Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PUd6pMxi5J3cgJzzO53pMT-3ABY.roa
File: PUd6pMxi5J3cgJzzO53pMT-3ABY.roa (raw, json)
Hash identifier: tx8trlgSupMU5YH/5KX6XTja8gG296RL2AJLNRHOHQ4=
Subject key identifier: 3D:47:7A:A4:CC:62:E4:9D:DC:80:9C:F3:3B:9D:E9:31:3F:B7:00:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BB52DA15B60110E35AE2668BF1BE6891
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PUd6pMxi5J3cgJzzO53pMT-3ABY.roa
Signing time: Wed 26 Apr 2023 02:09:41 +0000
ROA not before: Wed 26 Apr 2023 02:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bb:52:da:15:b6:01:10:e3:5a:e2:66:8b:f1:be:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 02:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d477aa4cc62e49ddc809cf33b9de9313fb70016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:3b:0f:0a:5f:ff:57:65:d7:7a:05:7e:a6:
5e:d0:d4:a9:41:8a:c3:b7:9f:35:6d:9e:14:1c:21:
d7:73:c0:9b:8d:14:c7:70:0c:81:9b:06:c2:73:86:
2e:f1:62:c4:29:40:19:5f:11:94:7a:19:5f:f4:27:
95:3a:9f:d2:d9:04:ed:2c:f0:4d:10:b2:69:b1:bb:
20:3d:80:fb:bf:e4:5e:27:6a:47:3a:25:ca:09:e3:
b4:80:5b:98:4b:4c:d0:df:e3:85:24:ee:f6:ed:4b:
17:ab:ab:f1:f4:71:5c:dd:b3:31:cd:20:74:87:d9:
1c:4d:cc:ae:08:fc:d1:da:68:a4:0b:2b:28:d5:c0:
5c:5a:e9:cf:e3:f9:37:81:a1:53:d7:f6:5e:ee:38:
6a:90:9f:37:1e:c9:65:03:57:35:24:46:c6:d7:ea:
84:1d:0d:9c:7e:af:88:de:8c:db:7a:50:a6:b4:3f:
26:a3:ec:8a:49:36:1d:51:ab:0c:2b:29:d1:53:06:
94:a1:84:0b:a6:3d:ac:c0:ab:57:1b:05:c6:c4:d8:
8e:23:ae:6c:f7:91:a0:30:b3:60:81:bc:84:95:80:
3f:28:dd:07:ae:13:47:0e:a1:3f:7d:6f:ba:f6:b5:
9b:5f:d2:d2:ac:6e:70:31:30:e4:a0:bc:b4:e6:42:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:7A:A4:CC:62:E4:9D:DC:80:9C:F3:3B:9D:E9:31:3F:B7:00:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PUd6pMxi5J3cgJzzO53pMT-3ABY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:65:18:86:ff:de:c0:2b:03:4b:f5:2f:33:7a:97:1b:b9:ef:
96:98:51:95:30:be:7a:6b:14:b7:5c:9a:fb:3e:ee:d4:07:c5:
bb:3d:78:1a:61:23:06:f2:ae:5c:42:6b:d5:76:71:20:24:67:
78:33:e4:1a:20:ad:c8:7a:ff:27:2e:a3:98:3c:61:6a:f9:8e:
3f:e5:52:51:09:60:b5:bc:3a:54:78:af:ea:5d:15:fd:c4:1d:
01:86:45:d8:07:3e:45:b5:a7:bc:d7:6a:ae:8c:d8:40:18:f7:
af:b3:51:5a:be:a2:84:00:f9:d8:2a:2c:22:8b:08:8c:a1:ec:
00:58:64:2c:ea:58:9f:f9:0c:e6:f7:e0:d8:8f:24:ec:5a:c1:
ee:37:9f:4e:d1:41:31:3d:70:9c:dd:b8:8e:45:08:91:30:98:
71:f0:1b:98:31:ff:95:74:e3:7f:6f:a7:d4:c4:74:6f:03:96:
5e:2a:ee:35:d6:5b:8d:7b:eb:11:46:0c:c5:6a:2d:96:ee:1f:
29:16:66:01:d5:60:78:95:88:84:2e:b8:52:4b:98:86:02:d7:
25:fb:be:06:60:e0:24:ef:1c:73:35:3a:95:de:9e:54:43:11:
7c:b6:fd:eb:02:51:52:35:f7:f5:73:84:bb:03:83:be:28:c1:
10:5e:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:30:13 2025 by rpki-client