Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PLfzggE8US9sgbdlBo4M8moQQ7g.roa
File: PLfzggE8US9sgbdlBo4M8moQQ7g.roa (raw, json)
Hash identifier: UZt+/6SIrFhndubbaT5bGIIS8j1GvXAWIAYgj+Et1vg=
Subject key identifier: 3C:B7:F3:82:01:3C:51:2F:6C:81:B7:65:06:8E:0C:F2:6A:10:43:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018751BC1936AABF587C1319521A035B25FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PLfzggE8US9sgbdlBo4M8moQQ7g.roa
Signing time: Wed 05 Apr 2023 14:04:54 +0000
ROA not before: Wed 05 Apr 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:51bb:7b19/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:bc:19:36:aa:bf:58:7c:13:19:52:1a:03:5b:25:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb7f382013c512f6c81b765068e0cf26a1043b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:10:e3:52:2e:11:50:eb:4a:57:3a:bc:c8:
9a:7d:f0:c2:11:7f:30:2d:6d:60:b3:18:18:33:53:
11:02:a7:9a:84:81:9d:aa:76:24:ef:45:01:fd:22:
5d:e9:e5:46:f4:bf:76:a5:19:ba:fa:da:ad:7d:3d:
6d:3a:3b:ff:90:d4:98:93:14:d8:4d:68:8a:ef:60:
c4:cb:0b:cb:63:55:51:bf:e6:72:c5:9f:8e:58:b6:
1f:b2:b7:ce:4d:cf:ea:3d:80:1f:69:e4:bc:2c:ee:
ed:59:4a:19:49:a8:ff:6d:0a:e3:3a:36:01:d1:b2:
3f:a8:6b:b8:b3:f8:7a:a5:46:f3:db:eb:32:08:c3:
08:05:4e:3c:f5:c8:59:c0:32:58:ca:c0:6f:e9:c7:
70:d1:ee:99:53:1e:6e:f1:c4:e0:54:cf:d6:5e:a7:
d7:a4:f9:4c:57:2f:32:23:68:8c:f2:21:4d:ca:58:
b3:6b:e4:40:28:58:a7:07:a5:3b:b9:51:3d:c9:ff:
2a:b4:12:c6:12:42:13:12:3b:4e:1c:66:29:dc:5d:
fb:30:01:19:4f:54:9d:56:6c:34:c7:f9:83:d9:a2:
57:7a:33:f1:18:ec:65:6d:10:77:80:e8:d8:80:6f:
c4:9c:e5:07:7b:5b:08:ae:96:5b:e3:ad:de:f5:64:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:F3:82:01:3C:51:2F:6C:81:B7:65:06:8E:0C:F2:6A:10:43:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PLfzggE8US9sgbdlBo4M8moQQ7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:65:50:8b:81:a2:f7:d2:0a:63:d1:8d:86:18:78:76:78:70:
7e:7c:3f:b2:64:03:c6:ee:70:f5:08:ce:ff:b5:25:9a:e3:38:
2c:79:c8:33:bc:6d:b0:64:61:1b:0e:89:3d:03:6b:a5:05:0f:
70:8f:71:04:7e:2c:c4:ce:bd:72:ba:22:9b:f0:c7:64:7c:f7:
9c:c6:02:25:85:77:25:dd:75:20:a1:37:49:c2:0e:dc:2e:b1:
bf:20:cf:91:83:27:c4:50:0f:d5:fd:f5:8b:8d:31:7d:2e:24:
03:70:84:ef:dc:b6:28:04:9e:a1:99:0a:c6:82:6d:f0:fc:b4:
29:1f:db:91:f8:52:01:bd:28:5a:53:50:ad:9a:96:cd:77:e7:
3f:98:59:a9:a8:60:1a:1d:bb:af:3d:10:f9:87:20:21:3b:0a:
e5:c6:98:40:0c:dc:0b:d4:53:b8:2c:28:a5:0b:79:e5:ef:b3:
21:21:b7:fc:c2:c3:d1:1e:32:42:64:08:ac:29:bb:7a:81:df:
0a:c0:80:8b:03:26:fe:a9:ca:6f:e8:e5:49:83:75:ae:c9:c5:
21:92:52:07:48:dc:bc:32:6b:67:99:0c:d4:9a:48:ad:43:54:
3f:c3:f4:e5:b2:5a:52:01:7e:bc:e8:35:cb:21:54:65:d4:1f:
7a:39:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:45 2025 by rpki-client