Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PnRkJekUnWkr9yz1bTS18Yz9Ez4.roa
File: PnRkJekUnWkr9yz1bTS18Yz9Ez4.roa (raw, json)
Hash identifier: WzP3lr1lZu9TDQvaWS9lOmfEMYN9zO2HJJSk4nMXopk=
Subject key identifier: 3E:74:64:25:E9:14:9D:69:2B:F7:2C:F5:6D:34:B5:F1:8C:FD:13:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018991B32FDB19B3480E190B6AE02D25780B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PnRkJekUnWkr9yz1bTS18Yz9Ez4.roa
Signing time: Wed 26 Jul 2023 10:16:26 +0000
ROA not before: Wed 26 Jul 2023 10:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:b3:2f:db:19:b3:48:0e:19:0b:6a:e0:2d:25:78:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 10:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e746425e9149d692bf72cf56d34b5f18cfd133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:64:83:2e:9c:4b:09:b1:c7:ea:d7:33:98:
81:51:b3:56:65:e9:e1:8b:6f:ec:84:99:bd:96:f3:
4c:12:af:b6:5a:a6:fd:64:d2:4a:19:5d:35:3e:66:
cf:40:7c:95:bb:ba:91:23:8b:20:fd:8f:54:25:ee:
05:a5:4c:30:f2:04:4c:63:99:de:77:5e:e7:21:ce:
3b:8b:19:d3:0b:fb:fb:8e:fb:40:4f:e5:3c:b2:ca:
09:bf:05:ad:62:cc:ff:c5:0f:df:4b:a9:2d:26:7f:
1e:f0:61:91:80:40:05:a9:01:12:05:75:e7:d1:9b:
84:53:78:e3:b7:21:b8:41:71:c7:7c:10:13:a8:37:
b7:b5:84:c5:0a:68:ed:8a:18:e5:8f:72:e9:96:bf:
7c:b9:4b:15:c1:eb:31:f3:c0:05:3c:7f:00:37:71:
f9:30:8e:2b:63:fb:84:21:d4:e6:e6:46:d9:17:02:
fd:34:64:5a:f1:8f:3d:e5:c1:92:87:cd:26:6f:99:
0d:05:1f:01:d2:82:aa:e3:67:16:e9:f3:17:25:c5:
5a:0d:61:71:93:f2:d4:84:cf:a8:48:5f:60:c7:f4:
ea:07:59:99:8e:2d:b9:ff:05:2f:7e:0c:60:b4:fb:
32:58:91:b3:2e:1b:27:e5:7c:24:95:a9:c8:a5:f4:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:74:64:25:E9:14:9D:69:2B:F7:2C:F5:6D:34:B5:F1:8C:FD:13:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PnRkJekUnWkr9yz1bTS18Yz9Ez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:7a:47:d9:4f:5a:3f:d7:95:7f:9c:11:98:71:4e:5f:c5:b3:
ea:96:91:01:4b:0c:39:59:27:56:d2:08:57:8b:ec:ea:fc:9a:
a1:1b:77:e1:2f:4f:12:4a:c3:0f:95:c4:e2:88:bd:af:76:93:
43:5d:7f:86:96:98:8d:cf:01:ff:03:06:9e:b2:38:9c:91:a8:
9f:23:18:ca:23:31:01:d3:40:48:d0:68:d9:63:7e:52:67:5d:
d3:2f:94:86:86:d7:2f:23:5e:5b:e3:92:c3:8d:1b:5f:ef:1c:
bc:f9:a4:71:ae:43:dc:52:0c:ab:13:b4:a1:de:49:36:ff:77:
ab:27:48:82:bb:cf:6c:ac:79:07:b2:cf:93:1d:8a:86:29:91:
6e:ed:4f:a2:e2:f8:78:98:b1:74:8e:e7:25:25:c0:30:02:89:
79:3e:37:20:66:f8:76:96:00:1f:5a:bf:f8:56:bb:96:2a:5c:
c4:61:61:08:1a:86:53:a2:e3:f7:24:7f:65:3b:72:14:16:6a:
dd:5f:f4:f7:59:b6:a4:40:87:8a:99:c3:2a:46:af:ee:0a:0d:
2b:5c:a9:99:70:21:77:b9:c0:f5:46:1d:16:b4:2a:8f:cd:15:
05:fa:ba:48:67:fd:52:f4:af:3d:72:28:66:0b:d1:14:de:c1:
a5:f6:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:50:53 2025 by rpki-client