Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSAaJFyAE3vnm5Uq_KYk-Q3BDZU.roa
File: PSAaJFyAE3vnm5Uq_KYk-Q3BDZU.roa (raw, json)
Hash identifier: wbUsZd6UX78r3469mklLsgBRX1jzZzzk8gK/4cjkVg0=
Subject key identifier: 3D:20:1A:24:5C:80:13:7B:E7:9B:95:2A:FC:A6:24:F9:0D:C1:0D:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B1EE22D89EB0E0DD170209B43661E2DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSAaJFyAE3vnm5Uq_KYk-Q3BDZU.roa
Signing time: Fri 07 Oct 2022 10:11:57 +0000
ROA not before: Fri 07 Oct 2022 10:11:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:ee:22:d8:9e:b0:e0:dd:17:02:09:b4:36:61:e2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 7 10:11:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d201a245c80137be79b952afca624f90dc10d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:09:a1:48:11:6b:7f:f9:bd:b4:40:0d:eb:
61:89:f7:f9:d3:f6:44:47:54:fa:a9:f6:50:98:eb:
0a:13:61:5f:a5:ba:85:81:fa:9e:2b:01:85:e2:73:
11:18:64:23:b6:e1:d9:6d:ff:e2:6c:42:47:2f:78:
03:03:29:6c:34:70:85:d3:14:1e:eb:27:ab:9c:b8:
a0:37:06:6a:48:52:37:7d:21:8d:5c:e4:7b:ba:29:
9f:e5:18:d1:fd:bc:75:f1:98:79:25:ef:8f:e6:86:
ef:9b:18:b6:48:94:21:49:bd:49:3d:14:ee:8c:90:
e6:11:96:9a:07:c3:39:10:76:c0:67:9b:f3:7d:c8:
f4:fd:1f:97:0a:84:c8:94:91:8a:98:e2:36:12:67:
6c:fc:06:ba:50:b2:f6:51:fb:20:82:1e:a7:09:d8:
70:f8:95:9c:26:16:52:5a:17:52:6b:fb:00:26:09:
71:4b:b6:39:ab:3a:93:03:d0:a7:0f:7e:6f:c7:84:
d5:10:2e:30:04:b6:9f:21:59:b0:24:19:ba:7e:5d:
c2:31:80:25:b4:ab:66:c0:16:2f:62:df:22:01:f7:
02:e4:44:ee:b3:62:dc:11:d4:11:9b:7d:61:54:9d:
44:8d:56:de:c3:70:0c:af:5f:b3:35:11:77:ad:a9:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:1A:24:5C:80:13:7B:E7:9B:95:2A:FC:A6:24:F9:0D:C1:0D:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSAaJFyAE3vnm5Uq_KYk-Q3BDZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:23:79:4a:8a:30:0e:64:50:c7:6c:16:9d:c6:b1:87:5f:6c:
9e:88:64:b5:2f:02:31:a7:1b:12:4a:17:5b:4c:29:0f:f3:e9:
84:8f:aa:36:92:bf:a8:c1:45:31:85:a3:02:27:90:b1:b2:33:
43:15:88:8b:2e:8e:18:32:12:28:d2:cd:2b:35:94:3d:09:b5:
8a:3e:6b:5b:0e:1c:ca:91:7a:a5:35:a9:86:1f:d6:8b:12:38:
d2:ed:4c:86:06:36:de:7a:35:a4:13:c0:22:48:85:1d:9b:a3:
a5:fa:d7:f9:87:44:db:70:cc:0d:50:78:79:73:fc:b4:bc:74:
37:49:07:32:c2:69:3a:18:01:a6:67:08:01:2c:8d:30:10:c2:
89:93:f2:26:d7:de:5f:cc:c7:1a:63:47:59:99:d1:5b:dc:4d:
0d:a7:55:8b:f9:94:bd:3b:52:2d:6f:01:ed:68:e3:39:fc:db:
06:80:94:0e:ea:76:6d:38:c3:81:c2:d4:f9:3a:00:0d:57:56:
97:83:f9:b3:bd:bd:3f:d9:7c:32:06:32:95:23:86:e9:ba:9e:
20:4a:6e:fe:2b:04:ad:f7:fa:e2:39:90:3d:d8:49:8c:b5:40:
82:ae:13:47:a8:01:1e:64:c0:2f:e0:a4:71:ec:0f:4f:66:e6:
0b:21:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:42 2025 by rpki-client