Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZRT4FgLq5eocG2H7xwfy6b04Cc.roa
File: PZRT4FgLq5eocG2H7xwfy6b04Cc.roa (raw, json)
Hash identifier: gHjEnwYKTZLifuZkN4qWp2morlSGGe9luJozBE1CUWY=
Subject key identifier: 3D:94:53:E0:58:0B:AB:97:A8:70:6D:87:EF:1C:1F:CB:A6:F4:E0:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842ECF54B190B1DDD1CD1FA9F40BFDE2FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZRT4FgLq5eocG2H7xwfy6b04Cc.roa
Signing time: Mon 31 Oct 2022 16:10:49 +0000
ROA not before: Mon 31 Oct 2022 16:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:cf:54:b1:90:b1:dd:d1:cd:1f:a9:f4:0b:fd:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 16:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d9453e0580bab97a8706d87ef1c1fcba6f4e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:29:f4:7b:03:85:5a:37:5b:e6:61:e6:03:
38:59:d2:cc:e5:e2:99:50:68:f6:f8:46:b8:3e:3d:
a9:59:39:54:8c:ca:32:3f:0c:7b:1a:00:10:38:d5:
87:ac:8b:ee:3b:7f:55:ea:94:7b:fc:be:2d:8d:ad:
35:16:50:cc:c2:86:cf:ba:d4:4c:c1:9e:65:0a:46:
23:60:06:4b:92:68:c9:91:40:db:42:da:af:15:6f:
24:33:29:97:b1:66:dd:d0:df:75:31:37:14:9f:0e:
f2:da:15:6c:48:33:0a:d6:34:c8:36:28:79:bb:53:
60:cf:bd:b0:03:11:07:b8:41:18:f6:87:f2:0a:99:
e2:61:b5:49:e9:7a:2e:72:e2:c7:c1:8f:73:06:62:
fe:80:65:16:82:31:92:be:98:db:64:39:3f:71:bc:
bb:38:3d:ec:87:d3:8c:dd:5b:31:2d:6d:8d:83:34:
23:0d:e6:bf:6e:0e:44:bd:d0:19:71:f0:33:3e:8d:
7d:f4:76:3e:da:96:e3:dd:eb:72:a2:e4:54:74:bc:
c4:15:ac:21:6f:18:39:cd:47:dd:04:5b:97:47:38:
8d:09:1b:90:4e:ed:fe:b1:c8:86:9e:80:85:c4:4d:
d5:85:ef:c4:75:4c:f7:67:03:78:f9:f7:3d:ea:70:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:53:E0:58:0B:AB:97:A8:70:6D:87:EF:1C:1F:CB:A6:F4:E0:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZRT4FgLq5eocG2H7xwfy6b04Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:9c:5e:aa:30:1d:de:d6:41:e0:3f:6d:67:9f:9e:e4:ea:f0:
ab:27:fd:c3:f9:73:ff:77:eb:f7:fe:9f:f2:ae:89:59:42:c6:
8f:d6:3e:e5:d6:ed:ab:51:f1:56:c5:03:aa:ba:96:12:e0:3b:
95:a7:08:e7:f3:57:43:83:34:1a:47:e3:ac:99:ae:dd:f5:06:
44:25:76:f1:4a:47:77:ba:02:1d:4d:c3:80:54:68:15:04:e4:
44:dc:ab:be:7f:5b:79:87:e4:2f:b3:89:de:8f:87:9c:65:86:
22:c8:e2:c4:c6:28:4a:bf:15:56:af:dc:be:59:7c:d9:56:05:
35:a3:a6:05:fc:24:5e:9b:51:d6:e0:8f:0f:31:46:9d:94:43:
36:15:85:41:67:b2:cd:0a:db:ee:de:06:3e:6d:ac:bf:1d:10:
d3:b2:9d:2d:26:3f:e9:b9:3c:2b:54:b5:c3:df:b5:eb:97:51:
2c:20:1f:3c:c0:22:99:89:01:55:7f:b0:0d:ff:1d:e0:f4:2c:
4b:57:e9:17:46:48:48:97:21:ea:f0:28:e2:31:0f:93:c8:4a:
ed:a3:f6:96:86:91:c9:18:5f:c2:99:c7:5b:b1:7f:01:58:2d:
fb:ee:04:0c:8c:34:78:d1:5d:dc:02:ea:42:ee:3d:ef:e1:39:
1d:a7:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:35:59 2025 by rpki-client