Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PXk333UNP9-Fz8Liakuo5TJMGOg.roa
File: PXk333UNP9-Fz8Liakuo5TJMGOg.roa (raw, json)
Hash identifier: 5SEoto0xkHz3n8GtvVd9fmhw64nUYnjVe1xi6atagQ8=
Subject key identifier: 3D:79:37:DF:75:0D:3F:DF:85:CF:C2:E2:6A:4B:A8:E5:32:4C:18:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881C50609EEF032E968326AD0E36761874
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PXk333UNP9-Fz8Liakuo5TJMGOg.roa
Signing time: Sun 14 May 2023 22:10:09 +0000
ROA not before: Sun 14 May 2023 22:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1c:50:60:9e:ef:03:2e:96:83:26:ad:0e:36:76:18:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 22:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7937df750d3fdf85cfc2e26a4ba8e5324c18e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:1e:c6:31:08:7f:d2:3c:84:5c:ac:fc:83:
3c:58:77:a3:56:24:60:76:33:08:ba:6a:00:c3:12:
32:20:12:70:9c:80:a8:f4:c2:4b:c8:f0:ca:c4:47:
18:e9:5b:79:1d:22:30:de:50:55:28:42:9f:a9:b0:
4f:75:d2:db:ca:a4:f3:a0:6f:24:cb:11:24:dc:f7:
15:11:ab:ed:02:73:64:69:f8:83:98:60:fa:8f:aa:
5c:1e:77:6b:3a:eb:a3:3b:99:66:3f:fa:3e:04:ad:
0d:23:ca:98:7e:a9:be:6d:b9:64:8e:4b:46:d6:4d:
c9:27:44:0a:16:a3:97:b2:98:b0:be:91:b9:d4:c1:
18:c1:1d:5b:e3:7e:f8:ba:00:d8:2b:a8:ae:15:86:
95:a2:32:8a:43:e5:f2:78:69:d9:dc:67:a2:14:45:
6e:13:d1:7c:88:6d:e5:bf:e3:f2:ef:52:bb:46:3e:
11:c7:37:92:f8:fa:a6:2d:62:bb:2c:76:ac:9f:5b:
be:80:99:25:f9:60:ba:d5:66:78:13:76:be:63:f7:
e1:2a:61:c4:2e:d8:06:7b:05:44:ff:ab:6c:e5:31:
d9:f2:9f:7d:bc:ed:c2:08:ba:d7:91:0a:fe:6e:cf:
e3:cb:80:82:20:50:b8:d2:a2:0b:61:5d:47:49:d6:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:37:DF:75:0D:3F:DF:85:CF:C2:E2:6A:4B:A8:E5:32:4C:18:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PXk333UNP9-Fz8Liakuo5TJMGOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:b5:ee:21:6d:e6:26:42:c1:93:bb:6f:b9:fb:09:e2:0c:5c:
58:70:ed:86:16:01:f0:49:18:ef:7d:32:68:c8:6d:53:11:c3:
84:51:46:85:be:8f:15:99:bc:ca:ba:1a:0a:f4:a0:61:10:c2:
a7:f9:b4:d9:e6:ae:5a:31:53:ca:33:5b:ec:38:48:92:9b:f3:
c2:97:a9:5c:10:af:84:d5:f3:d1:65:93:ac:d6:ba:cf:05:7b:
be:b6:cd:2e:47:6e:75:a4:a8:6f:39:b0:99:44:7c:0f:31:b7:
f4:01:dd:5a:86:5f:57:13:3c:f7:18:88:47:80:9c:88:7d:2c:
d4:61:90:56:f4:00:71:f8:2a:46:98:b9:2f:e3:de:89:3c:92:
56:50:2a:55:8b:d7:a3:98:d6:97:d1:2b:99:3f:35:69:1d:6c:
cf:b7:52:6a:e5:33:ef:5f:91:4c:46:f4:cd:c8:f9:7c:5d:12:
34:78:61:cc:44:16:af:c4:21:3b:82:a8:9a:a5:fd:9a:3d:c0:
f9:11:47:a4:05:4d:7c:8c:14:d1:ae:45:6c:7f:60:bc:83:ed:
dc:56:0c:98:c3:8a:02:04:83:38:d1:e9:d9:27:0f:3e:d5:a1:
a4:2e:db:d3:23:ab:ad:93:41:d5:25:a8:f6:9f:c1:be:70:1c:
42:ec:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:50:37 2025 by rpki-client