Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pj3ouQDyNw-2RvZ2GTtH2yGpE70.roa
File: pj3ouQDyNw-2RvZ2GTtH2yGpE70.roa (raw, json)
Hash identifier: TC4ka7mA6ClzrIUkUypZWPeillZP1IGhlhMVZj+17sc=
Subject key identifier: A6:3D:E8:B9:00:F2:37:0F:B6:46:F6:76:19:3B:47:DB:21:A9:13:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0A3FC37DE8EA411AC8707FC56E207533
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pj3ouQDyNw-2RvZ2GTtH2yGpE70.roa
Signing time: Fri 18 Aug 2023 20:04:25 +0000
ROA not before: Fri 18 Aug 2023 20:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:a3f:931d/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:3f:c3:7d:e8:ea:41:1a:c8:70:7f:c5:6e:20:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 20:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a63de8b900f2370fb646f676193b47db21a913bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:86:5a:28:99:4e:8b:27:b9:6e:ee:d7:f0:
a1:ae:18:01:4a:b1:ae:c7:48:e7:17:ab:02:72:65:
b9:3b:e7:d8:96:cd:61:ca:98:51:37:15:3b:38:3b:
b0:44:56:93:6a:1a:8a:02:1c:1f:ed:b0:34:e0:f0:
85:03:97:dc:ef:60:b7:3c:8c:0f:06:f8:be:48:cf:
d9:1e:c0:b2:aa:ab:78:ad:87:c8:22:6b:39:1e:c4:
6b:d0:47:f7:64:d4:03:0b:b0:46:55:74:e4:bf:73:
8c:79:a2:ba:19:36:0d:71:dd:23:ff:fd:d2:22:46:
ac:a7:cc:a0:cd:96:a3:c7:e0:89:c5:55:40:13:d8:
92:b0:9e:63:e0:cf:20:c0:88:9f:8c:8c:0d:7e:57:
f6:9e:fd:19:fa:90:91:88:06:c0:2c:59:cf:1e:03:
9f:2c:65:13:bd:60:49:73:86:2a:28:58:b4:43:3a:
df:0a:d8:fc:18:3a:ac:d2:3f:7a:70:9b:5c:9c:4d:
2a:1e:f8:62:a9:ab:ed:96:42:30:d6:a1:f5:fc:be:
e7:2e:ed:08:90:03:83:43:46:72:e2:91:d3:1a:e9:
3c:fc:e3:16:ea:3d:d0:68:85:a1:99:61:09:15:ef:
96:cc:49:38:d8:fe:10:33:cd:cb:16:f1:f3:44:79:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:E8:B9:00:F2:37:0F:B6:46:F6:76:19:3B:47:DB:21:A9:13:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pj3ouQDyNw-2RvZ2GTtH2yGpE70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:b5:6a:e4:d7:d1:49:f4:bc:7b:42:6b:f9:cb:06:87:d5:3d:
3d:a6:27:08:65:4d:b9:8e:34:b8:33:38:47:ff:85:1f:0b:45:
c7:45:3e:2d:cd:48:42:c2:fa:59:43:84:5e:f5:ef:60:ae:cd:
2f:e2:28:fc:9b:e3:ea:35:50:53:ac:62:ad:6c:a8:9a:51:d7:
69:b7:5e:2b:69:61:34:91:5a:59:cc:76:62:66:db:a1:c3:e2:
51:2f:9d:3d:98:98:79:73:23:54:25:77:f8:aa:39:4d:f8:db:
b8:71:8a:bf:96:ae:3d:08:ae:d5:ce:04:9c:bc:52:3f:ef:2d:
00:12:6e:3d:ee:c3:41:0a:09:67:43:25:54:4e:3c:e3:e3:28:
f4:5e:f4:5a:f9:29:79:49:ce:c2:fc:dd:67:f4:1f:31:62:ff:
29:a4:05:8e:1b:f7:6e:4f:3e:ab:f8:c5:a4:3f:54:4d:0f:71:
18:5a:78:d5:b6:6d:c8:ef:54:4b:28:92:60:62:4f:f1:7d:4f:
29:be:6a:46:65:12:72:99:01:ea:69:96:a0:46:1e:2d:bb:e8:
17:e0:63:fb:ac:c4:d7:3b:a3:1d:4b:19:97:4d:95:ac:bc:7f:
d9:b0:2e:50:9b:16:88:8e:c1:d0:72:07:18:13:84:62:75:35:
6b:13:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:24 2025 by rpki-client