Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P_wJ2z-VD432ZQhMaXElyKwK_sY.roa
File: P_wJ2z-VD432ZQhMaXElyKwK_sY.roa (raw, json)
Hash identifier: IG577e2UpPMTl0AWsJTK2wbKfa5k0vMYbibqgVrpQb8=
Subject key identifier: 3F:FC:09:DB:3F:95:0F:8D:F6:65:08:4C:69:71:25:C8:AC:0A:FE:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879CA65FB7D2BC497FBDD83EE3D7DFC6A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P_wJ2z-VD432ZQhMaXElyKwK_sY.roa
Signing time: Thu 20 Apr 2023 03:12:41 +0000
ROA not before: Thu 20 Apr 2023 03:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9c:a6:5f:b7:d2:bc:49:7f:bd:d8:3e:e3:d7:df:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 03:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ffc09db3f950f8df665084c697125c8ac0afec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:5a:e8:c2:ee:7f:82:ea:f8:00:85:a3:fc:
5f:29:3d:be:b0:56:65:e1:c0:2d:53:6f:3c:72:3a:
a8:c0:5d:13:77:dc:53:de:cc:5e:9b:ba:54:da:63:
74:3b:d2:b7:92:3e:86:ce:62:6e:9e:e9:49:61:eb:
61:bb:32:df:b4:f6:10:02:9e:8e:63:64:53:f0:85:
8c:7e:9a:eb:ab:9c:43:db:d7:a6:59:0e:1b:17:74:
42:42:68:94:e5:b9:43:f5:f0:05:78:55:b3:0f:e0:
5e:6d:3a:5c:10:31:01:23:77:0f:2a:c3:00:05:8a:
25:7f:8a:98:c5:dd:32:6b:66:fc:c1:0b:fa:6f:3d:
23:e7:c2:26:87:b4:40:77:6a:0b:26:ec:55:69:9a:
60:ac:69:27:76:b7:29:06:b7:7a:e5:b7:f9:c6:44:
ce:6b:7d:bb:1b:31:dd:dc:9a:8c:3a:1e:1f:97:e9:
44:99:1f:9b:c1:d6:72:cb:8f:b8:f5:6b:5f:60:d8:
e5:94:7d:8b:35:fa:61:0b:ab:d5:d9:46:96:76:e5:
4d:03:35:54:5e:0d:54:99:74:5e:57:ba:b3:53:92:
18:9e:54:69:7b:6a:ca:78:3e:e7:41:35:f9:55:1e:
0b:8b:6b:53:44:63:47:77:7c:33:af:6f:bb:45:94:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:09:DB:3F:95:0F:8D:F6:65:08:4C:69:71:25:C8:AC:0A:FE:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P_wJ2z-VD432ZQhMaXElyKwK_sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:87:9e:e0:a4:d0:8d:05:2b:48:b0:0d:b0:67:f1:fb:fd:60:
2e:c3:09:6d:a1:73:e8:62:01:5a:e2:15:7c:6d:58:2a:9d:9a:
0f:2c:fd:3b:46:28:04:0a:4f:1e:74:41:33:b0:ac:e9:ea:3e:
fc:84:11:fd:71:60:f1:13:ab:1c:ca:7f:23:06:1f:14:db:f0:
1c:bb:8e:42:17:09:e7:9a:44:f4:dc:bc:72:7e:36:35:65:ad:
54:9a:8b:ff:68:bc:ae:15:0b:08:72:6a:c2:0b:4d:f0:2a:4c:
a4:8e:50:c5:b3:ce:3a:65:49:cc:fa:95:7e:87:d3:7e:fe:2b:
ea:7f:4e:23:0c:e5:de:36:f3:2a:96:b0:c5:25:68:e2:28:32:
c2:99:1c:a3:b9:86:e8:f0:7b:4c:63:73:d4:1b:94:9f:97:d5:
7a:42:8b:d0:79:5a:0c:22:04:0b:fd:b8:b8:ba:f0:34:64:c1:
6a:ac:c6:ad:37:82:27:10:e2:0b:78:98:e8:1b:a2:27:c9:80:
5f:c5:fa:78:20:7e:e9:72:7a:b4:50:7b:9a:c4:40:90:a5:8e:
ad:86:89:98:e7:c0:91:04:c6:06:57:ef:c4:cc:4d:c0:76:a4:
4c:7b:2d:f9:39:6e:79:10:55:04:4d:19:9b:9f:1b:3f:34:8a:
e1:a6:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:58:08 2025 by rpki-client