Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZdjSTEHGGc_Sp1votGfddVDw4A.roa
File: PZdjSTEHGGc_Sp1votGfddVDw4A.roa (raw, json)
Hash identifier: vnKDTfx4d9ZcSQlyu5d7A9v9WJJih9/1YcqKXLmDT6M=
Subject key identifier: 3D:97:63:49:31:07:18:67:3F:4A:9D:6F:A2:D1:9F:75:D5:43:C3:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B283C4C4D9006AF1C362D1630D58396A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZdjSTEHGGc_Sp1votGfddVDw4A.roa
Signing time: Tue 13 Jun 2023 02:09:20 +0000
ROA not before: Tue 13 Jun 2023 02:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:83:c4:c4:d9:00:6a:f1:c3:62:d1:63:0d:58:39:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 02:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d976349310718673f4a9d6fa2d19f75d543c380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:72:cc:23:41:13:b3:81:17:ae:f0:03:e1:
10:e9:3d:a1:8b:89:a1:0c:6c:aa:dc:ed:85:6b:c4:
12:cb:7d:15:5c:e5:fd:5c:95:12:de:a0:67:77:86:
c3:60:6c:fc:d8:90:f9:97:a5:78:7c:d1:2d:33:7b:
51:0e:55:53:be:c8:9d:20:f0:ef:e0:f8:75:69:65:
da:e1:25:25:63:bc:78:e0:69:cc:8c:bf:3e:bc:a1:
dc:86:ab:11:3e:8d:65:f4:c5:d8:37:de:d7:2e:48:
7b:f4:78:97:bf:45:44:13:e1:9a:28:91:83:00:2b:
74:87:bd:cc:05:0c:86:21:28:5e:e0:68:c4:ba:95:
d4:80:df:b3:db:f4:0d:f0:d8:96:7a:c0:67:97:b3:
48:5b:31:c1:ed:4d:4d:a9:f8:04:e1:e5:36:f1:71:
2b:5f:fe:62:d3:59:b2:b4:15:1e:5a:3c:08:41:27:
95:f3:ff:26:8b:5a:6b:93:0b:66:4d:05:96:bb:a9:
d6:1e:ae:e0:a1:81:61:41:e7:53:56:63:04:2e:15:
46:32:bb:74:7f:6e:35:bf:a7:35:09:ff:a6:c2:75:
c8:91:30:9b:b7:07:bc:54:f7:73:78:7a:0d:74:fd:
2f:d7:e7:d6:39:56:60:9d:86:2e:98:c9:58:25:e2:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:97:63:49:31:07:18:67:3F:4A:9D:6F:A2:D1:9F:75:D5:43:C3:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZdjSTEHGGc_Sp1votGfddVDw4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:df:2e:1d:a5:a4:17:38:67:47:a3:4e:60:fc:bb:5a:5f:a9:
29:a2:f1:61:5a:f2:eb:72:db:ab:ec:4b:d9:3a:c1:fe:cc:f6:
bf:59:78:b6:d2:86:00:bd:38:f5:6e:0d:e8:af:22:55:46:6e:
87:ea:74:57:97:d1:83:38:77:bf:4d:af:51:71:90:85:f9:5e:
76:32:04:a8:85:b2:7f:d0:05:81:6f:ef:22:e8:82:31:e5:18:
68:0d:89:9a:5c:fe:f4:e7:ca:28:0d:92:64:11:6e:96:3b:b6:
36:37:c2:76:76:99:8a:5a:11:f8:14:8e:0d:09:cf:b7:12:70:
5d:59:49:04:6a:49:37:bb:4b:80:9e:2a:4e:8a:f6:7a:34:be:
b5:62:78:db:26:5e:2b:54:bf:a3:49:37:e2:dd:89:57:8b:6e:
2e:01:f0:17:8c:06:a3:86:3b:4d:53:3e:33:c0:17:4e:01:58:
72:85:3d:82:61:ed:51:26:71:17:40:5e:9e:91:c7:56:6b:aa:
15:56:b6:25:e3:d3:c2:cc:c5:e6:9b:dd:cd:fc:00:e5:89:35:
55:5c:0a:93:5b:99:c0:f2:bf:da:b1:77:86:a3:63:df:e7:fc:
29:9d:ba:2c:dd:c1:4f:50:49:12:42:c2:17:90:95:26:3a:a0:
7c:a0:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:01 2025 by rpki-client