Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlYcNSLLSW-gJkQFjc3uc7cyjI0.roa
File: PlYcNSLLSW-gJkQFjc3uc7cyjI0.roa (raw, json)
Hash identifier: cTnjBX5cKMMUY//TnmCTcJRBf2XhvU9retji7JAFk3E=
Subject key identifier: 3E:56:1C:35:22:CB:49:6F:A0:26:44:05:8D:CD:EE:73:B7:32:8C:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DE835E94DA7EBC845C1C545E3E46970E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlYcNSLLSW-gJkQFjc3uc7cyjI0.roa
Signing time: Thu 10 Aug 2023 08:14:58 +0000
ROA not before: Thu 10 Aug 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:83:5e:94:da:7e:bc:84:5c:1c:54:5e:3e:46:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e561c3522cb496fa02644058dcdee73b7328c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0c:13:39:db:98:04:54:64:18:00:34:c1:ce:
b9:9f:3d:e3:fc:2c:44:b1:eb:a1:29:ab:9b:2e:f5:
18:36:a9:71:03:ab:4d:5f:85:5e:32:ec:22:c5:53:
4d:c0:5d:94:09:df:ea:89:cc:b9:78:02:2c:0c:87:
1d:f6:3f:ba:06:16:58:71:e8:ec:b6:7d:ce:99:ac:
88:70:fe:ef:87:79:5d:d1:8f:cc:ee:22:3a:40:19:
2e:df:42:71:01:65:26:22:16:17:14:68:53:ab:97:
ef:5d:b4:4c:0e:98:ca:f4:01:69:7d:af:14:b2:8e:
6d:47:b3:b3:f9:52:5c:96:4e:f5:0f:33:e0:4c:1f:
f2:19:bc:cc:c0:96:c7:6e:94:76:1a:d0:23:52:7d:
c3:c0:35:ea:0c:84:a8:7c:6b:d0:c9:69:e6:fb:5e:
78:c1:fa:06:25:01:59:16:f2:92:54:c0:42:43:9e:
05:70:a6:cd:34:2e:8c:c8:0f:ba:37:4d:b7:eb:21:
a0:04:41:f7:43:e5:c2:68:77:65:5b:d5:47:fb:d9:
b6:42:7a:69:72:9e:92:d4:3a:01:25:5d:61:4a:c7:
3f:98:18:9e:33:ae:bc:da:47:b0:77:c3:97:27:aa:
b9:7a:50:bd:3f:b2:b3:58:b8:29:4b:d4:c3:3d:2a:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:1C:35:22:CB:49:6F:A0:26:44:05:8D:CD:EE:73:B7:32:8C:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlYcNSLLSW-gJkQFjc3uc7cyjI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:95:fb:81:d8:3d:4a:8b:4f:a2:b7:b0:d3:66:e8:92:79:b8:
b8:b3:2c:10:e6:a6:0a:26:50:c7:1c:f0:cd:9e:5e:93:d4:ed:
55:cd:16:3d:20:eb:25:48:65:17:4e:b3:0a:48:50:e0:30:c4:
a6:5a:1b:c8:03:79:5c:a7:72:35:b8:68:f1:2a:bb:7b:23:13:
24:be:b3:ee:74:84:ad:f3:6a:bc:4f:fe:4b:9a:a2:ab:68:d5:
d3:0f:c7:1d:be:54:83:ca:e3:da:60:66:05:01:3a:6f:80:4a:
77:1e:f8:31:a5:64:95:cc:b8:fa:cd:ef:85:69:96:4f:83:d0:
aa:7a:2d:3e:e7:ac:f9:b3:64:cb:7c:fd:68:02:dc:99:25:6a:
ba:62:e0:d8:ec:59:e1:83:b5:5c:0c:15:3e:a0:1d:f6:5f:ff:
da:3e:10:18:eb:5f:09:11:50:98:f0:8a:78:08:b8:a5:e1:19:
27:a5:34:68:e9:6c:4d:8f:ab:85:be:65:dd:89:6c:6b:80:6e:
dc:3f:96:cd:b8:9c:20:07:82:03:e8:a4:8f:fb:b4:6d:de:49:
c0:3e:fb:6a:ce:9d:82:93:5b:df:c0:f7:7a:ab:9b:82:83:1a:
b2:b9:84:8b:60:35:68:c3:54:95:8c:4e:0d:05:64:70:b6:f4:
bf:82:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:58:41 2025 by rpki-client