Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSlyD3tTZuZMsdTQdErAYVylKi0.roa
File: PSlyD3tTZuZMsdTQdErAYVylKi0.roa (raw, json)
Hash identifier: r3xn9hbOwMGGAZ9zRRP2RbmPcRBdZ38xsmFTgiybO2o=
Subject key identifier: 3D:29:72:0F:7B:53:66:E6:4C:B1:D4:D0:74:4A:C0:61:5C:A5:2A:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 834001B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSlyD3tTZuZMsdTQdErAYVylKi0.roa
Signing time: Thu 12 May 2022 03:09:48 +0000
ROA not before: Thu 12 May 2022 03:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:b63a:37b9/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202010033 (0x834001b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 03:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d29720f7b5366e64cb1d4d0744ac0615ca52a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:db:ab:59:9d:b9:4c:74:7b:4b:59:4d:40:
95:0a:d9:5b:3e:6d:11:ce:e5:93:b5:7f:fb:f1:d1:
9c:43:08:b5:34:a1:12:ec:47:6a:23:4d:51:5c:b1:
9b:4b:cf:f8:e9:a7:36:5f:b0:78:68:46:b5:5d:37:
c2:4a:46:2b:13:d2:9e:88:d1:13:4c:96:72:73:bc:
7b:08:8e:fe:85:00:45:40:3a:06:ed:48:69:7c:83:
45:e8:06:12:dc:c7:0c:5f:74:7f:20:d5:50:87:99:
e0:7a:9d:e8:da:2e:38:84:12:39:82:76:a7:22:81:
89:c7:66:0e:35:c0:52:bf:d3:41:e8:a7:af:04:18:
8d:76:95:5a:bc:e9:ee:13:da:15:3a:7d:8a:f2:c2:
a2:e6:2f:2c:68:01:5f:f5:8f:55:18:b7:b1:ba:a6:
8c:60:3e:3e:6c:7a:bd:36:da:01:25:fe:38:32:94:
32:45:6b:81:f2:70:b9:57:9a:a4:fb:cf:ca:8f:f7:
52:b6:c2:48:b7:18:38:18:10:e4:ee:bf:23:ed:97:
68:7d:55:3a:5d:6f:db:63:2a:95:af:8c:25:ac:8e:
e8:c9:3d:68:32:39:66:3c:c0:4b:be:2f:0a:1d:37:
f5:74:b8:6f:ea:86:b9:ea:82:28:b1:12:24:68:c9:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:72:0F:7B:53:66:E6:4C:B1:D4:D0:74:4A:C0:61:5C:A5:2A:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSlyD3tTZuZMsdTQdErAYVylKi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:53:61:18:53:fa:1e:d7:c8:78:85:f7:40:0c:f0:37:84:cd:
5a:39:19:36:b6:75:91:3e:03:db:0f:93:a8:b1:f9:11:31:0c:
eb:90:35:db:65:5a:2b:3e:17:df:8a:85:e1:b1:d4:0f:ce:e5:
ea:18:65:fd:cb:62:36:e9:5e:9b:f9:68:67:f6:e7:3a:bf:a6:
29:72:08:ac:ed:69:eb:54:9c:79:39:70:4d:33:51:d2:b0:36:
df:d7:36:28:a8:47:f1:54:d2:a7:dc:b9:f5:87:42:8d:dc:f6:
a0:c5:41:6c:af:07:c5:e6:7e:8d:3c:4e:31:47:62:aa:9c:85:
b3:74:e2:42:88:be:70:bc:7b:1e:ab:31:4a:dc:f1:88:ca:05:
96:56:f4:b1:67:7e:c9:1e:a5:1f:0d:15:5b:f4:76:ee:67:c5:
98:2e:ee:9b:9f:7a:9b:c4:e7:85:50:53:f7:34:f0:0e:fc:5a:
d9:f2:65:86:42:e9:10:d3:57:05:8a:4d:5f:12:20:63:46:e8:
08:c1:66:65:0d:d3:e5:09:72:02:33:81:d4:1f:55:4d:f0:9d:
dd:af:d8:e3:83:cd:1b:e9:e6:8e:55:d1:01:23:0f:e8:14:15:
00:44:1c:73:6c:b7:64:b7:a8:d0:1a:89:d7:62:b8:08:a3:23:
b3:f6:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:22 2025 by rpki-client