1:1f:08:b0:89:f4:5b:
c3:f7:f6:5f:f9:47:11:6b:50:9c:90:37:8f:34:e7:
f5:0d:b4:75:ae:fd:29:53:d4:10:2c:be:89:5d:95:
d2:2e:c2:43:4a:61:db:6e:4c:4c:ba:eb:58:5f:4f:
8b:f2:ad:cb:55:ec:eb:3b:27:aa:77:47:7f:2f:f3:
c7:e6:dd:91:4a:9c:70:b8:a9:94:8a:7f:2b:4d:21:
8a:f8:2d:ab:d2:d8:ef:8e:ee:60:b6:e0:b8:b4:f6:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:35:7D:19:CB:7A:FC:7C:A7:8B:79:1C:8A:96:08:24:03:16:22:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDV9Gct6_Hyni3kcipYIJAMWIt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:e9:e2:b7:17:70:54:56:ea:ad:8c:f2:1f:4a:c8:7b:21:9f:
04:90:72:59:6d:a9:71:8d:85:02:93:b5:21:24:6c:04:2c:68:
28:68:cd:96:98:4a:3b:b6:c8:fa:aa:e0:df:ee:e8:27:f6:fc:
72:80:97:3f:26:09:f9:0f:45:34:27:57:b6:5c:1b:e4:26:16:
a9:35:8d:b4:88:e0:ae:9a:a1:9c:27:2d:71:33:2c:a1:7d:d2:
50:11:f4:78:04:f5:d7:a0:bd:46:9d:b7:54:c4:1d:ab:71:36:
5c:e2:ca:59:64:a1:97:77:64:87:1f:dc:cd:74:b4:c8:27:a8:
3e:27:68:21:2f:bf:63:ed:6b:f8:1d:f0:97:77:14:4b:02:32:
e1:7c:f1:a7:39:5b:d0:b0:9c:35:06:1f:24:44:f8:c7:83:ce:
b6:d9:04:57:af:c3:9d:3c:01:f9:1d:8a:cf:b7:0f:9f:d2:d9:
ed:fe:cf:b0:e2:af:b3:00:67:2f:04:5f:2a:06:33:83:1b:ac:
df:df:ce:66:9e:80:b2:cf:fd:e3:0b:7f:91:b6:06:69:6e:cb:
d0:fb:38:e7:42:95:b7:12:9f:ef:69:41:e5:7b:07:c8:26:43:
00:67:b6:58:fe:ca:a9:4f:7a:80:84:09:7d:29:38:17:94:6b:
9f:92:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:19 2025 by rpki-client