Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ppj3F-li0OOJk4QwQAA033Tl-c0.roa
File: Ppj3F-li0OOJk4QwQAA033Tl-c0.roa (raw, json)
Hash identifier: wNrNrQL4/yHD6QzxzaS+5wj3f7hAPXQDdRR8b72m4dg=
Subject key identifier: 3E:98:F7:17:E9:62:D0:E3:89:93:84:30:40:00:34:DF:74:E5:F9:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864AB0DF752D1BCB882AB16871477911AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ppj3F-li0OOJk4QwQAA033Tl-c0.roa
Signing time: Mon 13 Feb 2023 12:12:30 +0000
ROA not before: Mon 13 Feb 2023 12:12:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:b0:df:75:2d:1b:cb:88:2a:b1:68:71:47:79:11:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 12:12:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e98f717e962d0e389938430400034df74e5f9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:29:67:eb:7f:6c:de:20:a2:d1:84:52:29:
59:77:78:76:88:82:1a:1d:a3:fd:d4:ca:19:34:b7:
d5:70:56:6c:20:9a:85:b2:d2:51:54:16:9a:88:16:
b6:b0:81:ef:c4:90:ee:6e:dd:ac:61:f7:4f:f2:fc:
84:e1:d6:ca:88:a8:02:22:d3:1a:1b:1f:75:01:a4:
87:2f:9f:12:55:84:44:0c:2a:74:99:77:33:9b:36:
4b:c9:c6:7d:85:02:86:ad:33:5c:b5:e0:80:93:0e:
55:b4:9a:cb:c3:ea:63:30:62:0a:0e:53:33:d8:27:
59:d9:88:6b:41:55:3a:fd:89:10:bd:fc:33:ab:fc:
1f:7e:81:d5:bd:29:42:03:fe:6a:73:15:61:95:e7:
3b:79:6e:df:61:11:49:16:8c:3b:19:b3:d0:94:89:
b2:23:4c:27:45:61:8f:0d:48:fb:cb:49:02:c2:c8:
9f:6c:46:d8:49:c4:d0:17:ce:ae:4e:77:26:aa:05:
1a:c4:2c:d4:14:e3:d9:44:40:d1:63:9f:a9:ef:b9:
24:b0:2f:0f:e3:e2:b7:cc:e2:4f:26:1c:0e:6c:f9:
d8:18:c8:d8:b4:cd:2c:25:4b:9f:87:4a:02:48:09:
c9:cd:54:de:d8:7d:95:6b:25:c6:1c:25:95:f2:98:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:F7:17:E9:62:D0:E3:89:93:84:30:40:00:34:DF:74:E5:F9:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ppj3F-li0OOJk4QwQAA033Tl-c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:1f:ba:11:b8:ad:02:e5:d0:a1:72:47:45:33:6a:ca:24:e0:
44:bb:08:87:21:85:23:01:17:cc:a4:ad:04:e5:5b:cd:1a:ba:
c7:46:8d:1e:ae:e2:93:bb:96:6e:e9:c5:7b:09:7a:10:c8:6e:
97:4d:52:cf:2d:3b:fe:1c:54:7c:e9:32:57:68:73:64:cc:42:
8e:7d:d4:19:0d:6f:21:38:03:db:58:b7:35:bd:b8:00:aa:ce:
30:83:a4:60:cd:5d:3c:d1:c8:cb:b8:1b:05:a2:63:59:c8:24:
a4:57:de:46:ed:f5:e7:82:fb:32:fb:79:c1:f8:0b:a1:cd:70:
04:cd:c3:66:2b:f0:16:7c:ab:1f:3f:35:96:d4:40:49:0a:9c:
76:c6:07:3d:35:d5:f2:b0:01:80:60:f4:44:4a:db:d9:71:cc:
c1:a2:ac:f9:e4:c5:a7:af:24:a8:59:72:f0:89:fb:2b:b2:c8:
f2:69:37:6d:66:64:14:1f:a5:f9:f2:74:47:b7:b5:f8:e9:2a:
bd:db:7c:d5:b9:9f:a5:fa:33:42:e3:d8:00:63:d3:e3:1b:ce:
83:1d:91:f4:63:1d:b6:55:db:ab:de:1b:56:7f:e1:71:99:59:
0f:19:86:d4:51:30:0a:a6:f6:6e:55:d9:36:59:cc:fa:1b:5b:
c8:17:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:12 2025 by rpki-client