Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPWJBCiwfXUrCCu8LZBz2vyWVq0.roa
File: PPWJBCiwfXUrCCu8LZBz2vyWVq0.roa (raw, json)
Hash identifier: 9zzVqnpIL728xu0cE9CQQQpUda2B9KF8F1y4RMs+6UM=
Subject key identifier: 3C:F5:89:04:28:B0:7D:75:2B:08:2B:BC:2D:90:73:DA:FC:96:56:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184602E15D35E0FCEE87F81C81D85B17964
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPWJBCiwfXUrCCu8LZBz2vyWVq0.roa
Signing time: Thu 10 Nov 2022 06:15:43 +0000
ROA not before: Thu 10 Nov 2022 06:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:2e:15:d3:5e:0f:ce:e8:7f:81:c8:1d:85:b1:79:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 06:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cf5890428b07d752b082bbc2d9073dafc9656ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:c7:31:49:d4:06:7a:8c:0c:71:d8:4d:1d:
5f:1d:9a:9a:fd:47:41:b8:5d:ec:73:93:90:e1:6c:
3c:d4:44:37:44:1d:89:55:a1:11:c2:c7:bf:d1:4d:
75:11:a3:8c:72:44:d1:02:1b:ab:0f:74:a6:aa:eb:
a3:80:89:af:5c:fa:f2:12:c4:7a:63:6c:0f:d5:cc:
58:98:02:d6:1b:ba:9b:35:a8:42:27:16:04:f7:17:
12:fb:f5:15:52:3d:6e:b0:fe:29:a4:8d:a5:c9:57:
55:63:41:42:48:a9:37:e8:9e:81:d5:45:aa:9c:cb:
fa:66:0b:80:01:35:2a:4a:18:18:ed:44:a4:ba:d1:
5e:94:d5:7f:a6:82:3d:6c:a2:81:a2:01:65:39:38:
c4:4c:6b:9a:4a:c6:a2:17:40:d4:6e:24:46:42:c6:
8d:a9:53:21:51:bb:5f:6b:39:29:04:d0:08:ef:30:
eb:46:21:30:9f:f6:06:fe:c7:21:af:4e:f1:4c:67:
44:ea:bd:97:73:a5:0a:46:2a:3a:5a:1e:3a:c3:4f:
9f:07:98:c7:f4:56:a7:34:7f:a0:44:24:ca:df:ac:
47:f1:f6:5e:bd:23:56:53:a0:fe:f7:ec:27:f9:08:
9b:e1:1d:50:9e:25:fe:16:3b:88:33:a0:13:4c:86:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:89:04:28:B0:7D:75:2B:08:2B:BC:2D:90:73:DA:FC:96:56:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPWJBCiwfXUrCCu8LZBz2vyWVq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ed:73:98:f5:3d:98:d4:c1:b8:5b:4d:f7:57:71:8e:44:31:
c6:46:56:70:d2:44:d8:df:08:93:7f:4e:cb:dc:0f:3a:7c:39:
90:ee:a3:d8:75:03:08:62:62:bb:a4:9b:6c:8a:58:f1:4a:d9:
ef:c5:ad:ec:64:d8:d6:bb:8c:6d:4d:79:02:29:c8:f9:57:74:
f3:1d:dc:5b:75:af:5e:cc:ef:a4:46:3b:a2:a9:fa:06:a3:01:
52:ca:8c:69:e5:35:d8:0a:67:a1:2a:66:03:5c:f4:98:a1:eb:
f9:fb:30:20:18:e9:ab:bd:81:09:f2:e0:c8:a9:64:6d:16:f2:
fb:cf:71:72:04:50:c4:b3:dc:ad:ca:5e:69:8a:5a:a7:67:b7:
45:b0:98:8b:71:b0:80:e1:ff:6e:05:c1:79:9f:0a:09:94:65:
1c:1a:1e:69:2a:63:49:81:f3:95:83:94:10:68:2d:90:85:97:
8f:f7:6c:d8:37:35:51:27:d6:0c:53:e3:01:1f:aa:f3:68:c7:
ef:4f:cd:e9:5f:41:cf:1a:41:60:3b:e7:dc:dc:70:50:ad:ab:
51:2b:63:e1:e6:ab:d2:49:04:e4:d8:bf:c6:78:96:02:fc:c8:
95:05:06:37:c5:21:b4:dd:ac:0e:ad:bf:e2:bb:2e:79:83:dc:
dd:46:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:50 2025 by rpki-client