Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PIVXJ2Npwu9cEPlQiGi1ydQq4kk.roa
File: PIVXJ2Npwu9cEPlQiGi1ydQq4kk.roa (raw, json)
Hash identifier: 0p6YQvYdsqVjXQ7ZgX+CUkv5L0pmzt75zWAOzaO8hp8=
Subject key identifier: 3C:85:57:27:63:69:C2:EF:5C:10:F9:50:88:68:B5:C9:D4:2A:E2:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D392C4BB86CC8B6127D72D1BDE98AF33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PIVXJ2Npwu9cEPlQiGi1ydQq4kk.roa
Signing time: Tue 08 Aug 2023 05:15:58 +0000
ROA not before: Tue 08 Aug 2023 05:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:92:c4:bb:86:cc:8b:61:27:d7:2d:1b:de:98:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 05:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c8557276369c2ef5c10f9508868b5c9d42ae249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:eb:c5:b3:fd:a4:a9:50:86:64:74:3d:ff:
30:f5:f1:f9:65:37:7e:24:ef:e1:c1:15:3c:37:86:
6a:32:c3:9e:44:f8:e4:c3:f5:24:ff:fe:4c:3f:30:
ef:79:8c:13:89:20:d2:93:a8:84:88:55:6e:d0:ec:
26:2c:ed:cc:12:ff:08:3a:02:41:0b:3c:09:e2:cc:
41:00:23:b6:41:55:36:90:e2:78:14:f0:cf:48:6a:
c5:d9:6a:75:32:ac:f3:ec:62:c4:e7:3f:c8:34:95:
13:91:1d:e0:b8:d6:b1:58:57:60:cd:90:ac:fa:2c:
50:a6:7e:da:02:3a:a2:39:2b:ab:07:bb:a9:97:52:
9a:df:c0:11:9a:cc:57:f8:fe:db:5a:6e:26:10:45:
1d:77:45:40:9b:2b:47:58:39:e3:7c:56:81:1d:c4:
ad:dc:8c:6d:ef:39:bc:38:6c:7f:41:0a:60:1f:00:
d9:f6:63:f0:b2:3e:8e:f0:e7:e1:18:1f:1f:4c:6d:
f5:ba:89:62:be:8f:47:61:4b:5c:e5:e2:18:0c:22:
77:7f:f0:df:75:be:5e:01:98:f0:79:82:e2:52:2b:
cf:65:c2:ce:2f:e3:e1:b1:56:ee:39:b4:88:7c:34:
41:97:95:50:74:68:17:84:8a:7e:45:36:0f:f4:a5:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:85:57:27:63:69:C2:EF:5C:10:F9:50:88:68:B5:C9:D4:2A:E2:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PIVXJ2Npwu9cEPlQiGi1ydQq4kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:5b:d3:ac:6f:c2:1d:95:77:f9:ef:5d:b9:f5:2c:f2:1c:ca:
8a:47:c7:bc:c1:b2:fd:e2:30:26:ba:b6:b3:22:24:25:6b:36:
35:2d:db:11:89:bf:6f:9c:19:c7:60:7a:9f:da:a5:c5:06:c9:
1f:60:94:25:a6:5e:1b:5b:79:c6:8a:1c:58:a3:03:f0:94:ca:
dd:df:22:fe:5a:be:50:f9:85:3a:e3:69:0a:d6:2a:35:54:52:
07:8e:40:82:ed:19:3e:d6:78:6d:87:88:f1:d9:7b:ed:86:13:
da:19:cf:76:d4:67:c3:d7:08:25:98:5c:ea:60:04:2f:f5:bf:
59:42:1f:59:c4:4a:71:91:62:9c:b0:fd:a9:52:a4:2d:5f:e8:
bc:a5:29:53:47:d7:84:b6:1c:f1:9e:de:9f:ea:c7:e7:f0:06:
0f:95:d1:d7:22:25:51:76:57:4e:65:f7:62:04:52:03:c6:72:
f0:91:33:f4:99:79:8b:fa:c5:f1:38:48:fd:00:b2:c1:81:99:
f1:fe:62:98:08:c4:31:50:a4:1b:d3:70:3b:47:22:74:9c:6a:
5b:cc:54:dd:27:9e:85:fb:b3:bf:f6:84:47:e4:56:3c:2e:36:
8e:01:7b:3c:53:f5:15:79:97:1f:06:a7:64:5e:ef:c3:60:05:
f2:b8:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:58 2025 by rpki-client