Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PYSg8lNZoW4-QbpO2R5tOF3A_dU.roa
File: PYSg8lNZoW4-QbpO2R5tOF3A_dU.roa (raw, json)
Hash identifier: aBBz1as9RmQdyHkKkNvVJVK7TTjo+KkksLHI+Z4JOZw=
Subject key identifier: 3D:84:A0:F2:53:59:A1:6E:3E:41:BA:4E:D9:1E:6D:38:5D:C0:FD:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EFEB18E18F04F441F2558541C5C76300
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PYSg8lNZoW4-QbpO2R5tOF3A_dU.roa
Signing time: Fri 17 Mar 2023 14:13:27 +0000
ROA not before: Fri 17 Mar 2023 14:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:eb:18:e1:8f:04:f4:41:f2:55:85:41:c5:c7:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 14:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d84a0f25359a16e3e41ba4ed91e6d385dc0fdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:f9:71:81:c6:19:8b:b2:18:93:4f:87:d2:
d3:33:7f:86:f8:77:ef:7c:74:11:7c:06:08:c0:91:
c9:58:3f:bb:1f:6f:75:ee:e7:fb:1d:cd:74:07:f5:
40:44:63:58:e2:84:d1:02:13:b2:12:43:0d:d5:b3:
b5:e7:70:1d:12:2d:1a:f7:84:2d:2a:e5:c0:c9:26:
be:cc:17:74:5d:bb:88:b2:7c:3b:3f:d9:e3:63:0e:
6f:00:46:2c:ab:3f:1a:04:4c:de:15:b3:fd:ea:a7:
25:44:40:59:c0:a3:fc:0a:89:20:6a:77:77:df:07:
93:4c:17:66:5b:de:58:e9:3b:ac:3d:95:b6:b2:1e:
58:e5:66:0b:c6:2f:2b:eb:c9:ad:a2:f6:31:27:40:
82:2a:7a:04:f5:65:f2:64:54:55:b0:ef:28:46:43:
ef:4c:8a:f8:28:cd:87:39:ad:2f:e7:1d:65:a6:28:
a1:eb:e2:1e:d1:c0:bb:7d:b1:6a:1a:f2:a7:ea:7a:
5b:4a:c5:fa:94:71:e8:74:10:da:a2:2d:f8:86:3d:
f7:bc:63:7f:70:12:f5:51:cf:25:9c:2d:d2:e5:7e:
df:f8:b8:63:37:3e:eb:4a:58:c0:42:91:b1:b6:02:
38:3b:8b:6a:b1:15:51:84:b4:90:86:a0:17:f6:58:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:84:A0:F2:53:59:A1:6E:3E:41:BA:4E:D9:1E:6D:38:5D:C0:FD:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PYSg8lNZoW4-QbpO2R5tOF3A_dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:e6:8e:d9:19:7c:46:7e:c3:17:dd:31:0d:87:6a:8a:51:92:
45:de:df:df:a6:97:3a:ae:b7:54:96:3f:6d:26:e4:e7:f9:84:
e9:b4:a7:1a:72:72:8c:e7:f9:9e:9e:e9:08:4d:04:b3:a2:96:
aa:ee:66:1f:af:5d:b5:f5:fd:e9:9a:d5:e1:cc:aa:a0:ed:b6:
de:b6:d6:40:98:46:34:52:fa:7a:6f:31:35:69:e9:4e:b4:3f:
13:ce:9e:36:1e:e3:72:ff:6d:0c:76:5e:72:9c:91:8f:64:85:
69:1f:aa:d6:3e:45:4a:a9:09:c0:14:e2:e6:e4:28:f0:8f:c1:
32:94:de:b0:dd:b2:c3:6d:af:f1:24:cf:5c:4c:55:dd:5c:63:
b8:db:52:36:98:a6:19:21:1f:c0:f4:c4:7d:64:28:e3:d6:66:
3a:ca:ab:b1:aa:5f:9a:fb:c6:46:b7:c1:f6:64:98:24:1b:58:
e7:4f:8d:2f:91:ee:85:9d:8b:fc:0f:27:c3:f4:9d:28:72:7c:
de:ca:c6:05:b1:72:61:9a:0d:60:29:2d:9d:95:5e:cb:64:7b:
d2:d6:09:db:41:87:c8:52:4b:88:64:6f:1d:f3:1e:a8:c2:0b:
f6:06:2d:f1:07:45:31:ad:72:39:01:e1:88:d5:96:82:14:0a:
f0:db:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:39 2025 by rpki-client