Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsKAX45X8uYI3IBpnVPCNTNXbf4.roa
File: PsKAX45X8uYI3IBpnVPCNTNXbf4.roa (raw, json)
Hash identifier: OKcxUkuIQQJp1jv0aM+swfJcj61ht6g5Ozs5fOdZW9c=
Subject key identifier: 3E:C2:80:5F:8E:57:F2:E6:08:DC:80:69:9D:53:C2:35:33:57:6D:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 690B4847
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsKAX45X8uYI3IBpnVPCNTNXbf4.roa
Signing time: Wed 09 Feb 2022 03:09:06 +0000
ROA not before: Wed 09 Feb 2022 03:09:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762347079 (0x690b4847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 03:09:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ec2805f8e57f2e608dc80699d53c23533576dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:b5:5a:ec:cf:b1:79:ac:c4:35:c4:6f:4e:
0c:9d:5a:9b:19:8a:90:a8:1b:b6:7a:aa:e0:0a:41:
e8:3c:d4:05:b6:8d:90:37:9e:07:15:fa:af:c0:e7:
1a:2f:7d:6c:44:a9:12:b3:d2:38:03:76:c1:7b:8e:
53:7c:bb:2f:2c:45:c7:b2:38:82:0c:71:5e:77:63:
6b:45:a8:a7:50:cf:99:b5:6d:ab:2a:15:e9:7c:b6:
99:ba:d2:3f:8e:47:9f:55:06:02:a6:34:f2:82:1d:
05:bd:f7:ba:d7:7e:14:de:1b:6c:05:da:11:7c:70:
55:a3:ae:47:37:c7:a4:bb:a7:34:bd:ec:0d:31:d9:
36:ba:d9:4c:eb:71:af:f9:36:01:62:f0:2e:b2:77:
03:8e:c8:e3:2f:62:5a:d3:30:a1:0d:73:ec:08:f3:
f1:31:52:4b:0c:19:86:09:91:3e:45:f0:79:6e:70:
18:0a:15:1b:2a:a5:db:80:be:2c:6d:5f:20:8c:c1:
16:88:50:cb:e6:c3:c0:07:5b:8c:9d:bd:26:3e:75:
4b:b7:c6:0c:86:c7:65:f2:d8:96:ff:57:63:93:62:
83:39:2f:0a:1b:dd:fb:70:ec:05:e3:2b:98:ac:71:
fb:ad:0f:09:ab:fd:e6:41:37:36:67:96:36:99:71:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:80:5F:8E:57:F2:E6:08:DC:80:69:9D:53:C2:35:33:57:6D:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsKAX45X8uYI3IBpnVPCNTNXbf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:68:d5:c7:58:a6:19:b7:0a:14:9e:2a:4d:e7:bd:f2:68:61:
98:5f:44:42:7e:ab:2e:69:31:0e:51:f6:19:fa:f7:c7:ab:a8:
29:87:0b:8f:0a:2e:06:10:5a:b5:f1:46:90:be:85:5d:0e:86:
7e:9d:da:ae:3d:05:7e:31:87:68:7b:94:52:8c:a6:0c:89:e9:
29:8c:1a:14:71:cf:28:00:43:d8:dc:57:fe:4b:98:b5:34:9c:
51:a0:7c:58:5b:57:68:7c:52:9e:03:d2:a7:d3:16:e0:a2:5e:
5d:2a:9e:3a:7a:4d:9f:ec:b4:00:53:83:47:f0:8c:4f:55:3b:
92:81:30:24:7e:71:f5:af:b9:f3:62:c9:95:62:1e:1f:43:09:
e4:55:d6:5b:b1:1e:fb:a7:53:7c:dd:91:37:14:6d:1a:43:5a:
b7:72:9f:15:b1:0d:2a:58:da:d2:bb:3f:15:ea:a3:c9:f7:12:
44:0f:05:b5:12:41:61:9a:a0:b1:c6:46:57:4b:72:13:7b:df:
02:48:89:35:e1:44:65:5e:f8:99:28:36:e5:0f:36:15:8c:20:
74:b6:7d:37:4a:f8:85:b6:00:a2:ee:33:78:74:5a:07:78:3b:
8e:3a:03:49:6f:eb:d2:24:e7:5d:cd:e1:99:6b:0e:57:a2:4c:
13:86:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:23:31 2025 by rpki-client