Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPzWqItgz1OBe5Jm1Izvauv2FYk.roa
File: PPzWqItgz1OBe5Jm1Izvauv2FYk.roa (raw, json)
Hash identifier: hefksAgypkFpWg3CLmqd+RKxZeoM4Q977XV6GaESCn0=
Subject key identifier: 3C:FC:D6:A8:8B:60:CF:53:81:7B:92:66:D4:8C:EF:6A:EB:F6:15:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DDD56B28AED33E360258B85EFBB4C30C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPzWqItgz1OBe5Jm1Izvauv2FYk.roa
Signing time: Thu 10 Aug 2023 05:04:58 +0000
ROA not before: Thu 10 Aug 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:ddd5:67a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dd:d5:6b:28:ae:d3:3e:36:02:58:b8:5e:fb:b4:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cfcd6a88b60cf53817b9266d48cef6aebf61589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:65:61:0f:9e:25:c9:61:f4:69:9c:66:f3:
59:d7:4b:f3:c1:b9:59:58:9c:ad:44:da:ba:c8:e9:
4f:62:11:e0:09:08:6a:ad:2c:14:fa:aa:7e:59:aa:
98:fa:58:dd:3a:04:36:6f:75:21:7b:ff:15:09:b4:
e2:bc:71:d2:bd:b3:26:3a:1c:0b:2d:2c:ec:21:eb:
ee:88:e1:9b:92:e1:46:28:76:50:b5:e3:08:8c:43:
0c:f0:ec:44:71:10:63:4c:42:51:64:97:db:c2:d9:
aa:b1:27:22:47:cc:59:df:8e:d8:15:8c:24:0a:72:
ca:34:27:eb:ae:3e:38:21:2a:6e:7b:32:f1:ac:b9:
da:65:24:f6:95:e6:66:90:40:be:95:93:e9:c6:6c:
92:d1:ee:46:fb:19:5d:0c:ea:b7:bb:6a:e3:72:b0:
bf:8b:6f:0e:32:d2:c2:9b:1c:54:d2:de:be:8b:54:
ca:8c:d7:6a:1d:33:54:7e:d3:12:02:6a:79:ac:ae:
a9:76:35:ce:90:f9:9d:37:9a:66:98:19:cd:38:d8:
55:2d:20:4c:f8:56:45:03:b8:58:13:8f:46:20:8a:
01:8f:39:a5:f7:b6:b7:28:94:0c:77:10:03:84:7d:
12:0a:0e:26:98:89:e1:24:c9:b3:cd:da:f1:d5:11:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FC:D6:A8:8B:60:CF:53:81:7B:92:66:D4:8C:EF:6A:EB:F6:15:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPzWqItgz1OBe5Jm1Izvauv2FYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:43:07:c1:63:4e:12:89:3c:08:b6:22:f9:3a:a7:e1:43:c0:
75:e9:df:ab:1f:22:f9:f3:a1:9f:c3:bb:57:01:b4:4a:09:82:
7d:74:60:cf:02:01:70:9b:7e:22:85:53:ac:2b:47:6c:e7:55:
2f:67:54:38:ee:3b:16:06:b9:f3:4d:f6:46:52:a0:1d:21:d7:
79:a9:4a:66:92:ce:d9:14:27:96:44:15:a7:61:85:27:2d:23:
19:20:92:82:e1:df:16:49:f5:78:3c:e3:fc:06:21:b9:04:f9:
96:cf:be:38:16:0f:0a:74:b8:3b:07:4b:83:aa:22:5d:5a:36:
8c:a0:fa:48:12:19:58:c3:d6:43:bd:69:a9:bc:40:3e:73:92:
55:42:2d:5d:16:0f:c8:e5:6c:0e:6b:db:4d:5c:a3:b6:5c:60:
ee:dd:6f:50:f9:02:61:89:df:0a:b0:b4:ff:ee:77:82:51:54:
5c:35:04:2a:9d:a1:b8:3f:3f:97:e1:03:60:ee:51:d3:33:98:
74:d9:b2:fa:4e:97:d6:6a:92:de:0c:9e:f2:70:a0:66:1b:91:
59:31:bd:0d:f0:df:8b:03:d9:c8:1f:21:33:5c:61:19:f5:e5:
2d:90:8d:58:e1:70:3b:67:4f:d1:09:e0:49:e1:44:1c:0e:ed:
cf:bd:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:46:04 2025 by rpki-client