Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsaPn0w3XdU-caSIauw5U5tejeQ.roa
File: PsaPn0w3XdU-caSIauw5U5tejeQ.roa (raw, json)
Hash identifier: VCWJaE1ARIfkqfJLyQFF5LFWGLR4TIqM8MThnfj2Ah0=
Subject key identifier: 3E:C6:8F:9F:4C:37:5D:D5:3E:71:A4:88:6A:EC:39:53:9B:5E:8D:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843F5BE550E349D91DA408B07AEB3ED94B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsaPn0w3XdU-caSIauw5U5tejeQ.roa
Signing time: Thu 03 Nov 2022 21:18:17 +0000
ROA not before: Thu 03 Nov 2022 21:18:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:5b:e5:50:e3:49:d9:1d:a4:08:b0:7a:eb:3e:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 21:18:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ec68f9f4c375dd53e71a4886aec39539b5e8de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:96:41:fb:ee:b8:0d:78:fb:e1:74:27:78:
09:f9:a1:8f:89:77:69:65:c7:10:7b:f3:69:aa:cd:
a6:04:38:20:14:fa:7d:c9:bf:dd:50:18:41:aa:53:
d5:12:3c:8f:4c:10:c3:8c:31:8c:71:a9:41:9c:b3:
3e:a6:bf:91:12:06:c4:b8:d4:35:22:9b:9a:64:f3:
8d:2c:a8:99:03:79:ca:e8:4e:2c:0f:9a:c3:2c:29:
d6:39:f0:45:69:3b:72:fd:bc:57:26:b6:3a:23:55:
d2:14:57:ed:5c:3b:31:6b:eb:3c:47:7a:91:e1:22:
d2:86:61:81:ba:0d:c7:b8:43:7f:7f:0f:0a:c2:89:
2e:35:3c:ed:7b:06:90:f4:90:cf:e7:a4:f2:48:53:
aa:49:96:2c:1e:3c:a2:f5:81:6f:1f:37:4a:10:1f:
a8:ea:50:cf:3d:ac:d5:34:aa:46:76:ab:0b:eb:88:
3a:bc:42:eb:f2:7d:ba:cc:f5:e3:6f:4a:78:6f:5a:
42:00:e3:c7:a9:00:2c:b9:25:06:7e:3b:d2:f2:1b:
18:d8:74:ef:f7:13:2c:6b:8b:07:f9:62:12:a4:eb:
2b:58:2d:2f:36:17:33:d6:14:bc:15:80:1c:c1:af:
51:56:be:17:e6:57:5a:e8:ff:36:d2:ec:b8:07:1c:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:8F:9F:4C:37:5D:D5:3E:71:A4:88:6A:EC:39:53:9B:5E:8D:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsaPn0w3XdU-caSIauw5U5tejeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:d5:9f:21:96:24:1c:66:9f:c3:6a:3a:b9:3d:45:49:c4:16:
b7:06:35:92:f0:c8:f3:68:26:cc:cf:bc:aa:69:41:14:53:d6:
23:a0:7e:25:f3:f6:76:58:7a:55:7f:96:97:5a:6a:a4:5a:56:
1c:f8:3c:7b:56:4a:87:47:13:6a:fe:75:c4:02:6f:81:91:20:
c0:71:99:e5:0f:31:5a:b3:0d:3d:8a:ca:b6:86:54:30:4f:cc:
cc:07:2b:89:48:87:69:c5:74:a7:b8:24:b5:3a:39:e5:19:87:
bd:4f:75:07:1b:e4:4f:b0:fa:aa:20:de:b8:78:fb:1e:ad:6c:
2b:71:d1:3e:db:6c:bd:f6:7a:2e:b7:3f:62:2a:79:d1:58:7d:
24:ab:00:aa:1c:bf:60:9a:df:15:23:46:2f:57:7e:a3:12:1c:
03:12:3d:c9:04:62:89:ef:73:cd:72:61:a9:e2:d7:fd:af:58:
fc:5f:db:cc:69:ca:de:07:f7:75:80:b8:69:08:a9:3d:4c:d4:
ed:21:7f:70:6a:c1:e0:fd:8a:ba:05:0d:be:b2:cc:e8:74:f2:
12:f9:55:21:07:fa:8e:08:1f:d4:0c:52:cc:61:01:b7:1f:eb:
0e:8d:26:1c:8e:93:ee:25:16:7f:2f:01:b7:0f:d4:dc:c0:68:
f7:dd:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:49 2025 by rpki-client