Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PGosvn0PWSZpYu2kPNrS6ZrRiTQ.roa
File: PGosvn0PWSZpYu2kPNrS6ZrRiTQ.roa (raw, json)
Hash identifier: qxuSxp2mRbFrgp9N6xK5wmSM45yji9gA4FbohmXHzng=
Subject key identifier: 3C:6A:2C:BE:7D:0F:59:26:69:62:ED:A4:3C:DA:D2:E9:9A:D1:89:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855E36BA3E1813C027B4F7A033EC6A037E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PGosvn0PWSZpYu2kPNrS6ZrRiTQ.roa
Signing time: Thu 29 Dec 2022 14:08:42 +0000
ROA not before: Thu 29 Dec 2022 14:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:36:ba:3e:18:13:c0:27:b4:f7:a0:33:ec:6a:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 14:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c6a2cbe7d0f59266962eda43cdad2e99ad18934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:09:c4:1b:cc:85:79:69:ed:73:2e:d2:70:
ff:37:69:df:ca:e1:b5:ab:60:5f:06:f7:28:31:0c:
a2:a5:8f:1f:2d:99:74:bb:31:b9:f0:5b:57:5e:31:
bd:10:68:9e:e3:a3:fd:de:56:5d:06:0c:bf:03:bf:
71:fd:aa:72:a2:d0:c3:94:f9:80:07:9f:82:49:a8:
9d:8e:e8:17:43:1c:e3:48:8d:1b:21:8a:8b:2c:58:
e6:4b:a8:38:02:8f:96:84:46:aa:71:f6:4e:a6:c2:
71:9f:a6:d8:6e:e7:2d:37:e4:02:00:9c:3a:d4:fa:
4e:2a:70:bd:c3:36:00:92:d2:37:7a:b1:7d:91:b2:
e1:cb:71:94:2c:1b:94:79:3d:97:0f:da:2a:a9:0a:
eb:ab:28:17:75:73:14:af:66:2a:48:b0:7d:da:71:
fa:8e:92:a8:02:2c:13:80:c0:11:61:8a:f5:bf:d9:
e9:84:57:62:6c:7c:88:ad:3b:09:7c:df:32:b2:d1:
02:41:e0:0b:01:2c:8b:35:43:f1:98:59:a2:da:21:
08:e7:37:f5:a8:84:81:aa:a8:01:e1:8b:e8:06:4e:
1e:d7:be:83:9d:6c:b7:64:df:81:fd:2c:86:8d:60:
a9:f3:a6:6d:b7:fa:4e:f1:51:7a:bb:19:ba:58:5c:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:2C:BE:7D:0F:59:26:69:62:ED:A4:3C:DA:D2:E9:9A:D1:89:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PGosvn0PWSZpYu2kPNrS6ZrRiTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:80:72:62:15:c9:20:56:cf:6f:1d:f6:50:e7:c2:d0:98:df:
08:4c:0a:68:ce:56:74:4c:2a:d8:bc:bb:38:ef:7b:79:bf:de:
2a:46:07:ff:36:39:b0:1d:41:46:4e:b1:13:59:b4:94:dd:51:
59:b2:c9:18:24:eb:3d:3d:61:b7:dd:e4:3a:91:01:46:84:82:
50:1b:bf:9e:df:43:6a:17:4b:bf:9f:f7:45:61:67:b5:ba:e5:
56:79:f4:dc:1d:f3:20:69:db:f0:44:f4:bf:3c:8a:b5:cb:7f:
f6:1f:c2:7b:d1:88:be:25:18:d9:aa:b2:6f:77:b1:73:d9:df:
84:c0:f7:29:57:d5:a6:a7:42:ef:1d:7b:d3:84:e9:f2:82:d3:
3e:c8:f7:f9:95:1b:c8:f1:80:45:44:c2:c4:e2:9b:da:57:31:
54:2a:8b:93:25:4a:96:ec:2f:40:68:8c:e1:c3:cc:08:33:9e:
7c:e6:93:bc:be:49:13:2a:1b:27:a4:21:05:b3:13:46:de:d5:
c6:e8:d5:e1:5c:a9:07:f8:d7:9b:d1:26:14:9a:0c:09:54:e3:
31:d2:bd:a5:d3:6a:93:44:d0:6c:1d:4d:5c:07:7f:ce:2f:50:
95:d4:76:fe:67:65:9a:5e:3d:c8:39:35:e2:d0:b7:31:37:52:
d8:e9:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:10 2025 by rpki-client