Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkPRDv-ZHH50AiYDrOFHE94pi5c.roa
File: pkPRDv-ZHH50AiYDrOFHE94pi5c.roa (raw, json)
Hash identifier: 14pn39WTWlGFpgIsky94M2m0kG1LIhQ7W8nMt7PN6Qc=
Subject key identifier: A6:43:D1:0E:FF:99:1C:7E:74:02:26:03:AC:E1:47:13:DE:29:8B:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018520D47E23384D4D93B02C3188790F2E2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkPRDv-ZHH50AiYDrOFHE94pi5c.roa
Signing time: Sat 17 Dec 2022 16:04:34 +0000
ROA not before: Sat 17 Dec 2022 16:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:20d4:23ab/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:d4:7e:23:38:4d:4d:93:b0:2c:31:88:79:0f:2e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 16:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a643d10eff991c7e74022603ace14713de298b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:a2:e4:13:b3:62:32:12:32:b8:b9:dd:89:
c6:04:71:53:8c:b6:ab:dd:58:5d:77:45:64:70:95:
39:de:d3:c8:30:20:de:62:90:a2:c6:59:97:d0:a4:
ca:99:bc:89:a1:40:8b:d5:51:31:ce:12:fd:1b:b1:
f9:e3:df:f3:55:44:62:97:0b:b6:54:72:fa:83:f6:
9f:69:37:ff:a3:2e:47:ca:08:29:a2:b4:e3:dd:48:
0e:10:eb:28:d8:57:6b:ec:c3:c7:00:e2:50:8c:3e:
5d:75:c0:77:29:cf:53:8d:f2:25:c0:85:ee:f2:7a:
f4:4f:64:87:15:e0:5c:80:09:d4:0e:69:33:08:99:
01:49:29:04:82:c7:b8:aa:ce:08:4e:d6:e7:bd:c3:
c0:40:0f:e7:6f:e1:50:c1:d5:0c:9e:89:51:fb:21:
31:b4:8e:7d:29:06:69:4a:5c:a7:1e:da:a2:5e:2a:
fa:31:f1:e3:ce:e2:1d:8f:54:c5:4a:1c:88:37:db:
19:6a:53:00:3b:8c:4e:78:0c:28:91:8f:f6:62:21:
8c:3e:87:f1:d8:f9:2c:5b:b8:d8:74:e3:15:4e:62:
34:2e:a3:e2:06:73:11:47:27:3f:9a:67:ba:71:e1:
41:9c:f8:98:33:bb:16:28:a7:e3:0c:de:37:49:d6:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:D1:0E:FF:99:1C:7E:74:02:26:03:AC:E1:47:13:DE:29:8B:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkPRDv-ZHH50AiYDrOFHE94pi5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:ea:c2:6d:29:7e:c5:7f:5c:c9:d9:77:de:76:c9:32:42:f9:
97:e6:b4:df:25:f1:6d:a5:87:ad:37:b7:97:5e:c5:2c:65:fe:
5c:d1:cf:ee:41:bd:69:b5:95:51:99:df:00:16:63:5d:18:3c:
0a:7f:f4:0f:92:54:4b:a5:ab:5b:2a:27:1d:b2:e3:fc:b5:e2:
13:50:57:92:5c:e7:28:f1:29:d8:32:d0:92:1d:f4:8b:9b:03:
5a:b9:c4:8e:15:35:4c:b1:3b:ef:2f:48:83:9a:e0:dd:49:53:
88:41:99:3e:ce:96:c6:3b:ab:da:bb:86:2a:17:1c:40:0e:2e:
fd:1f:c4:c1:ec:2b:f2:f0:81:ad:72:6c:b8:f9:d4:aa:9d:3d:
b8:cc:50:0c:03:01:81:ef:b9:ff:5f:42:aa:41:f1:c3:cf:98:
7d:da:ec:0e:6d:fc:03:0c:e9:de:78:cc:aa:f6:96:b2:25:33:
5c:a6:3e:1c:eb:60:42:8e:59:ae:47:8f:84:a9:39:61:6d:96:
f7:2f:1c:53:94:6a:e0:9f:a5:ad:b9:a7:50:5f:de:92:38:eb:
f9:e1:f4:d0:58:bb:fb:f0:5d:c7:9f:31:1e:4f:c7:af:2b:52:
46:6a:37:46:b3:62:19:ba:3f:c5:6b:27:d4:8c:12:96:55:b0:
9c:18:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:08 2025 by rpki-client