Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PHTGKzwIdXBW7PRzWHWBa0apa5o.roa
File: PHTGKzwIdXBW7PRzWHWBa0apa5o.roa (raw, json)
Hash identifier: eeeOGFXSkRU2/k8V/iGrAgW3BR9gyC218Cml2FZEzQU=
Subject key identifier: 3C:74:C6:2B:3C:08:75:70:56:EC:F4:73:58:75:81:6B:46:A9:6B:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6741420B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PHTGKzwIdXBW7PRzWHWBa0apa5o.roa
Signing time: Wed 02 Feb 2022 18:08:18 +0000
ROA not before: Wed 02 Feb 2022 18:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732329995 (0x6741420b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 18:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c74c62b3c08757056ecf4735875816b46a96b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:ac:60:8f:de:b8:d7:53:33:64:70:25:9f:
3c:50:59:20:29:8a:2b:2e:36:bb:f1:18:3b:70:f2:
fd:e2:ed:1c:df:47:20:7c:fa:ad:2e:28:90:27:4d:
ea:e9:ea:90:88:fd:48:2a:7f:fe:82:d7:0b:8b:71:
a9:bd:4b:a3:c3:5b:41:52:5b:04:eb:75:20:da:0e:
d2:9f:5a:76:bc:61:ab:b6:e2:94:7f:13:b5:d8:61:
0c:7f:c6:96:0f:c5:87:4d:0b:11:25:17:9b:5f:45:
f3:1e:32:94:ef:37:90:ef:7e:c8:78:d6:80:c3:7d:
a3:c8:f4:52:fe:b6:1b:f2:1e:d6:0f:74:6c:fd:d0:
4a:18:63:96:7b:96:e5:9d:52:68:de:6e:22:29:02:
bd:ea:7d:76:9c:f0:26:39:2c:19:46:26:ef:cb:8c:
03:24:f3:47:db:5e:44:a4:2f:ed:73:06:4a:4b:8d:
7f:63:7d:57:e1:73:04:a3:bd:d6:47:fe:3f:b1:29:
67:46:16:9e:ca:c6:75:bb:9b:3e:7c:04:39:88:f6:
35:2c:94:5e:0b:c8:84:a9:e1:c6:c1:61:d8:fa:c9:
29:b6:92:ad:e1:ba:90:69:f6:14:7b:42:bd:2b:b8:
3a:b0:89:41:cf:84:61:d9:6a:23:47:c6:1d:38:f0:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:C6:2B:3C:08:75:70:56:EC:F4:73:58:75:81:6B:46:A9:6B:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PHTGKzwIdXBW7PRzWHWBa0apa5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:f8:bf:27:df:a7:34:c9:2f:d8:ea:10:05:5a:e3:04:39:78:
38:a5:07:b0:ad:38:c5:40:ac:41:aa:41:17:b3:95:59:cc:46:
90:93:a0:f2:a0:8e:e1:6d:c2:b3:f0:50:0e:35:96:1c:a3:2f:
c6:db:06:dc:eb:8f:62:cb:95:81:84:f3:f0:3f:59:ed:be:f1:
46:f9:82:1a:f5:0f:0f:8c:7f:f9:04:8b:3c:36:68:41:55:cd:
5c:60:5f:44:76:b4:04:db:6e:36:9e:75:45:58:06:3e:42:ca:
ac:db:3b:08:b8:25:ea:46:64:8c:29:5d:c1:a0:5c:ee:55:d8:
f5:09:cf:59:9e:95:cb:7c:8b:09:75:2c:b0:ca:ed:75:3a:82:
e9:97:48:8c:c1:4e:93:0c:34:e7:9e:04:e0:6e:c5:12:fc:89:
5b:5e:eb:d0:bb:f4:7e:0d:cf:f5:6f:24:83:8f:94:01:06:37:
69:b7:ae:09:ae:74:41:ea:f6:ef:b8:ff:9f:df:4a:eb:c2:cc:
64:08:2d:5f:ec:15:05:c2:95:bb:8c:ad:9b:f7:35:14:d1:4e:
65:c2:8e:74:ab:b4:79:b6:89:d1:5e:6b:14:7a:69:bb:a2:1d:
c0:68:5f:de:f7:24:e1:33:1b:81:12:e5:b5:35:2e:ce:d1:8a:
6d:29:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:27 2025 by rpki-client