Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pvyn79eCLsbXEvGo_WHzuV6NinQ.roa
File: Pvyn79eCLsbXEvGo_WHzuV6NinQ.roa (raw, json)
Hash identifier: +Ml2Ygv/wV7EZvT6zwUpeTXb3mjrUXVU92+sqBEA6MY=
Subject key identifier: 3E:FC:A7:EF:D7:82:2E:C6:D7:12:F1:A8:FD:61:F3:B9:5E:8D:8A:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862C701B28117F206DE9C69A54D0C1F39B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pvyn79eCLsbXEvGo_WHzuV6NinQ.roa
Signing time: Tue 07 Feb 2023 15:13:09 +0000
ROA not before: Tue 07 Feb 2023 15:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:70:1b:28:11:7f:20:6d:e9:c6:9a:54:d0:c1:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 15:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3efca7efd7822ec6d712f1a8fd61f3b95e8d8a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:09:82:fd:99:2c:b2:b5:1b:9e:d4:43:69:
c5:0f:dd:2f:db:98:cb:cc:5a:00:d4:58:b3:9d:73:
77:bc:48:a0:e3:e5:8a:60:ea:4c:5b:05:74:75:fc:
38:0d:42:ee:da:20:cb:ee:bb:e2:7a:20:bb:1d:d4:
bb:60:2e:31:99:a0:81:73:1c:aa:b2:fc:a9:11:2e:
87:50:87:eb:b7:70:1d:92:1e:1c:19:82:3c:9f:42:
25:9b:bd:1d:04:c2:4f:3a:31:40:41:d3:c2:f2:36:
a1:e0:8a:28:17:f5:ee:01:3f:ed:ee:6d:eb:2a:68:
8b:b9:04:9b:0d:b1:82:76:f5:2b:6e:9b:1f:84:aa:
bf:5a:ff:98:20:96:c9:14:9e:ea:8f:ca:01:29:fd:
34:ed:f4:45:5d:1d:3f:d7:e9:ac:57:63:09:f4:d4:
92:db:e0:85:c4:7e:f0:ec:ec:7d:dd:46:1d:c7:25:
85:59:f6:35:8e:f2:72:15:52:4a:5b:af:36:83:57:
1a:1e:98:75:cd:79:12:c7:14:91:23:8f:bd:89:39:
9f:03:a2:43:c5:bc:3e:10:92:6d:ac:8d:de:3a:91:
98:60:f6:88:76:37:59:33:f9:2b:d4:32:db:3c:49:
77:de:03:0a:42:3a:2b:85:73:5a:38:c9:8e:b4:56:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FC:A7:EF:D7:82:2E:C6:D7:12:F1:A8:FD:61:F3:B9:5E:8D:8A:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pvyn79eCLsbXEvGo_WHzuV6NinQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:c3:47:7d:fb:1e:7d:77:7d:d2:50:40:c3:9c:9a:d4:5d:2f:
8b:63:9b:76:0b:2d:e4:63:eb:52:b5:6c:bd:12:f3:a7:a2:94:
b1:f4:e0:41:e3:c1:ab:6e:9f:29:46:67:3b:6e:c0:93:02:a8:
f5:25:d3:6f:97:e1:64:32:1b:4f:ce:d8:59:ae:dc:e0:d0:1f:
97:0a:d2:6c:5a:0f:91:ac:aa:f9:05:c5:67:5f:e4:eb:d6:3a:
55:7d:84:4d:e3:4c:ef:31:50:b3:cc:b5:46:4d:b9:54:f9:f2:
ce:9c:e1:74:9a:f8:2d:b1:6b:bc:d9:cb:89:71:37:9c:fe:ca:
d6:f6:5c:9d:a7:a8:ae:fe:d8:bb:86:6c:6a:17:d1:57:c0:7f:
10:d6:f1:e1:c7:1c:17:26:23:05:3e:7a:76:28:ac:86:5b:68:
a7:db:cc:06:0f:37:1b:a1:08:2c:c1:1c:49:fe:c1:1d:8d:49:
1a:99:b5:7b:1d:9e:47:52:1c:21:9a:8a:38:7f:3d:42:39:e6:
a2:d5:e0:e9:bc:c7:ac:dd:24:10:3f:7f:3b:c9:82:dc:0f:0e:
64:94:aa:cd:0c:89:fb:da:c6:79:2d:17:54:52:ac:e9:d9:6b:
a1:27:67:5a:cb:09:59:a2:8b:6e:fb:4a:2c:2b:86:6b:6d:f6:
d5:71:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:48 2025 by rpki-client