Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pFPIjYyHa0TJFDVN4e8W8rjva3U.roa
File: pFPIjYyHa0TJFDVN4e8W8rjva3U.roa (raw, json)
Hash identifier: H+f4GQTSOa6EQOLXB5G2YikSaDGkVE8IO2KMya35cks=
Subject key identifier: A4:53:C8:8D:8C:87:6B:44:C9:14:35:4D:E1:EF:16:F2:B8:EF:6B:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864884CE1E016115BE163B127638E779F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pFPIjYyHa0TJFDVN4e8W8rjva3U.roa
Signing time: Mon 13 Feb 2023 02:05:08 +0000
ROA not before: Mon 13 Feb 2023 02:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:4884:443b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:84:ce:1e:01:61:15:be:16:3b:12:76:38:e7:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 02:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a453c88d8c876b44c914354de1ef16f2b8ef6b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:43:cd:b7:20:f9:91:eb:17:8a:9a:19:7f:
cf:10:e3:34:e0:4c:56:3b:15:60:57:d8:bc:40:8e:
cf:3e:7f:9b:f7:fb:11:a1:62:c7:bf:29:c4:27:2b:
ec:67:a1:9d:d0:04:4d:7b:21:70:18:5f:71:fa:8d:
47:f2:84:97:b6:74:25:3c:b1:aa:ed:cd:24:3c:d4:
fb:d7:35:0d:8b:ba:2e:1e:83:9e:95:e3:8d:c4:47:
a6:f1:87:33:0a:31:ae:f7:cc:c4:c1:4c:c4:5a:a0:
48:cb:bc:a5:64:01:20:24:55:37:70:63:54:02:4b:
ae:b2:3b:2b:77:02:87:3e:4c:70:1e:3b:47:b0:08:
8c:20:a9:d3:41:d2:63:22:72:a0:d1:bc:bd:e9:2e:
c8:5e:ae:cd:d8:d9:26:8d:72:09:9c:87:dc:ea:05:
8e:02:6b:0e:06:f8:88:ae:d0:ff:60:f5:eb:4f:de:
85:f6:88:18:6a:6b:36:b8:43:01:a9:0f:b2:de:b9:
35:a2:b6:2b:73:49:63:51:f7:c7:a2:6b:21:81:4e:
96:8a:4b:53:88:8f:48:50:d6:1f:67:cd:dd:67:38:
5c:a5:b0:8b:0f:a5:2a:b4:a7:9f:b3:32:24:20:1a:
a6:92:2f:8d:61:34:0c:02:39:92:9b:94:b0:37:fa:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:C8:8D:8C:87:6B:44:C9:14:35:4D:E1:EF:16:F2:B8:EF:6B:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pFPIjYyHa0TJFDVN4e8W8rjva3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:03:fb:2f:fe:8a:60:b8:6f:57:d4:ee:95:05:ea:ad:a0:d4:
c6:e9:57:0e:92:f1:7c:20:7d:52:07:4d:c6:62:1c:1d:6c:c8:
56:e6:ba:fe:71:7c:4e:7c:42:83:89:a2:92:50:27:9b:24:fb:
9a:d1:2a:ea:f8:ba:37:18:8e:4b:cb:e9:15:d0:86:85:de:22:
67:8e:72:d5:ec:6d:09:13:bd:91:aa:5a:84:30:e9:34:6a:9f:
e8:61:29:02:ee:29:78:4c:9c:9d:17:43:00:da:8e:61:2e:83:
fc:27:a1:b5:18:a4:c5:bd:00:c6:1c:dc:64:87:84:04:e0:13:
c4:59:d6:9b:5e:66:cd:59:69:01:ee:f3:4b:3c:c9:f7:be:78:
7f:65:ef:de:9b:35:43:c0:7a:4c:96:76:9d:1a:78:e4:fb:6f:
00:fd:1f:83:aa:35:0c:a0:97:5d:95:dd:02:58:e0:b5:b4:18:
d0:f0:68:4e:0f:9a:d5:cd:55:b8:24:e9:60:cb:37:50:58:f0:
2e:43:c6:39:26:d9:f6:cd:51:93:f1:14:a2:03:43:38:4a:3a:
32:f8:7d:c8:16:de:90:b5:79:7b:54:51:5b:cb:2d:6d:9e:ba:
18:bc:94:73:14:5f:e3:d8:cc:73:15:fa:24:e9:be:6d:2b:f2:
fa:78:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:35 2025 by rpki-client