Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSdN4MKbrVHJB4_vL2DvytCO0os.roa
File: PSdN4MKbrVHJB4_vL2DvytCO0os.roa (raw, json)
Hash identifier: t9VZfhTYTTmP2Z2RpqqvFmVHmrBGWFKLLSi3QH9qcOE=
Subject key identifier: 3D:27:4D:E0:C2:9B:AD:51:C9:07:8F:EF:2F:60:EF:CA:D0:8E:D2:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018252756D0F72A5E6EF490655963AD0B240
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSdN4MKbrVHJB4_vL2DvytCO0os.roa
Signing time: Sun 31 Jul 2022 04:13:23 +0000
ROA not before: Sun 31 Jul 2022 04:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:52:75:6d:0f:72:a5:e6:ef:49:06:55:96:3a:d0:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 04:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d274de0c29bad51c9078fef2f60efcad08ed28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:1e:d5:95:fe:de:7b:21:27:2d:d0:0e:4a:
69:47:e6:9f:f5:96:1e:50:f8:18:bd:3e:da:dd:6b:
a9:9f:61:fb:25:df:f7:4e:a3:38:4a:e0:63:20:c2:
ab:b4:2d:b3:6f:c5:7a:e0:17:cd:00:a7:ba:8c:9b:
e6:20:de:73:46:e3:87:79:d8:bc:d6:f0:9c:38:d4:
00:9d:5e:e1:04:cb:a1:a6:21:7d:f5:98:0c:9e:4b:
5b:2c:ac:36:fb:27:76:a8:44:74:12:eb:68:17:32:
ab:1e:6e:ab:35:b1:33:9a:74:57:21:33:e9:72:3a:
e1:51:8b:25:a2:0f:23:f7:27:ba:a5:2f:7d:f9:8f:
d0:21:54:77:75:7d:20:b5:5e:90:7a:bc:19:85:9e:
e1:30:00:54:3f:99:40:41:17:90:dc:0e:f2:6d:f0:
8b:b2:ca:2e:e0:92:52:e3:3f:cf:9e:8d:ab:8b:b0:
12:db:8a:64:34:36:60:7c:d1:a0:7f:7a:f8:c8:27:
2b:28:4d:f3:33:3f:88:36:28:ab:d9:b4:5a:29:3a:
cf:29:f1:92:13:46:c7:03:d3:d7:e5:59:6b:da:ae:
90:52:75:13:46:48:3b:77:e3:3d:71:96:8c:09:e3:
a2:71:2f:1c:35:42:4a:13:1c:75:cc:6f:b3:43:fd:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:4D:E0:C2:9B:AD:51:C9:07:8F:EF:2F:60:EF:CA:D0:8E:D2:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSdN4MKbrVHJB4_vL2DvytCO0os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:8e:4a:39:05:69:7c:55:5f:ae:18:d6:5b:7e:08:cc:01:b5:
dc:fa:2f:13:24:b3:2a:35:38:61:ce:35:3f:d6:eb:a9:a0:5a:
ab:ac:7c:39:5c:b2:c1:1b:86:18:bf:c8:d9:e4:7c:12:87:04:
c8:1b:f7:db:d9:a4:bf:80:e7:7e:6d:29:16:b9:e0:c7:29:79:
97:7b:8d:14:44:59:cf:5d:68:bb:12:8a:a0:47:72:c1:c0:18:
7f:a6:46:de:57:0d:1f:ce:2d:cf:92:a4:6a:1c:04:05:25:83:
02:c9:18:52:e1:08:e5:3e:c2:86:db:42:ec:9c:23:bd:b1:d7:
e3:19:c2:19:5f:fa:cd:f5:b4:ea:a3:f7:1c:7b:eb:b5:bf:40:
fd:d9:70:ab:62:d2:95:29:c9:8e:ac:34:12:e7:40:9e:00:49:
ca:e4:51:14:62:d2:56:ff:26:39:2e:f8:a8:89:07:2c:1d:47:
81:e0:6c:5c:50:9c:92:48:70:26:8f:ed:8b:67:bc:5a:67:0d:
8a:ed:8f:a3:ac:50:ec:89:12:07:ac:24:42:1f:85:6c:bb:93:
0f:50:de:d9:34:2d:f5:74:a0:35:32:7c:75:f5:a5:b3:2f:22:
be:cb:23:b7:29:bd:85:95:9d:45:d5:7c:99:c9:6c:fb:50:77:
08:ff:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:53:56 2025 by rpki-client