Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puQR5StEBc22NOyW_RtMIi6l9Z0.roa
File: puQR5StEBc22NOyW_RtMIi6l9Z0.roa (raw, json)
Hash identifier: 5SyiikNrYvj7e4vDjTZM3v51B/Tt1HYO/wQfOrARox0=
Subject key identifier: A6:E4:11:E5:2B:44:05:CD:B6:34:EC:96:FD:1B:4C:22:2E:A5:F5:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832D1EE66FC0A3E4DE84DC289ABF1049A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puQR5StEBc22NOyW_RtMIi6l9Z0.roa
Signing time: Sun 11 Sep 2022 15:15:43 +0000
ROA not before: Sun 11 Sep 2022 15:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2d:1e:e6:6f:c0:a3:e4:de:84:dc:28:9a:bf:10:49:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 15:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e411e52b4405cdb634ec96fd1b4c222ea5f59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:2d:74:fd:b6:2b:5c:4f:af:a0:1a:2b:37:
58:8f:f5:2c:d8:81:53:62:c0:6e:96:c4:4d:43:c0:
12:44:3d:d1:5a:14:49:e2:da:73:b8:73:3e:a4:65:
1d:0a:6f:6b:83:f1:8b:a1:3d:f4:b9:ce:a7:a8:9e:
79:97:22:a8:9c:6f:48:ef:91:4f:35:9d:70:24:84:
57:38:62:72:6a:16:70:02:56:33:ab:c3:d0:01:5b:
8d:fd:c0:bb:ad:ab:07:27:11:e3:64:13:64:f7:6f:
bb:2b:aa:cf:12:78:ef:77:fd:70:5d:f1:0b:63:bf:
48:f1:2d:15:d7:d4:97:a9:c3:03:86:77:b9:c3:8d:
c0:d0:3a:2a:56:33:92:5c:a4:95:68:97:9c:64:bd:
31:01:57:f1:ee:13:c6:47:98:55:05:6b:7d:9a:67:
a5:29:1b:b7:f9:be:62:b1:c6:ec:87:fc:c2:f0:97:
74:c6:d3:9e:4d:05:78:e9:47:ea:61:a3:dc:64:08:
48:ea:75:07:8e:3b:0a:d6:4e:3f:94:e2:29:d6:2e:
87:ff:4d:42:bb:09:73:31:d6:43:63:5a:7d:73:b1:
0a:af:26:c7:6e:34:e9:79:c7:b8:05:1a:74:e5:4d:
c0:3f:b0:ca:95:ee:9e:03:fe:b6:7d:e5:dd:59:b9:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:11:E5:2B:44:05:CD:B6:34:EC:96:FD:1B:4C:22:2E:A5:F5:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puQR5StEBc22NOyW_RtMIi6l9Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:98:11:6a:e1:15:8a:b5:08:da:4f:71:38:a3:2d:40:b9:b7:
93:e8:b6:1c:f9:7a:6e:fb:77:de:43:2b:34:2e:86:aa:bb:5d:
17:0d:d2:d7:0f:db:9e:83:87:a1:32:06:36:e7:6f:da:db:2a:
b4:46:61:b8:b4:01:70:7c:91:20:e7:c8:78:b7:2d:1b:08:1f:
df:e9:2a:d6:5e:eb:8d:ff:c4:55:a1:02:9c:dc:c5:6c:0f:6d:
04:40:7c:41:7d:c8:42:7e:7d:d7:65:fb:85:f1:d8:88:31:45:
01:91:df:1f:b1:ec:b9:37:a6:dd:47:2f:b2:f2:76:c1:a9:0c:
ed:df:2b:f7:6c:c2:4d:e4:b5:51:d3:40:23:41:c3:73:59:74:
31:d6:3f:2b:80:13:b9:1b:35:a6:b1:34:35:ff:56:51:9f:04:
23:43:8a:9b:fe:f3:aa:cd:56:4a:86:2e:e0:a3:19:36:35:03:
c0:36:20:51:e4:6b:11:7d:7f:17:60:d9:5c:dd:2b:53:36:54:
9f:1b:66:f0:9c:e5:94:ec:e2:3a:ea:13:a2:70:7a:a9:ff:e5:
7d:70:f2:fa:26:e3:6d:01:60:1f:7e:a7:db:f7:2c:55:35:68:
ea:c0:cb:9a:f2:35:86:27:6a:86:48:9f:b0:ce:c8:a8:09:bc:
fa:07:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:13:44 2025 by rpki-client