Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMQQAFyF1NIRO0IDoPLlT9F6wy0.roa
File: PMQQAFyF1NIRO0IDoPLlT9F6wy0.roa (raw, json)
Hash identifier: tBdmzDTy4I+7kgY6tEzRMMaiNxds4tlGKhaLPa/lbuU=
Subject key identifier: 3C:C4:10:00:5C:85:D4:D2:11:3B:42:03:A0:F2:E5:4F:D1:7A:C3:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884F985AB676003106764606D5494A3E14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMQQAFyF1NIRO0IDoPLlT9F6wy0.roa
Signing time: Wed 24 May 2023 21:09:24 +0000
ROA not before: Wed 24 May 2023 21:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4f:98:5a:b6:76:00:31:06:76:46:06:d5:49:4a:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 21:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cc410005c85d4d2113b4203a0f2e54fd17ac32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:e6:09:a3:82:6e:d0:fe:1b:65:5b:17:f3:
f0:49:e4:73:e5:2f:71:4f:3e:15:f3:81:05:34:45:
c9:86:66:fc:3c:92:ff:f0:ac:78:b8:83:6a:19:36:
7f:16:ed:72:f5:cc:d6:7c:b5:58:f1:fc:d5:c6:35:
92:9c:e8:4b:a9:bf:ac:8e:5a:eb:84:37:61:88:e3:
d2:74:87:c7:11:df:09:6f:d3:d3:a5:57:4f:b9:9d:
15:55:85:79:b2:da:56:d0:2e:bf:10:1e:90:64:c7:
66:21:84:4c:92:8a:c1:c7:04:9a:a8:e8:dc:66:7b:
9e:b0:11:9c:24:dc:30:48:95:9c:ee:f1:b7:8d:ae:
ea:de:1d:d8:bd:25:5d:e0:05:94:70:9f:9c:61:d5:
b8:cc:8e:da:92:5d:1d:69:89:e6:42:72:46:8c:11:
1e:af:00:77:10:f4:74:70:14:c9:d7:a2:81:cd:b8:
e5:ef:b4:70:ea:67:a4:20:17:3a:7e:85:13:07:89:
33:0a:de:ff:4c:6b:61:e9:82:00:12:d0:34:d0:20:
7f:a1:69:3d:77:63:f7:bf:0f:5f:5f:e3:99:32:2a:
95:fe:43:4c:45:2b:11:22:84:b2:56:40:0d:44:66:
f1:17:35:ae:f9:aa:0c:a4:e0:7a:60:46:c6:b4:e7:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:10:00:5C:85:D4:D2:11:3B:42:03:A0:F2:E5:4F:D1:7A:C3:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMQQAFyF1NIRO0IDoPLlT9F6wy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:39:fc:bd:a9:3b:eb:0f:b7:58:06:27:fb:22:dc:59:dd:c1:
56:fe:82:ff:22:73:f6:1d:9b:65:91:52:54:f3:44:c0:35:4e:
a8:b1:22:d8:0c:ca:f1:8c:8b:76:73:72:40:67:bd:55:94:62:
ba:cf:2d:b0:d6:3e:b1:ca:e6:db:84:c0:63:b8:65:2e:7c:ad:
51:e8:7c:5a:a3:b1:25:c9:a3:9a:a0:92:ea:c2:89:b6:b9:89:
ae:20:98:f0:c0:ac:15:28:0a:69:eb:6a:c7:ca:40:cc:f0:b8:
f3:22:ee:37:cb:52:ca:4b:ed:f1:c3:a7:b5:92:d7:c2:2b:81:
71:4c:83:d1:3d:e8:f7:42:3b:e5:03:c8:4d:af:38:98:83:c6:
50:cb:9b:41:0b:bc:18:1d:a6:14:97:a8:2a:1b:dd:8e:aa:37:
0e:ae:08:cb:e2:72:6f:34:ca:67:53:4e:b6:99:bf:df:95:39:
5f:2c:37:d1:b8:e3:ad:68:ee:03:34:24:b7:0e:92:17:f3:9d:
78:bf:33:8a:83:48:b9:b2:71:5c:9c:b2:90:74:bd:93:0b:66:
c5:90:f6:8d:94:5f:ce:e9:00:5b:ca:5a:19:64:0e:82:6c:50:
06:12:c0:0a:8e:c2:22:fa:6e:83:b3:f0:c0:6c:17:97:0b:b5:
64:3b:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:16:55 2025 by rpki-client