Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqwF7WQUavtVLE6WrlgYB7WJWJo.roa
File: PqwF7WQUavtVLE6WrlgYB7WJWJo.roa (raw, json)
Hash identifier: 2Wt0YlqUYbIQ2v2S1cmnrPprAwbciKad6PF3yO9PfvE=
Subject key identifier: 3E:AC:05:ED:64:14:6A:FB:55:2C:4E:96:AE:58:18:07:B5:89:58:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185624C3CDFE19AAB86C7E3AF85CB6B0B17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqwF7WQUavtVLE6WrlgYB7WJWJo.roa
Signing time: Fri 30 Dec 2022 09:10:41 +0000
ROA not before: Fri 30 Dec 2022 09:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:4c:3c:df:e1:9a:ab:86:c7:e3:af:85:cb:6b:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 09:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eac05ed64146afb552c4e96ae581807b589589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:59:25:68:34:ca:5f:64:7b:84:6b:00:d9:
db:60:1e:17:4e:b4:19:32:b4:a6:43:da:f3:8c:aa:
88:19:19:c1:e2:6c:7d:47:4f:6d:a0:f8:d0:c3:21:
01:e0:86:14:1d:dd:fd:71:5b:2e:d5:8c:a7:c2:e3:
07:6b:6c:81:bd:d5:1b:79:0d:6e:76:36:da:d5:f5:
bd:ce:c5:c5:c1:78:fa:75:fa:af:cb:6e:29:29:14:
66:2f:7e:4f:0c:64:69:de:2f:59:87:b1:59:4c:b5:
92:0a:e5:2c:20:80:ef:4a:f2:af:d2:8a:f1:4d:26:
f0:6d:7b:cc:80:5c:06:94:19:8a:4c:0d:c1:78:93:
52:eb:66:9d:68:64:a3:fc:94:dc:ca:f5:5a:0b:e2:
05:9f:94:00:32:8b:55:0e:ff:a7:cd:ec:cd:8c:0b:
66:ce:e2:10:7f:c6:85:5a:ca:6f:72:d7:fc:e8:8d:
cf:cc:d7:13:a6:09:db:c3:02:80:e7:19:d5:31:c0:
cb:43:f5:fd:54:24:b9:05:06:ef:e9:ca:75:41:8a:
d0:34:56:ba:90:c2:fb:58:48:6c:7b:32:50:d8:7c:
34:d1:a8:ea:e5:f0:54:8b:16:34:f1:74:29:b4:50:
6f:d2:22:57:fc:40:8e:ec:85:be:0d:e0:47:db:47:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:05:ED:64:14:6A:FB:55:2C:4E:96:AE:58:18:07:B5:89:58:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqwF7WQUavtVLE6WrlgYB7WJWJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:ae:db:4c:83:de:ce:b5:1b:35:1c:b0:7d:a4:f7:31:e6:c5:
5e:a5:c4:30:ce:e2:4f:28:b6:2c:23:e6:94:e5:aa:0e:a3:d0:
13:2f:2d:d8:7b:0c:c8:ea:ac:b8:fd:e7:31:ed:33:2b:2b:46:
7e:a9:59:4d:d6:8d:34:aa:ed:17:2c:c1:cb:ab:e0:fc:ad:3e:
71:4f:95:c3:3b:e4:03:38:2f:25:c4:61:c4:58:c4:1a:ba:69:
2b:3c:30:fe:94:0e:78:bc:23:42:d3:88:61:6c:96:87:95:80:
df:56:9e:49:7e:f2:7f:87:78:4c:9e:1c:80:61:58:c7:4c:d8:
eb:cd:24:0f:a9:cb:cf:ea:9b:5a:b9:e4:cd:48:80:15:c3:e5:
8a:ee:89:93:5d:cc:5d:0e:cb:53:fb:72:ba:78:19:f1:df:72:
d3:35:24:db:f3:3a:19:9a:14:b9:ff:80:68:52:51:6c:2b:96:
ca:50:fb:1f:d8:70:7e:f4:58:e8:01:f2:1b:c6:ca:e7:c4:b7:
a3:e1:06:a0:62:65:e6:c8:39:51:ad:2c:92:de:f7:0a:f0:12:
82:e5:13:b0:e2:f9:56:ca:76:e1:dd:4d:18:b4:d9:aa:ae:b0:
df:1a:61:14:9a:59:dc:48:65:e7:44:19:20:1a:7d:95:ca:54:
3d:fa:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:01 2025 by rpki-client