Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PaODKUNaqOp7GmRHVN4tCSbTDBg.roa
File: PaODKUNaqOp7GmRHVN4tCSbTDBg.roa (raw, json)
Hash identifier: N2qyIlkgA4EPr9QUe6v+njJVlkHnf5gBL14YKHTn8wY=
Subject key identifier: 3D:A3:83:29:43:5A:A8:EA:7B:1A:64:47:54:DE:2D:09:26:D3:0C:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893B9CFA02D1932450858751A1C1E36D0D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PaODKUNaqOp7GmRHVN4tCSbTDBg.roa
Signing time: Sun 09 Jul 2023 17:04:50 +0000
ROA not before: Sun 09 Jul 2023 17:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:189:3b9c:7648/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3b:9c:fa:02:d1:93:24:50:85:87:51:a1:c1:e3:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 17:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3da38329435aa8ea7b1a644754de2d0926d30c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:11:fa:a6:2f:f4:56:8b:15:6a:5f:3d:6f:
35:3a:8b:4d:c4:b2:34:1a:9d:09:fd:3f:31:bf:1c:
8c:c4:e9:3d:9a:ac:c4:f2:b5:4b:e2:01:59:4c:88:
8c:cc:6e:75:9a:74:28:ae:85:e3:aa:01:1f:55:98:
c4:30:c2:f2:34:79:2e:28:86:1c:5e:76:2e:75:8b:
2e:71:fd:ec:d7:a9:f4:3f:cd:de:01:c7:d2:b5:4c:
89:bb:a2:0a:f3:11:a3:47:d8:85:0a:11:72:48:be:
6a:92:a2:5e:c3:35:67:8c:8c:85:7e:b0:ef:b1:06:
47:9b:df:e4:a7:d4:a3:1c:c0:22:d5:63:64:20:2c:
29:5a:35:88:17:b1:6f:5b:24:57:b3:3a:7f:a2:a8:
ab:70:54:5f:1f:a1:7e:15:46:bd:fa:c4:80:8e:30:
ad:a4:8d:9b:fe:71:86:b0:60:d3:8b:0f:23:aa:e1:
71:11:34:b6:cc:ff:04:6a:02:54:b0:9c:67:7b:cf:
e6:a7:68:42:2e:9d:6a:5a:50:8f:9f:22:90:9f:dc:
8e:52:fe:1c:2c:6b:4e:2b:5d:1e:e5:01:1b:3b:ab:
fe:87:b0:64:da:02:e9:7a:4e:c6:cf:02:7c:f2:51:
4e:8c:3b:c6:c6:8e:7d:ef:4c:6f:a1:27:d0:3d:f4:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:83:29:43:5A:A8:EA:7B:1A:64:47:54:DE:2D:09:26:D3:0C:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PaODKUNaqOp7GmRHVN4tCSbTDBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:fd:e2:ad:99:65:5f:c8:61:fe:3d:03:18:91:76:37:97:1c:
a4:7a:33:47:d9:24:e4:59:cf:09:8b:22:d0:f2:65:7e:99:e4:
8a:97:75:28:0f:30:88:b6:0e:c5:93:f8:a3:be:ef:2d:9b:51:
a2:e3:c6:04:50:19:d7:66:bb:11:97:02:6e:e5:2f:a8:97:0f:
77:7d:bb:cd:3c:9b:97:31:d8:80:8a:e2:ae:ce:7b:75:07:fb:
a4:7e:7c:ce:dc:4c:b4:74:de:25:14:ae:65:1b:ba:7a:ac:0a:
ed:ec:37:8e:7d:33:78:cd:c4:b9:f6:6b:02:6c:3f:f1:29:6e:
a5:f9:cc:f2:2b:b9:a4:be:b0:77:2d:40:3d:04:e1:08:10:d9:
d7:27:35:cb:8f:4c:0a:e0:b2:55:1f:87:85:38:79:ad:d3:0f:
c3:84:cd:43:7a:41:b1:a4:ad:62:35:ca:d3:4c:35:33:5d:94:
e6:1f:45:62:62:88:86:8d:36:98:b0:ad:e9:3e:6f:61:79:58:
5b:7f:c8:30:b4:8d:d6:8b:85:b8:8f:df:0e:6d:cf:15:77:e3:
c9:e4:cf:dc:d1:8e:d3:d1:e5:91:f1:5a:8c:82:44:93:8f:71:
94:40:21:ce:85:3d:34:6b:ab:3f:a2:8a:63:c6:8c:47:a8:34:
41:bc:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:55 2025 by rpki-client