Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PFAx7xoWyiu9QBQP5NdwmeabC18.roa
File: PFAx7xoWyiu9QBQP5NdwmeabC18.roa (raw, json)
Hash identifier: ieGJqDgKja1UQO1NjZ9IsoHNmuz80enN/ZxWK6NZwAQ=
Subject key identifier: 3C:50:31:EF:1A:16:CA:2B:BD:40:14:0F:E4:D7:70:99:E6:9B:0B:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91BC0CE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PFAx7xoWyiu9QBQP5NdwmeabC18.roa
Signing time: Sat 02 Jul 2022 11:10:25 +0000
ROA not before: Sat 02 Jul 2022 11:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445020387 (0x91bc0ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 11:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c5031ef1a16ca2bbd40140fe4d77099e69b0b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:a9:83:0f:e0:66:28:20:06:3c:08:d9:ab:
19:f9:92:21:5c:6a:71:46:c7:18:e1:d6:38:f3:bf:
7e:6e:f3:36:db:5c:b8:08:67:b8:76:fd:1b:5e:a2:
46:19:c0:f1:fa:48:1c:01:d5:92:64:9a:96:81:7f:
f8:15:2e:81:ac:23:9d:4b:2d:15:1c:84:e3:93:41:
7a:7a:d7:43:50:a7:07:28:56:96:fa:40:ab:66:cf:
ca:52:c2:22:a7:c3:20:38:30:12:5e:e3:68:fc:03:
be:fc:37:f9:87:b3:ca:9d:6d:d3:49:32:12:df:d9:
35:c9:73:0a:fd:36:1f:90:e3:8f:79:75:7d:4a:d6:
36:6f:6d:1c:e4:7b:b6:6f:5c:73:91:62:07:90:18:
e2:c5:53:e0:9b:5f:43:37:48:20:4a:2e:69:fc:66:
48:43:0f:bf:1a:23:09:00:2d:b0:bf:b1:33:01:9d:
77:28:7c:c8:57:a9:35:2b:34:ce:18:86:dc:f1:61:
dc:37:11:6e:31:a6:16:b8:46:97:fc:96:cb:6b:13:
4c:2d:81:79:37:2b:83:3f:94:c9:7a:eb:a2:2c:87:
9e:2c:4a:b3:0f:7a:b5:0f:c9:9d:b5:32:15:40:af:
da:36:5e:92:01:76:58:48:86:0f:bb:3c:89:4e:ce:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:31:EF:1A:16:CA:2B:BD:40:14:0F:E4:D7:70:99:E6:9B:0B:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PFAx7xoWyiu9QBQP5NdwmeabC18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:87:63:55:42:44:d5:1c:d8:bc:cd:bc:c2:3b:69:77:ea:a4:
89:78:b9:64:49:ba:ee:89:51:1a:4d:4b:ac:99:69:8a:c3:a1:
2b:94:38:fa:93:f5:ad:b2:68:90:fe:a2:4f:d4:58:2d:f3:c0:
44:57:78:99:13:3f:52:50:a9:3c:a6:bd:65:0d:88:71:54:8f:
34:94:bf:65:a8:1f:fa:e1:2f:e7:06:1d:44:fb:44:cc:80:a4:
36:49:62:09:42:ab:10:4a:39:7f:31:7d:c1:5e:a5:63:f5:01:
57:e7:96:c5:bf:3b:70:41:8b:0d:b9:66:70:2b:de:fe:93:ca:
b5:5a:e2:98:7f:d1:af:a9:2a:06:14:56:af:da:65:c9:4a:92:
00:13:3b:c1:72:d5:5e:e0:f7:93:0c:fa:01:e3:ad:38:e6:7d:
80:1d:f0:77:76:b8:ad:ea:fd:9c:6b:db:71:d9:67:1c:6d:52:
8f:b1:eb:9b:55:15:50:b1:db:26:3f:88:cc:18:94:4a:e8:b2:
47:69:e7:04:e8:3f:c9:10:43:08:8d:65:84:a9:cb:6f:37:a7:
e1:11:12:2e:42:4c:f3:6c:f2:7f:32:71:71:27:be:53:9b:b0:
5f:e4:9e:62:5b:81:23:22:2e:05:b1:e1:31:57:e4:21:0d:9b:
10:3e:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:29 2025 by rpki-client