Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pzih9Pe55wxrFXXZSK8XuN6RuY8.roa
File: Pzih9Pe55wxrFXXZSK8XuN6RuY8.roa (raw, json)
Hash identifier: b4aj2u0fAd6vOY8lBAgA0UnWQRsz20CB5cZ5K3+uszU=
Subject key identifier: 3F:38:A1:F4:F7:B9:E7:0C:6B:15:75:D9:48:AF:17:B8:DE:91:B9:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CED87364AFB5169D79203ACA098F9BAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pzih9Pe55wxrFXXZSK8XuN6RuY8.roa
Signing time: Mon 07 Aug 2023 07:13:59 +0000
ROA not before: Mon 07 Aug 2023 07:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:d8:73:64:af:b5:16:9d:79:20:3a:ca:09:8f:9b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 07:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f38a1f4f7b9e70c6b1575d948af17b8de91b98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:0c:54:a6:15:76:22:a7:1b:a6:0b:75:d3:
ed:9f:0a:a5:bc:ca:33:14:c1:55:bc:b9:96:2d:d1:
77:ab:65:a1:da:59:7c:78:aa:6b:f0:31:fe:34:4e:
50:9e:7e:33:09:29:7f:33:c2:34:8f:84:13:fe:07:
e0:c6:f2:fe:33:88:23:d4:c7:21:6c:85:13:21:95:
f2:16:5e:91:8c:ae:85:ba:2b:3f:e0:e4:f9:8f:41:
46:4b:ef:3c:76:c0:0f:19:93:fd:cf:48:5a:3d:0d:
c6:37:0c:16:16:0a:29:e5:51:c8:75:69:3c:3d:ed:
91:84:88:6f:9f:b6:15:e8:04:9c:0a:7c:6e:72:40:
09:a0:ee:6f:35:92:7c:2a:60:80:11:89:b3:01:86:
e3:6a:ec:19:11:15:c0:79:04:be:1f:d0:57:c2:2c:
28:e1:30:8f:f5:d9:67:39:18:f3:76:03:2b:66:84:
b3:a0:85:9f:71:56:fa:56:28:4f:12:24:6a:8d:e4:
cb:91:de:95:7c:b1:18:61:cd:b9:6b:f8:ad:7c:1c:
b7:a9:16:04:5d:ed:d6:3a:ee:a6:90:44:74:64:66:
c6:61:ff:cd:51:e6:43:9c:8a:7e:da:09:75:3d:62:
d1:87:7f:c8:e0:b7:9e:bb:22:6d:49:ba:6a:fe:cd:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:A1:F4:F7:B9:E7:0C:6B:15:75:D9:48:AF:17:B8:DE:91:B9:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Pzih9Pe55wxrFXXZSK8XuN6RuY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:64:e9:1b:98:70:5f:3f:f9:06:cb:3f:6d:16:1e:6e:8e:d7:
0a:a9:c9:2e:fc:4b:19:73:e8:77:3b:28:87:93:96:72:db:3e:
3f:98:33:d3:97:49:52:7c:66:a2:96:a5:cb:be:f7:1e:ed:4f:
5a:d9:a6:31:71:de:e6:df:ac:f8:4c:91:31:59:a3:1e:da:2c:
7d:e9:68:cf:4f:45:39:a8:d1:98:ae:5f:a1:9c:db:8f:7e:dc:
7e:3e:f6:ec:5e:25:f9:de:ca:88:e2:8b:b1:ed:df:0d:60:94:
a2:3f:4a:dc:4c:ab:b8:60:0d:fb:df:d7:60:ef:8d:e7:09:e1:
8e:a0:bd:3c:18:5d:84:67:1c:54:53:6b:d8:ba:d0:79:c4:0e:
1f:8f:cc:2a:e7:73:34:84:e8:45:d0:7b:c3:25:1f:eb:3c:d3:
be:43:c9:c8:f9:c2:6a:95:e4:e8:32:da:6d:a1:0b:f7:2a:b4:
cd:8b:5f:15:4d:78:03:e2:2e:74:3e:a1:a4:24:83:5e:fc:c2:
8b:6c:1d:9d:8d:37:0f:12:92:8d:8b:e0:39:64:9f:92:5b:2e:
c4:4f:bf:3c:07:3c:82:c7:87:5f:0d:08:f0:88:1d:03:84:6a:
19:cf:6b:9f:06:fe:72:dd:f3:da:72:c7:13:c7:ba:54:9c:3c:
6e:d8:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:45 2025 by rpki-client