Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PG0ipzRf8I7IewC4JbwVvprchQs.roa
File: PG0ipzRf8I7IewC4JbwVvprchQs.roa (raw, json)
Hash identifier: hr8Xr7kT0PyQcQNrd/5AolOHfJvXd2XjbZMipnWp4J4=
Subject key identifier: 3C:6D:22:A7:34:5F:F0:8E:C8:7B:00:B8:25:BC:15:BE:9A:DC:85:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A34CAC9E23DE4221167656884117BCA83
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PG0ipzRf8I7IewC4JbwVvprchQs.roa
Signing time: Sun 27 Aug 2023 02:20:19 +0000
ROA not before: Sun 27 Aug 2023 02:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:ca:c9:e2:3d:e4:22:11:67:65:68:84:11:7b:ca:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 02:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c6d22a7345ff08ec87b00b825bc15be9adc850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:15:f9:ac:0f:ff:5a:89:56:a8:80:d5:6a:
8f:e1:ec:ac:a6:c6:73:d5:53:45:48:d4:0d:0b:4b:
b6:bb:d4:ff:da:63:d0:2c:a7:ab:38:fa:6a:1e:d2:
1f:8c:e2:a3:00:ea:db:ee:d1:5a:0a:cb:9c:69:3f:
72:a7:88:01:51:a2:92:60:08:28:4f:0e:d1:87:99:
62:3e:37:7c:54:31:90:56:2c:e6:ad:93:32:c7:22:
4a:de:d7:c2:22:d9:15:93:b1:57:2c:64:38:3b:26:
24:27:6f:58:03:77:bd:e7:4b:f8:88:8c:a9:eb:0b:
9d:94:e0:a0:86:6a:83:8e:7f:4c:9e:be:71:04:fa:
31:63:e4:9a:e3:cd:37:96:36:db:22:57:9a:12:f3:
a2:02:da:ea:7a:56:ec:ae:1c:40:a0:9c:23:20:25:
c5:b1:53:c0:c0:07:3d:86:ee:dc:c1:a2:b0:95:64:
e5:d1:3f:b0:6d:8a:49:b9:5c:f9:4e:e5:48:97:78:
d9:6c:a8:14:17:93:b1:f8:20:56:cd:f0:5a:4a:f0:
1a:0f:c0:ac:08:40:94:fd:3f:f1:25:4a:80:b4:c6:
76:1a:ca:2a:f5:8d:cf:0a:e0:50:a6:9f:61:d5:11:
ff:7b:c2:df:98:2c:1b:66:ee:74:08:f8:bd:b4:f6:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:22:A7:34:5F:F0:8E:C8:7B:00:B8:25:BC:15:BE:9A:DC:85:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PG0ipzRf8I7IewC4JbwVvprchQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:b2:6e:be:93:97:10:8d:00:14:9a:d4:1e:35:13:ed:da:79:
dc:40:0a:09:fd:1d:3e:c5:cd:8b:12:fa:47:fb:71:5f:16:f6:
9a:03:2a:de:26:31:04:71:e7:eb:0d:b2:37:80:69:70:32:5f:
f9:9a:32:bd:b3:b5:33:c6:50:c3:da:85:10:3c:dd:36:af:62:
af:6e:83:39:60:29:3f:ca:ce:8e:d2:b3:5e:43:3d:e7:d8:dc:
e2:4e:0f:ff:b9:bf:03:f9:c9:d7:e3:39:ac:19:d4:fb:9f:fb:
e8:a2:45:e5:48:7c:44:d9:24:52:e4:f2:a1:d8:cf:62:17:47:
ef:6d:4d:37:06:40:09:be:ba:53:04:b8:51:b8:2d:60:26:96:
73:8d:71:77:25:61:31:bd:78:79:31:ab:a1:70:21:74:bf:c3:
f5:5b:97:06:88:76:3d:c9:95:8e:dd:70:b6:ba:d6:02:ac:0a:
67:d9:0c:2b:3a:3f:ac:6d:d9:66:94:c5:c4:f6:46:ec:b0:ca:
38:b3:78:4e:55:26:0e:4b:b5:73:b1:d4:75:c0:7c:00:c1:6d:
b5:6c:1b:56:ea:d1:84:5c:9d:d7:36:e0:90:56:0d:fd:24:13:
62:be:cb:c1:b7:21:a7:39:37:91:18:3a:1f:39:de:29:11:7c:
c6:43:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:20 2025 by rpki-client