Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppk_pNkxc5S5vAdLPDMZg74c1_4.roa
File: ppk_pNkxc5S5vAdLPDMZg74c1_4.roa (raw, json)
Hash identifier: cypZoPVJGKaBKtYaYFrJlksDu3CmrTn29A+10JezXFk=
Subject key identifier: A6:99:3F:A4:D9:31:73:94:B9:BC:07:4B:3C:33:19:83:BE:1C:D7:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0B1C6733D77A6187FE74740D011B1D28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppk_pNkxc5S5vAdLPDMZg74c1_4.roa
Signing time: Sat 19 Aug 2023 00:05:25 +0000
ROA not before: Sat 19 Aug 2023 00:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:18a:b1b:fd4e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0b:1c:67:33:d7:7a:61:87:fe:74:74:0d:01:1b:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 00:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6993fa4d9317394b9bc074b3c331983be1cd7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:9d:5a:c2:0d:9a:65:d8:47:b3:1a:ca:28:
94:ad:d7:3c:2b:3c:a3:4a:5b:54:c9:66:ca:17:f4:
67:5e:09:da:45:c6:b5:8a:f7:bd:1f:cf:7f:6b:05:
fc:a4:e2:57:43:84:04:5b:2a:d1:8a:60:e7:bf:c9:
24:c5:8f:4f:6c:e9:48:71:b1:db:f4:8c:6c:9c:a5:
11:81:b2:cc:3b:e2:8f:ca:3b:b3:ac:43:50:fb:54:
fd:b1:09:aa:2f:12:1a:e2:10:98:3b:b6:a7:62:9e:
e5:b1:58:98:8d:6b:7f:f9:84:3c:d9:cd:52:6f:19:
bc:d6:2c:18:ba:d5:b4:d2:ed:1b:95:9e:01:ef:3f:
8f:6d:e0:d3:2d:69:6c:e7:88:f7:27:2f:10:00:8d:
8f:4e:6f:73:6f:6e:61:cf:13:57:7e:97:69:d5:89:
68:6f:e0:94:17:cf:54:ca:74:2a:5a:68:31:68:b1:
93:2f:7e:25:9c:2f:68:3b:23:8e:ff:a5:25:a5:e9:
bc:75:1a:42:0e:ab:62:6e:69:80:83:d7:88:07:9f:
b1:b6:6e:ec:a0:a2:77:98:76:1b:69:8e:1d:6b:20:
77:e6:ad:fa:38:d1:74:ca:d3:b6:94:09:b9:d1:7e:
57:32:e7:e0:61:16:02:1c:d3:e1:d5:32:27:d5:d8:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:3F:A4:D9:31:73:94:B9:BC:07:4B:3C:33:19:83:BE:1C:D7:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppk_pNkxc5S5vAdLPDMZg74c1_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:94:ae:de:05:43:a3:8e:fd:2d:0f:8f:8d:59:83:f4:cd:7b:
8a:db:46:e2:3d:a8:08:b1:f0:32:2e:ed:84:fc:dc:e1:88:3a:
77:3d:5e:45:7a:e3:28:1c:ee:ab:1c:a8:6a:ba:52:64:45:a9:
93:fb:f9:76:1d:d1:05:9d:7c:94:c2:f4:52:6f:c8:e8:22:56:
7f:7c:03:fd:e9:4e:87:dd:c7:80:d0:02:0c:ec:f7:e6:83:4c:
17:2e:bb:d5:38:0d:15:a1:0b:51:1a:a7:54:aa:7f:78:4c:4b:
cc:99:98:13:0d:5c:44:21:c5:e5:50:7c:fc:eb:aa:39:b9:0f:
43:8a:f1:2d:03:16:10:fd:15:02:f8:a0:8a:23:2c:e1:a0:f2:
a7:c0:dd:e6:b2:a6:96:af:b2:aa:14:1a:5b:3c:a5:2d:d8:9f:
7c:0a:bd:41:d0:ff:d2:c9:51:7e:6f:f6:f2:85:44:31:26:07:
07:db:2b:37:7d:28:3f:8a:27:4d:eb:58:0e:cb:6d:bd:6f:9d:
4f:e4:05:c3:e9:6f:fa:86:a4:e8:4c:3f:22:79:61:01:8d:18:
99:e7:39:13:c9:b6:17:a3:c3:15:70:3e:d3:56:40:61:a5:1d:
c9:10:d3:e9:ea:46:c7:35:50:02:2c:60:06:78:3a:38:8a:62:
0b:3b:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:09 2025 by rpki-client