Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PkqsdRohdjmZqQ7OvsyGX_nVTe8.roa
File: PkqsdRohdjmZqQ7OvsyGX_nVTe8.roa (raw, json)
Hash identifier: /rb+tsP0DToNfs/nywhwR7jw7Eb8p/qu7utqeJKaRII=
Subject key identifier: 3E:4A:AC:75:1A:21:76:39:99:A9:0E:CE:BE:CC:86:5F:F9:D5:4D:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E23AEF6F2375B4F0E6CA75EEA27CDA7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PkqsdRohdjmZqQ7OvsyGX_nVTe8.roa
Signing time: Sun 16 Oct 2022 19:17:36 +0000
ROA not before: Sun 16 Oct 2022 19:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e2:3a:ef:6f:23:75:b4:f0:e6:ca:75:ee:a2:7c:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 19:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e4aac751a21763999a90ecebecc865ff9d54def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:18:b8:01:48:4c:64:60:97:02:f0:82:6d:
1e:74:1f:a2:2e:b5:e8:33:28:55:52:18:41:73:c9:
b4:bf:96:fd:a7:e4:2e:4e:24:75:8e:6e:7f:4e:82:
55:55:9e:3e:ef:48:c6:94:f4:c8:55:ff:dd:d4:06:
30:02:62:b4:87:bf:b6:2a:1f:dd:e3:18:81:39:e0:
91:8b:4c:03:f7:8b:fd:4e:23:d8:da:44:da:20:71:
81:b0:07:1e:7b:e3:53:f2:75:28:b0:94:ac:d9:fb:
df:45:f7:74:4a:67:cf:5e:43:cd:ed:f7:14:08:43:
53:4b:3f:b1:99:d5:fb:64:d9:ee:60:07:45:e3:e9:
5d:ce:43:ca:62:a7:67:d3:78:fe:e9:79:3e:d5:ba:
7b:84:74:2d:ee:78:d8:11:b6:4a:c6:0e:f6:db:ff:
9a:46:67:eb:9c:15:50:dd:49:93:60:e9:57:d8:60:
54:84:3c:d4:e0:13:b1:8d:3f:25:f5:88:dc:47:0d:
26:de:77:30:12:64:c5:ad:a3:a0:fb:3c:21:2e:cd:
6a:b6:25:28:8c:09:31:5b:6d:20:aa:ae:b2:46:1d:
d8:93:c0:e4:d2:e3:b6:56:f1:68:49:f2:78:72:fe:
9d:69:b2:78:29:a9:db:eb:e0:63:2d:dd:5e:b8:77:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:AC:75:1A:21:76:39:99:A9:0E:CE:BE:CC:86:5F:F9:D5:4D:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PkqsdRohdjmZqQ7OvsyGX_nVTe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:cb:68:c5:63:a6:5e:ee:82:de:b4:bc:58:1b:df:19:e4:b8:
2e:c0:a3:a5:6d:6f:03:b4:a8:b5:d6:78:38:c9:17:0f:4c:25:
c8:71:d4:f2:5f:e1:63:4a:80:f2:ef:8d:01:f9:c5:b4:1e:a7:
61:3f:10:9a:8f:9b:90:91:45:fc:13:80:f2:5c:58:49:a5:3a:
74:0f:43:e1:fb:8b:01:cd:3d:72:da:7c:91:52:e9:b1:a9:53:
e5:54:cf:ff:4e:52:b7:59:4d:c1:9c:cd:31:2a:04:3e:13:e7:
bf:aa:3f:3d:55:19:d7:ec:f6:0f:92:e8:6f:6b:a1:05:dd:83:
e4:e8:7e:10:fb:c5:a0:d4:32:e0:c0:1b:99:3a:31:df:95:41:
41:a5:b8:7a:84:2e:c3:c9:ae:b6:bf:77:e4:f2:92:85:e2:44:
14:51:17:ba:3b:37:6d:7a:68:ef:25:d3:a0:7f:d6:70:1e:08:
25:49:3d:cc:d4:3f:33:07:b6:e8:a7:79:30:2e:63:c4:29:4e:
98:9f:a0:70:d7:ae:73:db:cb:00:8c:21:f9:ed:57:31:66:21:
77:00:ff:72:9c:10:9f:c4:20:3f:a0:bd:76:81:e2:f8:70:36:
0c:7d:ee:17:1c:36:a7:9c:90:41:bc:25:7b:aa:40:05:93:96:
ea:21:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:57 2025 by rpki-client