Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PVY-vvpFMPVbLJzJByS29si__vM.roa
File: PVY-vvpFMPVbLJzJByS29si__vM.roa (raw, json)
Hash identifier: SPw4QhgqrRBoGF0nd00TBo3eN7EHg2+GXLTW0xVtr+E=
Subject key identifier: 3D:56:3E:BE:FA:45:30:F5:5B:2C:9C:C9:07:24:B6:F6:C8:BF:FE:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1F8897CE2CE56D20F3B62F4236776E88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PVY-vvpFMPVbLJzJByS29si__vM.roa
Signing time: Tue 22 Aug 2023 23:16:00 +0000
ROA not before: Tue 22 Aug 2023 23:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:88:97:ce:2c:e5:6d:20:f3:b6:2f:42:36:77:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 23:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d563ebefa4530f55b2c9cc90724b6f6c8bffef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:75:d0:6c:24:3d:5b:de:e1:52:c6:f3:3b:
9e:fc:30:61:f8:ff:9d:01:67:bd:bd:27:03:50:6e:
54:d8:0b:5a:43:7d:23:8c:48:73:5b:d1:c4:bd:88:
ea:07:38:3f:9e:33:ad:8c:1c:9f:c7:c4:9a:33:8d:
4c:c8:8d:85:33:9f:ea:dd:c5:64:20:9a:89:be:45:
bd:31:9a:41:ed:47:2d:af:6f:8e:28:78:71:43:2f:
d3:d6:f5:1a:d4:1c:94:9e:06:cf:e7:20:eb:c0:b4:
45:4a:e6:3b:29:60:25:8a:0a:7f:68:7e:c8:60:7d:
61:52:12:f2:2a:da:91:94:6d:72:d5:b9:db:88:03:
e2:7d:06:ca:c6:d7:f8:68:7b:87:f6:51:fc:f8:f8:
45:f2:17:84:d9:aa:83:2a:22:f3:ac:d7:e2:b8:b2:
5d:15:2c:68:ce:49:42:09:90:c8:e3:ed:fa:6b:4f:
e1:de:90:e4:39:84:12:d4:50:c9:cb:48:0b:9d:d6:
00:7c:02:86:73:6e:bf:53:7c:14:9e:d8:ea:9e:d5:
b7:65:74:5e:4a:25:46:57:3d:e8:c8:01:41:9d:b6:
34:e7:1b:94:12:62:0b:fd:c6:ff:1f:f0:d9:f6:41:
bb:f9:11:b0:d7:43:c7:c4:55:90:04:79:e0:39:98:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:3E:BE:FA:45:30:F5:5B:2C:9C:C9:07:24:B6:F6:C8:BF:FE:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PVY-vvpFMPVbLJzJByS29si__vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:a6:2b:f5:b9:8a:88:e8:0a:c6:47:d5:ee:4e:e1:66:3d:96:
75:e9:06:74:59:31:be:84:2a:ef:1e:8d:4a:ca:44:f0:69:36:
4a:f2:6a:18:1d:03:d5:75:f6:f3:b9:eb:b0:c4:c9:de:f8:0f:
e5:f2:ed:4d:7c:41:cb:e3:fa:cc:07:9a:9d:b7:31:20:da:42:
a5:e7:5b:b0:e1:7b:b1:34:57:38:05:b7:61:e2:bc:c2:79:22:
90:55:de:81:09:4d:63:7b:16:90:d7:57:47:e5:ad:2a:b9:4d:
bf:0f:a8:bb:7a:1b:1e:75:9e:6c:30:76:73:bf:eb:94:e6:c5:
d4:97:37:3c:f8:e4:9d:4b:23:3f:de:67:b8:75:60:ad:ec:3f:
1b:ee:7a:57:36:d0:83:51:91:7c:0e:d9:6a:31:b7:34:ee:e6:
6e:59:a3:8a:2e:1d:53:4c:9c:e2:b6:6e:6a:c1:8c:d6:1f:eb:
8a:64:f1:c7:ac:88:0c:9c:f8:59:18:65:da:5b:69:29:bb:80:
a6:69:17:b1:72:b1:11:c2:fe:f0:c0:b5:3c:71:74:80:7e:dd:
1a:f7:f0:a5:cf:be:9e:53:ad:ce:08:02:e5:ce:54:a2:12:98:
fd:a9:86:59:2b:b2:2f:4f:39:f8:97:c4:af:27:08:02:fa:e7:
49:90:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:34 2025 by rpki-client