Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PN-7B93aHYW2ZXOa52YOcZUU2KY.roa
File: PN-7B93aHYW2ZXOa52YOcZUU2KY.roa (raw, json)
Hash identifier: QC7Nsxeo0yQ9i6E3ixtGKjJZoaqMzLocH8QdjsE4u9s=
Subject key identifier: 3C:DF:BB:07:DD:DA:1D:85:B6:65:73:9A:E7:66:0E:71:95:14:D8:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D13618D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PN-7B93aHYW2ZXOa52YOcZUU2KY.roa
Signing time: Thu 16 Jun 2022 01:17:42 +0000
ROA not before: Thu 16 Jun 2022 01:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366857613 (0x8d13618d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 01:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cdfbb07ddda1d85b665739ae7660e719514d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:75:f2:e1:17:71:df:75:a6:27:84:83:d0:
d0:78:54:a5:b5:44:5d:71:9d:87:4a:c9:6b:b3:c7:
3d:c9:bf:24:44:1b:d3:c4:f6:3a:53:c4:72:9c:8c:
58:9c:2b:c9:07:77:0f:57:51:fa:94:4d:91:fa:87:
e8:ee:db:6b:27:8c:78:eb:dc:b0:e4:9b:07:e4:b9:
91:34:af:ab:93:8a:3c:9a:52:1f:63:09:4f:9b:75:
c2:47:c8:ec:b1:1a:49:46:30:24:37:4e:2f:43:64:
2d:3a:66:fd:d6:4d:0e:02:80:d2:aa:eb:19:40:a4:
88:1b:e4:ba:7c:2d:48:7d:5f:57:b8:27:81:62:ae:
2b:92:3b:c2:93:8b:37:0d:b2:22:07:c8:25:77:0f:
2c:67:29:bb:e0:2e:64:de:fd:a2:56:9a:57:8a:07:
a2:a7:bc:ae:f9:5f:42:a8:7b:04:84:11:98:6c:8f:
31:8e:8c:99:cd:c8:22:b7:35:19:43:35:0e:32:5f:
23:38:b4:ea:cc:00:68:27:4c:4e:6d:3e:41:af:e9:
23:65:15:03:86:e6:27:d4:32:ce:89:6e:c3:21:1b:
46:97:79:5f:e7:94:9a:09:dd:c6:b4:0e:23:d6:7a:
a6:35:e8:91:8f:b3:94:92:a3:53:85:4a:c1:44:f8:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:BB:07:DD:DA:1D:85:B6:65:73:9A:E7:66:0E:71:95:14:D8:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PN-7B93aHYW2ZXOa52YOcZUU2KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:43:eb:13:39:66:a0:69:c7:a6:f2:66:60:ca:e2:f4:8b:e4:
c6:77:3d:a0:17:15:fa:58:d1:4f:57:f7:23:2e:4b:70:27:e0:
67:ec:23:ea:1d:0f:d7:3a:f2:a4:b8:8f:f7:a5:a2:66:b1:11:
7a:f2:f8:e1:3d:b3:86:a4:81:83:ec:52:cd:34:00:49:24:97:
3f:52:ba:70:13:05:28:ac:fb:4c:c2:fb:5a:35:98:12:4d:3e:
0a:3e:4f:15:16:3b:23:8d:ab:c5:bc:26:22:02:82:cb:00:9e:
f3:03:8d:8c:3d:91:dc:cb:35:6f:20:40:d6:3b:0b:7d:38:91:
30:4f:e5:35:95:4c:5b:8d:1d:1f:56:9e:d7:b4:b2:3e:63:65:
a9:e4:f8:5c:8c:ab:0f:cd:47:9f:f7:dc:49:b9:15:21:8d:05:
de:f1:ad:fd:ac:80:78:e3:b0:3f:94:d1:5c:84:f5:ec:39:f0:
de:1b:9e:45:2d:08:97:b3:38:ac:32:47:c9:b5:94:57:0b:c8:
2c:ec:a0:78:c0:bc:df:2b:58:ec:b5:b4:70:32:95:77:de:82:
12:40:b2:ec:aa:9d:05:79:b8:a3:33:ad:61:66:be:a1:ef:e9:
d3:b5:74:cc:3c:6c:d8:6a:67:d9:af:b8:a5:2f:07:25:ef:fd:
e9:6d:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:21 2025 by rpki-client