Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PKtMtiK7mnWATXN-bTvSya36bRk.roa
File: PKtMtiK7mnWATXN-bTvSya36bRk.roa (raw, json)
Hash identifier: qaf+plkmQDOXCAVYIlWUJ+iPY0Qc2hjyGMN+VPTqBRQ=
Subject key identifier: 3C:AB:4C:B6:22:BB:9A:75:80:4D:73:7E:6D:3B:D2:C9:AD:FA:6D:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B4E12B5A8446CF684990F5438FC48C3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PKtMtiK7mnWATXN-bTvSya36bRk.roa
Signing time: Mon 06 Mar 2023 03:05:00 +0000
ROA not before: Mon 06 Mar 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:b4e0:e3d5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b4:e1:2b:5a:84:46:cf:68:49:90:f5:43:8f:c4:8c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cab4cb622bb9a75804d737e6d3bd2c9adfa6d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:a4:03:4c:6a:43:15:63:47:39:64:75:20:
45:7f:05:ae:6a:37:39:4c:a0:cb:36:53:3c:3d:d3:
cd:29:05:69:f8:e3:7e:82:dc:bb:8e:1b:bd:e6:16:
0f:78:64:fd:42:17:e0:28:82:e3:32:e7:d6:ea:6c:
32:a5:29:d3:d8:a3:b9:41:64:ba:09:fa:eb:6d:21:
78:cd:58:84:28:d7:c6:f8:fd:09:72:67:3c:4a:42:
f6:e2:0f:12:5d:83:06:6a:8f:3f:87:f2:db:bb:89:
1e:1a:48:26:38:76:a9:98:72:40:27:00:ba:2b:cf:
d4:8f:8a:99:de:99:04:5d:7b:f3:7c:66:35:7d:36:
76:7a:d7:69:ea:59:b2:26:28:2e:ad:c2:d5:8f:bf:
0d:d5:f5:73:89:33:20:b6:ee:d2:65:55:a8:72:86:
fa:70:b8:a8:1b:59:36:50:ce:04:1a:71:6c:59:f4:
93:f9:3e:05:ad:23:39:75:d2:82:1c:fe:db:14:7e:
2f:b5:55:ce:3e:1b:93:23:0b:c7:0e:e8:f1:92:92:
15:9e:5b:59:5d:4c:00:0e:25:4b:3d:9a:a4:a0:4a:
f3:c1:b2:fb:0c:be:be:6d:f0:dd:c1:e0:cc:0d:b0:
9c:07:db:42:5d:2f:ce:d5:93:ef:31:46:38:9e:cf:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:4C:B6:22:BB:9A:75:80:4D:73:7E:6D:3B:D2:C9:AD:FA:6D:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PKtMtiK7mnWATXN-bTvSya36bRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:6c:62:d7:83:46:64:1d:27:bb:87:e5:d6:8f:e4:fb:d4:04:
5f:99:46:0e:95:0d:4c:cb:ca:ea:80:72:03:78:62:30:41:ce:
a4:28:ca:0d:fb:30:16:07:e4:ee:78:dc:a7:09:b1:8b:ae:af:
22:91:c3:4c:7a:33:59:4f:90:c4:39:47:35:03:4e:c6:90:88:
54:39:a7:44:74:35:3d:aa:95:cd:c0:8c:31:d0:98:c2:55:6d:
e4:86:88:8f:a9:3c:7c:95:5b:52:b3:2e:53:68:7b:50:ed:88:
72:5d:9d:bc:d5:0c:33:7d:c4:a4:ce:f8:c4:7b:4b:5f:ab:14:
57:9e:e5:f5:11:d0:3f:f3:ec:25:5e:6c:19:b1:8d:50:03:be:
75:88:03:2c:41:2c:17:c1:e4:60:66:bb:b3:f3:f2:c3:28:b8:
5d:c2:72:5f:ac:49:a9:8f:92:6c:aa:12:f3:96:9a:4f:24:50:
ae:95:bd:a6:39:61:70:77:d1:db:ac:08:3c:e1:d0:53:20:58:
44:41:1e:fe:8c:41:e3:c8:48:48:18:64:1b:9d:48:86:01:8b:
be:2d:79:8c:8e:7f:31:d0:96:c6:db:df:30:5e:49:ab:31:d3:
f9:18:38:8a:1c:25:f8:85:36:8d:08:be:df:2b:de:14:c4:f1:
7a:10:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:44:08 2025 by rpki-client