Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PjyVDN5WsX5VEMLFGDHk3nXNlH4.roa
File: PjyVDN5WsX5VEMLFGDHk3nXNlH4.roa (raw, json)
Hash identifier: yk6BCTq5MLJ6yjX4GRFLGrpn+M8v0sgX+OrX6u/PpS0=
Subject key identifier: 3E:3C:95:0C:DE:56:B1:7E:55:10:C2:C5:18:31:E4:DE:75:CD:94:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69F8D3A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PjyVDN5WsX5VEMLFGDHk3nXNlH4.roa
Signing time: Sat 12 Feb 2022 13:07:55 +0000
ROA not before: Sat 12 Feb 2022 13:07:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777914787 (0x69f8d3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 13:07:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e3c950cde56b17e5510c2c51831e4de75cd947e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:d2:cb:57:d7:6d:4d:06:98:08:7c:9c:6b:
c0:52:40:5e:3e:da:be:fc:55:53:9a:ce:4e:23:4e:
14:9e:14:a7:2e:c2:ad:bb:15:38:13:29:f8:63:4f:
26:94:18:dc:05:8a:b5:c2:65:48:81:3f:d1:1f:e1:
8e:48:02:26:8c:78:1a:f4:ad:f7:f4:e1:4d:7f:56:
27:42:0a:51:f8:a9:43:02:75:c5:f6:65:fe:fb:78:
8e:1c:58:24:cf:a1:56:2c:ba:36:cd:fe:d9:f3:4e:
90:e7:b6:1d:53:17:50:31:0e:14:46:57:ef:04:55:
97:04:36:5a:cb:c1:a3:06:8b:b3:cb:d5:5e:3d:53:
a4:64:d5:1d:83:9f:1b:ca:a3:71:20:61:f1:60:6c:
82:78:08:4b:61:d0:60:42:9c:fb:bb:7e:2e:9b:7b:
7e:b0:f4:1d:75:59:92:c8:50:e5:af:09:01:a9:c0:
f7:b1:21:8a:c0:95:fd:12:f6:3f:18:6f:97:94:03:
88:9d:89:70:a2:b0:15:31:e3:13:a5:31:e4:b8:ad:
25:a7:c5:60:af:00:37:4e:fe:bf:45:33:9e:95:28:
2c:8d:be:bc:9b:78:48:bf:fe:78:f9:27:0c:00:19:
0a:fc:a0:7a:95:82:55:9e:ae:07:b5:fa:9d:d8:51:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:95:0C:DE:56:B1:7E:55:10:C2:C5:18:31:E4:DE:75:CD:94:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PjyVDN5WsX5VEMLFGDHk3nXNlH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:eb:4e:4e:07:5c:3b:10:a8:70:97:49:28:fc:42:36:9a:ef:
99:ab:24:90:70:48:0d:07:a8:68:17:f2:10:ae:fe:36:8e:89:
56:4c:40:64:f3:d7:cd:b6:ed:d9:58:c0:41:fb:84:b1:36:a0:
2b:25:4c:d0:40:25:e6:a7:33:9a:b6:18:2b:91:57:9c:73:f8:
ae:6b:2b:79:63:8e:3b:04:c3:ff:8a:db:73:b1:cf:e0:fe:f8:
d8:97:e3:be:9f:ee:ee:1b:7d:1a:62:7a:44:4c:8c:97:28:ea:
a2:35:25:0a:6e:f1:5d:95:45:8b:ea:be:84:45:fa:00:69:d0:
61:43:5e:c8:a1:20:5c:f6:cb:17:c9:d3:b5:a4:56:e7:70:58:
50:ae:b1:c9:25:3a:a3:4d:00:34:a6:30:b1:1d:ea:65:09:1b:
ce:21:ee:30:02:f0:e1:5b:a5:ab:2f:ce:47:7d:f5:b0:5e:d5:
4d:c1:19:72:33:d7:0f:22:88:5f:4e:7a:dd:1f:90:c7:13:c4:
49:2f:40:18:f6:41:74:c9:98:2d:73:55:d3:cf:ff:1c:e5:e6:
66:d6:05:4c:2f:1a:87:0a:23:bd:99:0e:bf:bd:cd:e9:10:bc:
02:dd:26:d4:0f:f2:f5:93:6b:f3:b6:15:9a:5c:52:a5:a9:79:
ae:8f:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:58 2025 by rpki-client