Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZj48vdQRq2-p8cu5M5Jy6Q4ako.roa
File: PZj48vdQRq2-p8cu5M5Jy6Q4ako.roa (raw, json)
Hash identifier: M9RwYEVBKswxdnjO7lTF792HdJpgLRp6W2wFpYlt0W4=
Subject key identifier: 3D:98:F8:F2:F7:50:46:AD:BE:A7:C7:2E:E4:CE:49:CB:A4:38:6A:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018559ECFCA0D5D5FCECB6FFE347CCBBDE7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZj48vdQRq2-p8cu5M5Jy6Q4ako.roa
Signing time: Wed 28 Dec 2022 18:09:41 +0000
ROA not before: Wed 28 Dec 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:ec:fc:a0:d5:d5:fc:ec:b6:ff:e3:47:cc:bb:de:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d98f8f2f75046adbea7c72ee4ce49cba4386a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:87:48:e4:b7:6d:81:86:d0:77:6e:29:d5:
f1:4c:83:6d:5b:94:2d:a2:a5:bc:d5:65:51:38:40:
8b:60:1b:cc:7e:3d:7d:62:e7:89:45:df:43:a8:37:
95:db:cc:84:06:e5:4f:25:3e:03:d2:3e:2d:84:c4:
80:4a:65:53:af:5d:1f:f5:36:3e:07:a7:72:9d:f9:
69:2d:05:c6:b7:4d:4f:2f:4c:26:14:01:72:85:18:
0a:bd:73:4a:06:7a:ec:03:7f:db:46:f4:1d:36:0d:
aa:e1:b4:23:97:94:34:fa:af:2a:50:88:bb:40:1d:
9b:c7:94:21:26:49:36:99:98:4b:33:ca:97:5e:0c:
7d:58:5f:36:02:f6:f9:11:57:56:81:e1:5d:a4:bf:
58:18:c7:15:93:e2:e8:2b:7b:34:c8:d3:b5:62:cb:
a6:2c:00:8f:f3:68:ee:74:18:6f:58:7e:74:c4:f9:
61:4a:db:de:c9:43:66:cb:72:a3:c7:46:a8:05:9a:
5b:86:d5:c7:fc:ce:82:33:ca:31:aa:aa:87:2c:bb:
d3:1e:72:10:3e:21:08:8f:82:ff:09:c8:56:e3:3b:
3d:95:f1:3f:56:8f:73:02:22:30:0c:af:85:77:95:
aa:b1:dd:9e:d6:b6:33:f6:92:c1:5d:a0:1f:6d:eb:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:F8:F2:F7:50:46:AD:BE:A7:C7:2E:E4:CE:49:CB:A4:38:6A:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZj48vdQRq2-p8cu5M5Jy6Q4ako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:12:4d:aa:64:a2:ca:d5:94:af:75:a7:a1:a5:62:c2:41:cf:
b0:6d:d8:1f:23:28:6d:28:28:4a:c0:ae:6a:b3:36:9d:3f:1b:
e8:92:e8:3f:8e:c7:b7:2c:90:6e:5a:7b:b1:94:e1:4b:a9:99:
55:ea:df:92:1d:0e:9d:78:ed:cd:ab:7c:06:29:fb:8e:92:5b:
1d:03:30:a1:2e:16:8b:34:69:04:9d:e4:db:6a:1c:73:47:89:
52:21:80:61:d8:d4:b2:55:bb:e9:db:2d:b4:e0:95:d4:cc:25:
8d:fa:3a:86:6b:92:50:44:f6:2c:0b:07:c1:b8:fa:ee:53:51:
79:6a:ff:90:9c:56:77:7d:3e:0f:e3:b6:a2:23:27:79:a4:d6:
51:d0:6e:b2:68:ad:0a:21:0f:09:a3:84:9d:43:04:d3:75:8e:
84:fd:d3:22:bd:4c:0f:25:97:71:4e:e6:d8:fb:20:46:ea:39:
f2:a7:55:bc:e7:ef:ea:ee:8c:7f:31:76:3b:0f:32:f2:da:54:
f6:1f:8d:ea:19:fd:99:a7:65:6b:62:69:2a:9f:05:f8:5a:2e:
e2:06:8f:37:0e:f8:1a:2f:2d:1c:fe:ed:30:2e:ae:d2:11:3f:
e5:6c:1c:8f:0a:ea:ad:a1:e7:37:80:46:c4:aa:bf:8b:a1:e7:
e1:63:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:12:39 2025 by rpki-client