Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkBzWcIsR4yzDAMhZkXnMzZ-Hcc.roa
File: pkBzWcIsR4yzDAMhZkXnMzZ-Hcc.roa (raw, json)
Hash identifier: eiVsQhwRj6kPXjPfWJK0JQC+G6GGDNkdm0fN8qnSJTU=
Subject key identifier: A6:40:73:59:C2:2C:47:8C:B3:0C:03:21:66:45:E7:33:36:7E:1D:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FEB20E107F3DD6B19ADF3F9A1976B937
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkBzWcIsR4yzDAMhZkXnMzZ-Hcc.roa
Signing time: Mon 20 Mar 2023 11:05:27 +0000
ROA not before: Mon 20 Mar 2023 11:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:feb1:45b9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:b2:0e:10:7f:3d:d6:b1:9a:df:3f:9a:19:76:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 11:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6407359c22c478cb30c03216645e733367e1dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:c3:47:0e:ac:b4:37:dd:0f:9e:2b:09:e5:
f2:73:18:32:8e:0a:e2:9b:63:2c:53:16:43:e4:df:
0a:11:4a:19:83:1e:28:7d:0d:7c:eb:10:5c:69:5b:
b2:a3:7b:1a:bd:39:c2:6a:6b:5c:d4:b3:10:45:d6:
8d:7b:1d:b4:10:c5:3c:6d:29:14:3f:01:a3:13:1c:
8b:de:b5:a8:8c:24:c0:05:47:8e:dc:16:4d:60:a2:
51:9c:ce:8d:4e:17:2e:61:57:ed:35:ff:24:07:7f:
12:98:f1:57:60:09:0d:2f:da:d5:c1:79:b2:97:b4:
29:a3:39:36:b9:d4:9e:e1:f1:c7:f7:49:59:8c:2c:
23:c7:15:c6:fd:a5:0b:95:5f:82:2a:c4:56:a3:7e:
d7:ef:b0:9f:82:f2:97:b8:6c:b6:9b:08:15:b5:f2:
e1:aa:14:f2:4c:3c:69:1d:b1:e0:c2:f1:dc:11:86:
05:37:29:44:f3:bd:16:df:c4:96:3f:42:a1:99:dc:
b5:45:ab:9e:ab:a9:fd:b0:97:13:94:b0:3f:59:63:
9c:73:71:4d:ba:ce:91:4d:6a:c3:25:9c:63:b4:b9:
03:f3:4d:16:5d:7a:14:ba:d0:16:50:42:e9:2b:71:
08:a8:83:0b:d1:a9:04:0a:25:ac:6f:e7:a3:7e:bd:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:73:59:C2:2C:47:8C:B3:0C:03:21:66:45:E7:33:36:7E:1D:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkBzWcIsR4yzDAMhZkXnMzZ-Hcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:fc:be:c6:1c:4c:d9:a3:c3:ba:f9:65:8f:ea:c9:f6:bc:22:
9f:6d:85:0b:94:f6:98:67:c4:78:dd:19:d0:80:8a:44:a0:e2:
7a:a5:0d:3c:1b:08:f8:d8:c1:9b:1f:d8:01:14:35:b1:68:f2:
87:f0:18:5b:16:a3:28:19:65:48:d1:ac:7b:a7:a6:7c:64:35:
cd:2a:ae:bc:f3:c8:ef:16:47:e1:a1:8a:88:8f:d2:43:00:a2:
f8:82:5f:9e:15:c2:a2:ef:a0:a1:a1:c5:8c:09:0f:12:17:70:
54:75:99:4c:8e:fd:7f:0e:86:7a:3e:27:18:ac:14:6c:98:7c:
f5:4b:cb:4b:7b:e5:d7:b5:de:7c:f7:05:81:22:3c:cb:16:04:
cb:72:9c:bf:ab:27:98:13:70:35:1e:5f:f5:83:d0:13:6e:64:
02:46:ef:f2:7b:be:b7:87:ae:ed:7b:b4:f5:8e:4c:bf:84:2e:
f2:31:b5:b9:7e:99:eb:29:2c:a5:a1:38:2a:7b:dd:3b:2d:1e:
8e:f7:18:7a:9e:f3:fe:2d:e6:74:3b:25:86:06:94:95:77:9e:
98:b0:f0:35:a5:16:9c:dc:fe:b9:7e:9d:d6:ce:98:88:d2:9a:
98:db:17:f0:f2:6f:40:9a:34:84:3d:78:17:11:ba:cd:35:c4:
ae:20:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:55 2025 by rpki-client