Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PhPb_mOwJaR1PaKGKJyHkQL5KnQ.roa
File: PhPb_mOwJaR1PaKGKJyHkQL5KnQ.roa (raw, json)
Hash identifier: QDYlE5PkdEUYJJDyZuWuAsyxCblj/ciI+qrSoh5lNSM=
Subject key identifier: 3E:13:DB:FE:63:B0:25:A4:75:3D:A2:86:28:9C:87:91:02:F9:2A:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EE3AC4CC8FBA6651BA904BE369DC1D56
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PhPb_mOwJaR1PaKGKJyHkQL5KnQ.roa
Signing time: Wed 19 Oct 2022 03:12:52 +0000
ROA not before: Wed 19 Oct 2022 03:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:3a:c4:cc:8f:ba:66:51:ba:90:4b:e3:69:dc:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 03:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e13dbfe63b025a4753da286289c879102f92a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:37:59:9e:d7:d5:36:ab:a9:a3:80:c4:b4:
64:3d:c8:e5:78:08:b8:6e:26:a6:2d:fb:99:76:21:
b7:f1:18:a3:ae:1b:be:83:07:2f:61:97:b9:89:62:
6d:b6:b0:51:29:8e:09:c4:35:29:cd:5e:f8:e4:69:
95:67:c1:4b:12:ee:3d:24:55:6e:9e:de:2b:e5:eb:
d8:33:64:fe:b7:f3:c4:a8:18:16:d1:92:26:51:5d:
05:64:bf:23:9a:18:45:cd:4f:59:e6:a9:82:6b:90:
22:7b:a0:03:3e:0a:ec:40:b1:95:45:c8:01:61:39:
a2:c5:05:88:bf:bb:bd:aa:51:41:42:55:d9:18:74:
ea:dc:6d:f1:05:28:06:59:a1:37:ec:ea:34:fe:7f:
b4:c8:0b:84:80:07:b1:22:b6:69:d5:54:3b:fc:29:
31:c1:a5:57:f7:b1:7d:93:28:2a:8b:28:3d:1f:8e:
dc:98:1c:d6:fe:40:ce:3d:7a:d7:45:1b:b7:32:76:
aa:65:ff:ba:ef:2e:d2:5a:54:47:c1:eb:89:ae:79:
b7:37:fa:cf:5e:46:97:85:79:c8:9d:8f:d1:06:d5:
8f:f2:24:4e:c3:38:03:7e:26:a2:78:6e:c5:d9:4b:
29:62:17:d3:5b:d2:52:fb:5a:ed:d2:0a:1a:56:bb:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:DB:FE:63:B0:25:A4:75:3D:A2:86:28:9C:87:91:02:F9:2A:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PhPb_mOwJaR1PaKGKJyHkQL5KnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:3a:b6:57:65:98:11:79:0b:27:92:f4:c9:fb:17:61:2b:b3:
15:00:4b:0e:4e:a7:76:c4:37:ab:d0:1f:4c:6c:64:48:20:12:
40:a7:fb:d0:f6:72:7c:04:38:b0:b5:39:ad:6e:0b:be:a2:92:
69:28:d3:e7:7d:81:a9:10:63:b2:0e:5b:5e:c3:dc:b0:5f:5e:
2e:39:3b:4c:ae:25:ff:0a:da:63:4d:db:96:ca:f9:61:6c:42:
c6:a3:cd:03:f1:9d:ac:d9:41:75:31:c6:95:5d:e2:bc:55:82:
46:e6:35:f3:fe:93:ff:2d:b5:fe:49:df:1f:4a:f5:c7:83:2a:
2a:f5:47:72:ab:54:1f:f0:3f:66:48:7a:59:2f:a9:7f:9a:ab:
7f:04:0f:d7:3a:a8:ac:ac:8a:ea:7f:a2:f2:74:cb:3b:4e:05:
24:63:78:55:49:51:c0:1e:79:c8:32:63:9c:5c:57:a1:68:a4:
f5:99:0e:80:f4:91:f1:49:2d:f2:3f:72:3e:b0:4c:32:df:a3:
3a:75:c0:e1:dd:26:d5:21:11:1e:de:3a:a4:f7:2a:8d:cc:b5:
0d:a2:8a:9b:24:c4:2a:66:d2:82:62:c0:93:9b:b0:b6:28:18:
5a:8b:17:d2:ef:40:a0:7e:21:ac:7c:f5:9d:85:a9:42:f0:4b:
87:c5:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:07:40 2025 by rpki-client