Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pt-jJfe-YhDiZZ2RRGkCS3YZjtw.roa
File: pt-jJfe-YhDiZZ2RRGkCS3YZjtw.roa (raw, json)
Hash identifier: V3YYRPoCt5iqv1Y4M6g5JvgSEcH7qafiYF4z5KEoASo=
Subject key identifier: A6:DF:A3:25:F7:BE:62:10:E2:65:9D:91:44:69:02:4B:76:19:8E:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A796F72FAE6AC676EFB6F1ABF1C81E3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pt-jJfe-YhDiZZ2RRGkCS3YZjtw.roa
Signing time: Sat 22 Apr 2023 06:11:41 +0000
ROA not before: Sat 22 Apr 2023 06:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a7:96:f7:2f:ae:6a:c6:76:ef:b6:f1:ab:f1:c8:1e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 06:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6dfa325f7be6210e2659d914469024b76198edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:1e:be:a3:24:dc:ca:92:c6:16:fd:4b:6d:
4b:f1:f2:51:22:6b:80:8e:0a:f0:48:f6:be:18:b3:
47:bc:e8:34:77:84:70:78:44:bc:ee:68:67:c1:a8:
46:c2:06:0a:e1:61:dd:14:98:82:8c:c3:67:07:97:
f7:bd:dd:25:ff:73:34:ed:5d:b8:cc:c6:7e:ac:51:
74:5f:0d:33:bf:f2:c4:3f:3c:07:98:07:9c:ff:d8:
3d:96:ed:fd:3d:30:e7:07:fa:7c:5e:63:d2:bc:de:
40:16:6b:2d:26:91:da:36:a5:ab:bb:28:25:c8:ba:
98:60:cb:8b:ed:71:59:41:95:bd:8a:33:8f:ec:da:
86:b0:19:f4:04:e5:6c:d2:cb:e5:7c:c4:6f:13:6c:
c1:5e:38:16:5c:96:ef:f8:04:2b:93:28:03:23:29:
a8:42:13:ed:3b:a7:99:be:5f:c0:c6:f8:6c:98:fc:
e8:5f:42:49:9c:f9:b8:cd:cd:c1:3c:be:24:91:7b:
e2:18:cd:ea:1b:c4:d3:1f:3c:6d:f7:53:23:4e:3e:
4d:a2:e7:07:d5:e9:34:c1:d7:05:a4:86:a1:3a:f8:
93:e6:51:83:ae:ec:8a:ea:5d:f5:a4:9a:b8:bf:f9:
01:bc:38:87:53:fa:e6:88:f4:ee:b6:3b:cd:31:61:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DF:A3:25:F7:BE:62:10:E2:65:9D:91:44:69:02:4B:76:19:8E:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pt-jJfe-YhDiZZ2RRGkCS3YZjtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:00:7a:95:3e:0f:58:56:d2:4e:64:fe:24:8c:51:45:cf:63:
03:d2:7a:7d:40:8f:97:09:fa:7b:1e:8b:8b:4c:47:90:36:f0:
3d:fc:65:7b:38:d6:22:d2:4b:9b:8f:f5:31:26:a8:20:68:2a:
6f:23:4c:41:67:81:53:7f:c1:67:dd:96:95:f0:27:a9:51:be:
af:66:80:00:bd:50:f3:3e:91:e1:90:43:7e:55:18:04:31:34:
1a:f8:85:0f:3a:d1:29:4a:48:6a:42:af:34:2f:2a:f5:1c:1d:
f5:b8:d6:e2:2f:70:12:c6:b5:96:6c:51:b3:8a:21:c7:1c:1a:
f6:31:6f:58:66:7f:0a:f2:88:00:13:02:16:d0:2b:48:b3:04:
bc:74:5d:8b:38:49:5b:28:1b:e4:14:3c:f3:dd:13:cd:d9:45:
d4:53:51:c0:0a:12:c5:d8:3b:db:3d:51:41:29:59:f6:a7:d2:
52:75:1a:f7:0c:c1:f6:9d:28:62:30:ec:3b:dd:02:ea:8d:50:
9b:91:24:66:10:af:f0:69:b7:3f:33:8f:7a:4a:d5:e8:eb:88:
0e:94:29:6c:49:22:9b:0c:96:ff:6b:6c:d2:9f:bc:83:21:49:
c7:92:ca:0f:60:b2:f3:e6:85:4b:13:e5:d9:3d:0d:bb:9b:bb:
03:84:3e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:23:00 2025 by rpki-client