Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puQ86R8QhLM730btJYHkqST84m4.roa
File: puQ86R8QhLM730btJYHkqST84m4.roa (raw, json)
Hash identifier: TPSRSOSgIqw/ap/x+QugKy5sczMOtF+eptT4+BCwiuk=
Subject key identifier: A6:E4:3C:E9:1F:10:84:B3:3B:DF:46:ED:25:81:E4:A9:24:FC:E2:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851165F7CFC045257BA9D5716EA008B8E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puQ86R8QhLM730btJYHkqST84m4.roa
Signing time: Wed 14 Dec 2022 16:09:33 +0000
ROA not before: Wed 14 Dec 2022 16:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:65:f7:cf:c0:45:25:7b:a9:d5:71:6e:a0:08:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 16:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e43ce91f1084b33bdf46ed2581e4a924fce26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:5a:09:a5:e2:9d:10:6e:ec:f9:a1:b1:1f:
cd:5d:f7:f1:ee:90:a9:a4:97:53:64:43:34:20:e4:
ab:45:7c:0c:a9:84:d2:d7:57:e9:40:4c:01:d0:47:
dc:af:d4:e4:a9:52:7d:c3:73:72:fa:b3:75:d3:ee:
d4:68:37:ca:48:8b:54:c9:94:49:9d:c1:d8:65:66:
4d:e6:2e:85:ba:ab:80:9c:6d:70:5e:ae:b9:95:88:
2c:2c:ca:53:12:1b:e2:60:c0:7d:87:d4:f7:8b:82:
91:89:d8:7c:bd:05:8a:4c:0b:3a:a8:13:0b:dd:a9:
e3:11:ed:9b:a2:b1:0f:d7:df:f4:b8:67:2c:36:27:
ec:bb:1f:64:e4:a9:56:9c:7f:a7:50:cb:3d:03:53:
9d:38:dd:de:d6:b2:21:f3:ff:a5:0f:b8:0c:16:25:
ff:94:bc:76:3e:c1:ee:0d:a6:c0:a7:f7:0d:8f:d4:
2f:3f:55:93:6d:89:ea:a5:5e:5f:ee:0a:7e:b1:d9:
dc:ec:65:65:f6:1c:d1:e2:93:ab:e9:e4:f4:dc:03:
62:cb:b1:b6:03:13:22:1e:e4:16:7c:3c:1c:39:44:
06:a9:e0:71:d5:37:20:7a:d7:cb:3c:51:69:27:03:
c1:f4:2d:55:28:9e:14:f6:b2:af:ae:d7:33:28:9b:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:3C:E9:1F:10:84:B3:3B:DF:46:ED:25:81:E4:A9:24:FC:E2:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puQ86R8QhLM730btJYHkqST84m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:8c:d8:b4:ce:dc:89:0f:bc:d2:59:de:86:f9:a9:b2:8c:46:
71:39:0c:01:be:b1:f2:5e:11:be:16:34:a9:c3:e0:ff:37:4e:
75:b8:64:f0:0e:8f:48:1f:8f:3d:c4:b6:b8:b8:84:b9:9f:92:
bf:18:cb:ad:30:88:56:d2:f5:be:ae:2a:a1:d1:e2:88:a4:26:
62:4b:19:39:5c:c0:79:82:18:42:3c:1f:3b:78:ab:43:ea:e0:
32:dc:3a:09:0c:57:7e:56:d4:0d:57:5d:3e:87:51:2d:5a:0f:
00:d0:9d:a0:2d:f0:ea:e8:04:52:81:dc:27:7f:32:b7:51:0a:
d3:41:a7:dc:ae:65:a9:fd:3d:df:77:7b:e4:23:e2:b7:13:9e:
68:f6:85:26:3f:82:59:1d:db:f9:b2:5f:ea:4a:89:61:d1:2c:
c7:1c:44:cc:87:91:6c:3f:3d:1c:5a:1c:2f:b5:02:26:01:57:
97:0c:e4:5d:a5:1a:cb:33:bb:d8:64:57:14:30:4a:41:a5:f3:
09:c2:af:6c:80:b8:7b:e1:8b:a9:33:39:8f:21:8a:e1:2e:4b:
87:61:b6:53:44:92:91:dc:0c:27:58:18:c8:b4:52:92:e1:77:
54:82:13:fb:6f:52:f3:35:b1:aa:5b:66:b5:d8:c7:a8:28:d9:
dd:d5:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:57:02 2025 by rpki-client