Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PgeD4rxZN36MYu15peRRbjFgdxc.roa
File: PgeD4rxZN36MYu15peRRbjFgdxc.roa (raw, json)
Hash identifier: k8ScBcJ5CkGzF1pRl2gkA2IjfMa4TPjpLvHouJvrWSw=
Subject key identifier: 3E:07:83:E2:BC:59:37:7E:8C:62:ED:79:A5:E4:51:6E:31:60:77:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186425A6FAFF789A2118BCB97FF96219C6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PgeD4rxZN36MYu15peRRbjFgdxc.roa
Signing time: Sat 11 Feb 2023 21:21:08 +0000
ROA not before: Sat 11 Feb 2023 21:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:42:5a:6f:af:f7:89:a2:11:8b:cb:97:ff:96:21:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 21:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e0783e2bc59377e8c62ed79a5e4516e31607717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:b8:43:4f:86:f3:fa:02:4f:e8:e1:c2:89:
1f:04:0f:b5:4a:69:6b:06:9b:8c:85:c7:9d:43:c3:
40:e6:db:a0:5e:bf:e2:dc:5c:23:04:32:a4:6c:e9:
f6:3f:db:38:6f:bc:74:24:37:c4:bf:19:bb:17:cd:
12:74:a0:f4:b5:7d:93:35:51:29:aa:12:8f:85:7f:
5a:f9:fa:6c:b0:a2:c1:eb:d5:35:7b:10:40:cb:65:
7a:2e:0d:c7:23:23:69:7e:8a:ac:60:56:02:13:4d:
37:2b:d6:25:d7:55:32:b1:d1:06:3f:26:4c:e0:5b:
0c:3f:e8:94:2b:b9:ea:42:43:c3:77:eb:6b:1c:f2:
d7:83:7b:db:f5:29:b7:2f:d0:22:35:da:c1:bd:1d:
da:a7:0b:91:e9:74:35:ab:b7:e5:87:1d:0e:06:88:
02:47:af:cb:39:40:6a:bf:b2:e6:c5:ff:b3:d5:02:
f5:89:31:58:12:a9:d2:69:50:9a:39:a6:75:03:a6:
50:1d:9c:9f:13:e5:e3:ac:78:f7:a6:0d:c8:de:9d:
89:c9:e1:6d:d1:63:40:2d:af:0a:d7:3a:ba:f3:67:
32:f0:4b:dd:92:d2:dd:f5:89:8a:88:e0:36:8b:02:
73:f9:95:be:72:68:36:9b:a9:41:8e:09:ce:d7:1a:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:83:E2:BC:59:37:7E:8C:62:ED:79:A5:E4:51:6E:31:60:77:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PgeD4rxZN36MYu15peRRbjFgdxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:b0:eb:f7:f7:19:7e:bb:b6:0e:dc:1e:95:82:a7:42:62:73:
f7:5b:f5:87:5b:33:08:d7:88:78:dd:cd:49:0c:9d:80:74:0b:
1a:f0:ae:29:e5:88:d5:79:09:bd:a6:b0:fd:b1:0f:22:fc:39:
2a:91:f2:e2:fe:d1:6e:ff:2f:da:5f:d3:80:5e:4d:95:5e:b5:
55:c1:cb:db:08:13:a1:b5:d7:ce:f7:13:13:1d:70:a6:e2:87:
bd:05:ed:67:2c:74:a6:80:b9:34:ac:a6:4c:fc:d1:ae:2f:f6:
c5:49:15:3a:5c:57:e5:ed:be:3c:77:be:51:a4:00:0a:03:49:
a7:e3:1e:7c:9f:a8:35:eb:3d:c6:6e:8c:71:51:63:b8:b5:ed:
bb:17:13:11:50:32:57:7e:9c:a9:69:73:b7:44:6e:ff:10:66:
0f:5a:a0:fc:9c:27:5a:8d:05:dd:73:ac:de:ca:df:6d:0f:ae:
05:ae:75:e4:39:9c:ee:7f:28:b7:5c:f9:93:3c:8a:37:5f:13:
79:16:de:04:e2:ed:89:fe:df:ef:ab:b8:aa:cb:ca:03:f7:ea:
dd:dd:af:b1:3c:d4:10:94:f4:d3:78:51:83:24:d2:e9:49:7a:
41:23:eb:2a:a4:b2:58:3f:08:a5:8f:83:6f:b3:f8:b6:81:5d:
a5:7c:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:08:57 2025 by rpki-client