Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqPS7GfHFCFuSrg0Wp2LAyn9GGQ.roa
File: PqPS7GfHFCFuSrg0Wp2LAyn9GGQ.roa (raw, json)
Hash identifier: 3R3iwSwgI/cd2/ol1PWbFF5/Fro4CbjoJL5bgdivfq4=
Subject key identifier: 3E:A3:D2:EC:67:C7:14:21:6E:4A:B8:34:5A:9D:8B:03:29:FD:18:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835877334BDD8F6FD4DD99A0C1BDA29E3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqPS7GfHFCFuSrg0Wp2LAyn9GGQ.roa
Signing time: Tue 20 Sep 2022 01:15:50 +0000
ROA not before: Tue 20 Sep 2022 01:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:58:77:33:4b:dd:8f:6f:d4:dd:99:a0:c1:bd:a2:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 20 01:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ea3d2ec67c714216e4ab8345a9d8b0329fd1864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:a5:12:0a:58:5c:9d:20:92:e5:05:31:96:
4b:19:d7:b6:2e:c4:e7:26:d8:3f:8e:4b:ce:e6:bb:
81:3f:ad:cc:47:72:f6:85:d0:d3:86:f1:65:db:e4:
ad:d0:a2:f0:5d:ff:b9:f9:aa:d5:1d:a4:6e:47:eb:
6f:8d:0d:e1:21:46:9e:07:30:57:8a:5a:e5:10:aa:
a2:84:b4:d6:00:52:a7:80:83:3b:04:12:92:67:af:
df:63:f4:00:49:f1:5f:ba:39:b0:3f:08:c4:1c:9a:
84:d3:ce:c8:d4:33:a8:f2:ca:b5:33:dc:ae:f2:be:
16:af:82:ff:43:a5:80:00:33:d1:79:2a:9b:74:7b:
7c:1e:50:c3:2a:be:f0:ba:a1:85:f3:38:0d:1c:17:
25:a0:85:93:46:58:44:ae:47:a1:76:21:2c:b6:3b:
14:9c:0d:46:91:54:f2:c9:0e:c9:e8:23:33:52:9a:
11:0e:50:d5:05:d9:0a:45:95:74:1b:25:b7:a4:73:
70:91:c0:c9:1d:12:f2:ea:b5:d9:29:7f:65:09:b9:
f5:da:9c:ef:a6:13:fa:7d:33:0e:36:10:13:8a:df:
57:4f:d3:f6:09:f6:2d:82:84:4d:e9:67:64:ae:a2:
f1:54:b3:ef:c8:02:01:25:35:2a:04:bf:90:83:05:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A3:D2:EC:67:C7:14:21:6E:4A:B8:34:5A:9D:8B:03:29:FD:18:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqPS7GfHFCFuSrg0Wp2LAyn9GGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:84:1b:b4:d7:b7:47:b5:42:aa:37:55:88:73:ec:34:67:da:
2f:3b:a6:1c:a5:05:41:78:94:8d:7c:35:d1:65:87:13:cd:85:
22:51:af:e6:0b:39:2e:0c:8b:d5:db:88:db:91:44:33:4d:3a:
29:62:37:45:a8:40:05:3d:50:fe:9b:17:54:ca:be:27:9e:a8:
08:f2:66:96:4d:93:37:b0:53:04:5c:47:ce:d5:27:71:66:37:
c0:a8:5b:20:9a:da:de:15:3a:70:ce:63:3e:c6:76:33:4d:4e:
f1:89:28:54:45:6e:81:a3:a3:5c:5d:76:ff:d8:13:60:70:21:
e8:20:43:71:65:14:8e:e0:fd:ac:eb:00:f7:b7:ab:8c:0d:ac:
ce:e5:f0:e5:e0:b9:57:39:c2:05:21:39:1b:bc:ae:37:4c:26:
f6:f2:02:0a:50:6f:b7:f3:64:91:fb:41:ab:23:98:00:06:60:
5c:33:64:34:b3:ff:bc:1a:b2:31:cb:82:2d:bc:9e:1f:12:f7:
81:28:f5:74:ef:2c:f1:09:4e:ec:d9:87:5e:67:16:f0:be:58:
10:c0:2a:7f:f5:51:10:1c:b7:33:65:c5:82:95:f8:1d:5c:8f:
16:d2:f1:ed:ee:1f:9a:d7:fc:e6:c9:f5:f7:d8:73:bb:d9:9c:
80:48:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:49 2025 by rpki-client