Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPTllH8uOabyj4xmN6HyI6enBJE.roa
File: PPTllH8uOabyj4xmN6HyI6enBJE.roa (raw, json)
Hash identifier: kwO754KcJlWepIJYWz02sNWR3huxjzvg4aiDuLx2EwM=
Subject key identifier: 3C:F4:E5:94:7F:2E:39:A6:F2:8F:8C:66:37:A1:F2:23:A7:A7:04:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 679C98E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPTllH8uOabyj4xmN6HyI6enBJE.roa
Signing time: Thu 03 Feb 2022 21:09:14 +0000
ROA not before: Thu 03 Feb 2022 21:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738316003 (0x679c98e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 21:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cf4e5947f2e39a6f28f8c6637a1f223a7a70491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:67:48:57:06:be:a2:71:1b:88:0a:5a:29:
e0:73:6a:51:63:fd:88:68:f5:66:0f:4b:95:a7:88:
9b:77:ee:3b:49:73:fc:b3:33:10:db:e0:7e:f8:ec:
93:e7:0f:e7:2d:fe:ca:84:fb:ba:fa:07:10:d2:dd:
54:e8:33:82:d2:62:58:a1:5e:af:d5:e5:2a:5e:67:
6e:1e:d9:14:6f:ec:8c:e3:6b:e7:c0:2c:26:fb:8a:
27:2f:db:f9:66:0b:20:30:53:72:3b:3f:36:f2:3b:
a5:5c:00:ab:0c:4d:81:d4:51:0b:bd:1e:80:2c:8e:
bd:5c:85:1f:d9:dc:c3:2e:4f:97:8e:ef:59:d9:48:
0d:0a:fe:b8:9d:98:63:4c:4e:7d:7b:f4:95:24:4c:
0d:31:a7:8d:5b:7c:e7:6c:9a:fc:75:02:10:8c:a8:
01:89:10:b1:27:1b:a0:0a:09:dc:4e:68:d0:f2:56:
9f:b6:57:f6:cf:f1:55:df:62:b5:5d:58:1a:49:f3:
4f:60:98:b7:be:e4:32:da:a8:ea:ee:87:63:9c:43:
ff:bb:0f:cc:11:71:ec:99:80:59:12:cc:19:f3:d3:
0c:48:65:ff:be:88:ff:f6:7f:dc:cc:1b:47:54:73:
b9:ea:54:a1:c0:88:5b:9b:2b:b5:02:dd:a1:11:b6:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:E5:94:7F:2E:39:A6:F2:8F:8C:66:37:A1:F2:23:A7:A7:04:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPTllH8uOabyj4xmN6HyI6enBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:97:85:ce:46:fd:75:0e:3e:e6:70:0a:19:99:fa:c3:c9:34:
37:6f:60:a1:f5:5e:d2:5f:d6:ba:3b:7f:92:5f:f8:90:3f:eb:
45:db:06:e1:21:78:21:d3:e3:ab:02:47:a5:d2:06:41:6f:c9:
d0:3c:b8:d5:d3:88:48:84:ba:d1:87:79:bf:d3:46:5f:00:bb:
2e:f9:42:74:38:c2:3b:45:91:6d:d9:c2:a6:2a:6d:71:6b:cb:
ea:86:15:e7:fd:76:10:8b:5f:93:91:a8:eb:29:f3:b5:88:9a:
eb:d3:88:a9:7d:25:db:1e:2a:b1:30:f7:10:f4:d2:f7:4b:0f:
fb:66:1a:84:57:fa:f6:44:05:29:63:5a:f9:d4:f7:ed:7c:f5:
b1:03:67:91:ab:ae:79:4c:1f:fe:7d:99:e5:2e:8f:9a:9f:c3:
09:58:3d:54:a8:90:b8:fc:a1:57:1b:18:53:74:50:5e:6e:db:
21:ab:22:44:6c:97:bb:6e:44:28:21:27:37:1f:12:7f:4c:68:
00:47:cd:db:ed:12:2b:96:95:d7:2a:fc:36:15:5e:4d:49:b9:
68:8d:8d:f6:db:6d:32:47:ab:53:0f:12:67:d0:bf:dd:be:25:
a1:07:f3:2c:20:df:d2:e9:19:f7:36:f5:5f:11:6f:57:e5:a9:
58:03:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:48 2025 by rpki-client