Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDvfPVDG2iakV5L31aaEsiVyE98.roa
File: PDvfPVDG2iakV5L31aaEsiVyE98.roa (raw, json)
Hash identifier: WIa3oNPECH6Zsq4SgxIN05A1YYGTof+G0ojrldQ5kY8=
Subject key identifier: 3C:3B:DF:3D:50:C6:DA:26:A4:57:92:F7:D5:A6:84:B2:25:72:13:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856247009180E29925B809E184A5DED7EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDvfPVDG2iakV5L31aaEsiVyE98.roa
Signing time: Fri 30 Dec 2022 09:04:58 +0000
ROA not before: Fri 30 Dec 2022 09:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6246:6bb9/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:47:00:91:80:e2:99:25:b8:09:e1:84:a5:de:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 09:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c3bdf3d50c6da26a45792f7d5a684b2257213df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:43:6b:f6:aa:f6:7b:ba:2d:a7:90:e1:4c:
85:4e:08:bd:86:ce:36:83:12:4f:89:4a:a2:e1:4c:
df:51:2e:35:6a:23:49:2b:59:08:5b:cf:86:34:4a:
04:dd:6a:5d:ff:d1:ff:e0:37:7c:c2:34:2c:7f:c7:
88:57:79:01:c9:f2:bd:6b:72:d6:0d:2f:7c:6f:20:
6f:ae:84:01:b6:b2:d9:70:b6:68:f5:7e:33:f5:a4:
ef:65:58:1f:d0:5e:95:ca:81:70:9e:58:e2:6a:39:
45:ef:09:06:df:a8:67:ca:e7:ce:76:1b:bf:c0:13:
d5:87:0b:94:6a:32:b4:60:ef:84:af:69:ee:6d:93:
92:7c:3d:7d:7f:66:28:cf:81:e0:b3:e8:02:dc:fe:
4d:5e:ad:87:9a:80:7b:c4:3e:03:3f:5e:75:5e:4e:
f5:7f:18:87:f1:b6:42:8e:22:d5:8f:d1:58:59:18:
cc:f8:de:92:13:db:21:14:6c:9f:54:2f:72:f5:d5:
55:f6:b9:f1:21:e4:ea:76:c4:05:6c:f2:98:f4:43:
c9:e9:f1:7f:b9:d6:d2:13:20:cb:54:64:e3:92:e7:
d7:1b:85:e9:2a:9b:57:d8:58:96:c3:d9:02:8c:aa:
f0:27:d2:ba:58:52:72:98:af:c9:0f:5d:72:01:8f:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:DF:3D:50:C6:DA:26:A4:57:92:F7:D5:A6:84:B2:25:72:13:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PDvfPVDG2iakV5L31aaEsiVyE98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:e2:69:0a:6a:2e:4e:c8:38:86:20:7f:20:a2:0a:98:99:7d:
4a:41:93:5e:11:3e:38:8d:3f:81:d8:46:d1:a5:6c:ca:f2:7f:
6f:68:f2:5d:1f:c4:95:32:fc:38:f1:ff:27:2b:12:a5:a9:0d:
a1:46:b5:67:cd:d6:dc:6b:8b:25:4a:28:7e:a1:a4:64:a8:18:
ea:49:24:18:8a:47:d3:3b:da:e2:1c:81:10:e9:db:08:72:75:
e5:3d:10:5c:17:48:f1:56:7e:a1:75:eb:85:a8:9f:57:0b:a0:
88:dc:0c:70:35:0b:ba:00:6b:64:ac:39:83:1b:a4:0e:0d:21:
5c:c3:2f:67:1e:af:b1:fa:ff:af:95:11:6e:7d:af:20:14:c8:
87:0b:5a:4e:36:08:3b:73:38:4d:39:1f:f4:11:72:63:13:19:
7c:e5:26:c7:99:75:0d:98:5b:76:69:1b:a3:11:83:94:73:da:
31:79:dd:bb:e5:5c:60:b1:97:99:9b:0e:d7:e0:80:37:9a:39:
7d:97:c8:58:f8:bf:95:33:f4:0f:1c:8f:cb:17:20:f4:82:7e:
96:0d:86:8b:d2:12:47:49:69:61:42:9e:34:b4:fd:46:e3:f4:
1d:ea:e5:37:87:59:41:99:54:9e:2e:58:a3:76:5d:81:03:4e:
b5:96:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:28 2025 by rpki-client