Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjO19RCb05SyhH1HNkPN2B7uRUo.roa
File: pjO19RCb05SyhH1HNkPN2B7uRUo.roa (raw, json)
Hash identifier: 0NKOmCNNKxtO/1GYvN9kbigYRUweG18BL7cmMcUS57I=
Subject key identifier: A6:33:B5:F5:10:9B:D3:94:B2:84:7D:47:36:43:CD:D8:1E:EE:45:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8643303E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjO19RCb05SyhH1HNkPN2B7uRUo.roa
Signing time: Sun 22 May 2022 07:13:30 +0000
ROA not before: Sun 22 May 2022 07:13:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2252550206 (0x8643303e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 07:13:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a633b5f5109bd394b2847d473643cdd81eee454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:4c:52:f5:af:3a:15:20:df:75:e0:c7:8e:
13:82:e3:96:c1:a3:94:9f:59:b8:3d:be:46:50:65:
a7:f3:2c:48:84:aa:74:d2:eb:43:c5:b0:b0:c3:71:
37:b9:79:b1:d0:57:eb:2f:0a:d3:ef:83:4e:70:ec:
ee:b4:ed:83:a8:ec:70:0b:40:10:ec:bb:ec:77:39:
3c:d3:fc:bf:22:92:32:31:90:f3:f8:2a:94:1f:74:
7a:6b:da:1e:9e:be:11:16:ee:34:59:bc:c7:07:e3:
5f:69:89:fd:d8:49:60:12:64:05:a9:41:70:0e:5b:
a9:8c:a7:f8:e3:42:56:cb:51:1f:d7:68:8c:bd:2a:
8d:8b:5d:52:b5:43:b3:6e:cf:75:e0:9a:c7:27:71:
26:9c:89:0b:55:b2:8f:e3:28:35:0d:5e:53:63:63:
a0:2a:5c:da:c4:53:8d:21:6e:c8:e9:e7:c9:3f:89:
a4:e5:49:69:e8:c8:b9:36:bb:8e:d7:5c:d1:da:68:
2b:db:c3:b1:be:b2:f3:07:c9:cf:64:2c:93:14:e7:
c5:0f:fa:17:a6:ed:1d:35:40:f4:39:b4:96:6f:c0:
ef:ac:58:84:01:e8:be:1e:3d:b3:c3:66:fa:96:91:
87:3e:fe:e0:dc:c9:2a:2f:04:1c:2a:fc:15:73:13:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:33:B5:F5:10:9B:D3:94:B2:84:7D:47:36:43:CD:D8:1E:EE:45:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjO19RCb05SyhH1HNkPN2B7uRUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:ef:53:13:e4:93:94:f1:0a:46:a5:d7:1c:08:37:fc:f4:39:
7a:2c:06:21:ef:2c:69:c0:ac:33:e5:08:5c:53:5f:7e:45:e4:
3d:2f:77:76:1e:0e:95:aa:3c:69:e6:eb:09:59:cd:96:9e:1d:
9e:8e:01:d2:62:60:cd:09:ee:81:1e:96:7e:89:67:f9:17:c3:
a3:dc:f7:45:c6:3e:b6:e5:61:0e:7b:60:8e:37:51:71:7d:26:
6c:a8:c3:1f:4e:6a:16:44:f7:cb:09:0c:21:b4:35:be:84:e2:
86:f0:b6:6e:34:c7:bd:26:8b:f9:e3:02:b2:67:b6:73:85:43:
c8:97:bf:bd:d0:31:14:5c:ff:a7:6a:cb:75:42:20:01:d0:dc:
86:ce:d7:ab:ce:dd:5a:d6:65:67:1b:d3:7b:d2:83:65:f5:5a:
dd:40:2a:7b:c7:7c:a8:ab:78:63:26:e7:7b:39:b8:6d:0e:21:
3a:c7:9b:38:40:0a:a5:84:75:a1:25:55:60:f2:20:23:d7:06:
56:b1:6c:ec:eb:6a:8c:96:8a:54:da:33:27:28:83:3b:ba:54:
1f:f7:1d:21:ab:aa:f8:5b:f2:41:e4:55:c3:80:19:d5:9c:7c:
56:ae:46:48:63:50:08:51:2c:29:f7:d6:37:fa:92:64:4c:7a:
b8:3a:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:32 2025 by rpki-client