Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMqRTWR52jn2XQAm9W60q4aFmw8.roa
File: PMqRTWR52jn2XQAm9W60q4aFmw8.roa (raw, json)
Hash identifier: g/Y/9T9fM4C/ejqyN0tqdq8xoeQC57qI2oDbZ0GQnyE=
Subject key identifier: 3C:CA:91:4D:64:79:DA:39:F6:5D:00:26:F5:6E:B4:AB:86:85:9B:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854FA0455AFA598C3456667AD4B062A2E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMqRTWR52jn2XQAm9W60q4aFmw8.roa
Signing time: Mon 26 Dec 2022 18:09:41 +0000
ROA not before: Mon 26 Dec 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:a0:45:5a:fa:59:8c:34:56:66:7a:d4:b0:62:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cca914d6479da39f65d0026f56eb4ab86859b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:94:ff:68:6f:c8:3e:d4:ff:19:ff:8a:f8:
7e:d4:c3:a9:8a:25:12:5c:8a:91:c5:b3:29:d8:32:
5d:27:14:f8:2f:f5:d5:b8:ec:6f:b7:0d:4f:f7:75:
ec:d7:7c:2d:6e:0b:1c:d9:57:a6:62:f7:98:5e:71:
19:62:c7:e0:33:4c:be:d0:76:ba:de:18:c5:13:1a:
5c:7d:b9:a1:f2:7a:ae:c3:77:89:12:9a:1a:63:a4:
d6:2c:8a:59:4f:00:fb:88:60:40:4d:04:59:74:03:
f9:e8:a7:0d:73:38:c4:b1:7e:7f:10:18:97:4e:1f:
8d:aa:0f:dd:a5:92:d7:e2:8d:48:bf:14:31:31:83:
22:7f:cf:44:46:90:2c:cd:36:c4:35:05:82:e6:0f:
f6:23:e1:8b:eb:0a:27:59:f1:fd:42:0c:fb:7b:99:
d7:cb:90:dc:d6:cb:7a:d4:ee:f1:e1:4d:28:86:dd:
8b:c8:af:8c:7a:65:e4:3e:6c:62:ad:8e:38:0a:e9:
92:27:68:d2:e1:fb:a5:f0:82:b9:92:e4:a6:3a:07:
88:e4:06:3b:4b:10:99:e1:eb:10:08:cd:dd:82:e4:
cd:52:0a:40:b8:14:49:18:62:37:50:48:b2:d3:20:
87:68:26:1e:b3:10:54:4e:00:65:95:8b:c7:67:9f:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:91:4D:64:79:DA:39:F6:5D:00:26:F5:6E:B4:AB:86:85:9B:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMqRTWR52jn2XQAm9W60q4aFmw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:31:0d:b2:31:bb:c2:d5:58:de:ec:f6:6d:8d:fe:42:86:22:
9d:4d:49:4e:28:97:37:d7:41:1a:dc:77:16:8e:89:9e:35:be:
b5:0b:74:b3:9e:0a:eb:50:0e:e6:eb:a7:52:7a:ae:0a:4f:33:
4d:8b:43:1d:0d:a5:65:28:d0:cc:37:b6:64:50:2b:f0:ab:0c:
3a:68:dc:60:77:e9:10:df:8e:a7:de:bd:b0:d4:11:ee:dd:fa:
5a:b2:44:83:19:59:20:44:66:07:e3:28:ad:92:3e:71:34:ad:
37:62:bc:8d:e8:56:05:7a:b6:ab:5c:5a:12:1c:72:3c:39:07:
b0:f0:bd:94:08:4c:2f:ca:48:f6:83:16:21:25:05:6a:32:ab:
11:84:f1:f3:0d:22:94:7c:21:cf:38:fc:c7:29:db:6c:92:f7:
51:da:f9:43:08:b8:78:b7:8f:24:fe:a4:f1:0a:6a:ae:68:6c:
9c:a6:b5:1d:67:e0:aa:2a:87:76:fe:9c:b1:14:ea:96:f0:05:
d5:b6:eb:df:e5:47:73:71:37:6e:1c:92:b9:30:42:10:bd:da:
71:21:97:56:d0:10:4f:12:0c:77:d3:09:30:e5:6b:59:4b:a4:
ef:cb:45:d3:7c:dd:f4:62:5a:85:bb:88:64:6e:d3:69:bf:5e:
5d:8c:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:02:00 2025 by rpki-client