Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PTD1g7ZMdExewsAbU_hHK89qYtc.roa
File: PTD1g7ZMdExewsAbU_hHK89qYtc.roa (raw, json)
Hash identifier: UXI5KNqNvnIP2wxNA/wK2++3tNaY8/oAAK/q+ksXYws=
Subject key identifier: 3D:30:F5:83:B6:4C:74:4C:5E:C2:C0:1B:53:F8:47:2B:CF:6A:62:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79A67366
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PTD1g7ZMdExewsAbU_hHK89qYtc.roa
Signing time: Fri 08 Apr 2022 22:11:22 +0000
ROA not before: Fri 08 Apr 2022 22:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040951654 (0x79a67366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 22:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d30f583b64c744c5ec2c01b53f8472bcf6a62d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:5f:11:8c:28:3b:c8:2c:b5:9d:ab:c7:0f:
42:7e:ad:1b:3b:49:93:86:dc:60:bc:98:b4:b8:94:
fa:1a:8b:82:95:c1:f4:7b:f8:62:ad:87:c8:22:8c:
39:d8:33:ee:89:6a:31:d9:24:bc:20:b8:68:1a:78:
7f:7f:b7:8e:83:06:9e:13:ee:08:58:09:90:a7:1d:
ba:2a:3e:5d:fd:83:46:c2:c2:9a:70:6c:f7:4c:f7:
27:97:2b:71:bc:1d:c5:70:ab:9d:a5:36:a5:57:11:
0a:50:fc:04:f5:74:cd:39:ac:56:8b:e7:d6:ee:62:
47:e0:3d:a7:98:95:5b:20:58:45:ca:78:96:0c:fd:
56:8b:9f:b4:5d:a0:38:19:a9:4f:e3:d6:ac:eb:6e:
13:8f:d4:68:d0:99:97:cb:c8:ad:48:8e:c6:43:82:
a4:4a:75:e7:21:3d:51:98:14:17:95:c5:10:4f:7c:
41:e9:74:e6:be:9e:72:51:88:5d:f3:ce:66:97:b8:
67:c6:30:dd:0e:d8:27:e8:19:39:09:71:12:d0:f8:
55:70:3b:4b:ba:8e:5e:f3:1a:aa:6f:bc:5b:61:d0:
5f:3a:44:c3:9d:c1:c8:c5:05:7f:a7:8a:d3:98:ff:
2b:a0:7d:30:e0:31:c3:7b:03:f9:df:d3:fe:83:9f:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:F5:83:B6:4C:74:4C:5E:C2:C0:1B:53:F8:47:2B:CF:6A:62:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PTD1g7ZMdExewsAbU_hHK89qYtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a1:9f:9f:10:c6:a4:56:a6:a1:c8:02:41:32:96:60:19:45:
6c:94:1d:b5:73:81:99:66:59:47:fd:48:a3:a4:ba:d9:41:75:
1c:16:1e:b0:b0:9b:06:62:73:31:21:9d:c1:25:22:fb:6f:3e:
f4:79:ed:76:ef:58:e8:be:2e:32:48:6b:43:48:b7:54:ab:9a:
67:6d:46:c4:65:60:a5:ce:f2:2b:ca:69:9a:d6:c5:68:fa:cb:
7e:7c:4f:c0:d9:79:1b:8a:b4:f9:9d:a7:68:a3:0f:17:60:c6:
6f:17:2c:96:a9:1d:b6:81:4b:09:59:2b:b5:74:8a:f3:dc:4b:
65:ab:e3:c0:91:0c:18:46:b4:4f:52:cc:04:95:44:05:dc:18:
cd:ea:9f:f3:3f:c3:99:db:82:01:86:9d:cf:a7:77:43:26:87:
4e:98:d7:7c:03:4d:35:01:23:e1:40:4b:2a:a2:37:3c:bd:57:
7f:c1:2b:d2:1b:74:b5:bb:55:12:f9:7a:55:5b:89:8a:7f:97:
2a:39:e7:23:f1:fd:8a:05:16:4d:ab:16:7a:89:dc:d8:b6:36:
30:df:e2:d0:b7:64:28:38:65:f7:f9:2d:af:b4:6e:da:18:69:
b1:b6:53:11:89:99:c7:3d:91:33:c4:90:0b:b7:f5:aa:30:d2:
ae:9c:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:23:31 2025 by rpki-client