Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PGp36gFLO1g97wOAU4UGw8QdkSM.roa
File: PGp36gFLO1g97wOAU4UGw8QdkSM.roa (raw, json)
Hash identifier: V4mSYrygf+0v6UEnPWfPRwTTmMBm8y2GDKXkkc83n3Y=
Subject key identifier: 3C:6A:77:EA:01:4B:3B:58:3D:EF:03:80:53:85:06:C3:C4:1D:91:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186030338AD5BC7CF8C2A541F0FB559EEE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PGp36gFLO1g97wOAU4UGw8QdkSM.roa
Signing time: Mon 30 Jan 2023 14:09:47 +0000
ROA not before: Mon 30 Jan 2023 14:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:03:38:ad:5b:c7:cf:8c:2a:54:1f:0f:b5:59:ee:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 14:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c6a77ea014b3b583def0380538506c3c41d9123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:e1:91:2d:42:b1:c2:a9:d0:75:e3:1f:f5:
90:26:8e:56:c8:93:a2:3e:50:f0:99:0f:44:b3:d9:
99:52:e9:ce:72:45:d2:54:23:11:be:01:6b:fb:ed:
bc:16:86:9e:1a:85:d9:48:e9:ad:f4:cf:cc:1d:cd:
c1:12:b6:be:bc:7b:3c:71:7b:8e:97:e3:76:d4:80:
c6:b9:40:12:d3:41:91:1c:58:80:9a:92:c9:1d:2e:
da:7d:f4:b5:bd:21:c2:ee:b7:24:82:5c:01:45:04:
e1:22:af:0a:c5:24:d1:0d:97:42:31:d1:02:b2:f7:
69:de:7c:32:ab:fe:46:16:d4:53:d2:56:21:2e:02:
55:77:20:54:a7:14:b6:39:b3:f1:82:50:9a:1d:03:
b2:b1:90:e1:fb:ae:11:46:1d:5a:07:fc:b9:f9:ed:
50:78:1f:cd:a1:f9:a0:62:7e:9f:88:a0:b4:be:c1:
49:5e:19:e8:94:48:34:0f:fa:83:49:7e:26:74:1f:
cb:86:ab:09:24:22:44:69:a4:1f:7b:02:94:3a:91:
cd:25:d5:f8:58:b4:95:47:6f:84:a3:1e:a9:21:af:
e1:f4:80:14:c2:c4:70:b8:ff:9d:58:14:e5:83:ad:
3b:41:60:37:86:7a:5f:b2:6d:d0:97:df:52:6c:02:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:77:EA:01:4B:3B:58:3D:EF:03:80:53:85:06:C3:C4:1D:91:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PGp36gFLO1g97wOAU4UGw8QdkSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:6c:72:9c:ce:3d:f2:c7:da:19:d1:cb:4a:f7:30:e7:44:96:
ea:a6:f1:d9:e1:53:b5:e4:06:7b:9b:e9:97:0b:3e:15:18:da:
e2:12:db:4d:13:d3:ae:61:d0:8f:17:10:0c:c6:46:24:be:8f:
a8:37:79:4b:72:d3:73:f1:dd:87:a6:5b:a9:df:ee:96:6d:1a:
ed:7b:51:9f:51:7a:4b:6b:7e:c5:94:9e:37:f0:b0:ca:d8:0e:
a6:2e:92:90:35:26:66:28:1e:9c:ac:66:96:63:17:1c:60:66:
8d:88:51:9b:ca:31:26:d3:0c:49:01:03:5c:33:77:3d:be:f4:
10:3d:e6:07:e2:8a:6f:9f:2e:c6:b9:d5:6d:ce:6c:b2:bf:b7:
3a:19:10:54:ad:94:bd:f1:df:77:72:04:a9:ae:34:fd:4b:87:
68:74:b2:9b:43:12:7c:14:2d:c4:5f:ab:f8:56:33:9c:81:fb:
3a:28:77:66:7e:07:7c:de:c9:7a:80:a4:ff:b0:a8:20:99:f5:
9d:64:ca:d4:cd:10:3e:36:63:1a:d9:5d:ff:5d:a0:03:6f:47:
ab:0d:03:21:b7:f0:e5:4d:f3:81:69:01:a5:99:ef:07:c3:29:
c4:3f:ef:cf:49:be:a2:17:65:9d:35:c2:53:41:9e:1e:63:77:
08:88:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:02:25 2025 by rpki-client