Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwlYtFS6FUUhGM4igC791WGLDQ0.roa
File: pwlYtFS6FUUhGM4igC791WGLDQ0.roa (raw, json)
Hash identifier: zPTwDP+5Eds1Gw106RvGYPX01RWoO0Pwu3+Qy7EluZs=
Subject key identifier: A7:09:58:B4:54:BA:15:45:21:18:CE:22:80:2E:FD:D5:61:8B:0D:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185089B9A341A84C6A03C942E4174E85AFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwlYtFS6FUUhGM4igC791WGLDQ0.roa
Signing time: Mon 12 Dec 2022 23:11:33 +0000
ROA not before: Mon 12 Dec 2022 23:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:9b:9a:34:1a:84:c6:a0:3c:94:2e:41:74:e8:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 23:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a70958b454ba15452118ce22802efdd5618b0d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:94:a1:65:58:67:c2:ae:4b:5e:b9:fe:d3:
6e:ee:81:2d:4e:bc:b2:8f:38:8b:51:f7:20:6c:8c:
18:a6:ad:c7:3e:ba:35:52:98:54:c3:9a:e0:ed:1f:
16:b6:18:4b:92:2d:fb:98:67:ed:17:e1:28:dd:9a:
60:ed:69:26:4d:60:f8:34:9f:23:57:0f:9f:af:00:
9a:0d:ff:45:30:7f:d0:a7:a0:af:49:d6:5a:be:da:
8d:a8:83:35:46:d2:3b:09:f1:86:f9:bb:da:87:e4:
d2:7f:6a:e3:86:f8:66:2b:d8:a4:e2:0c:44:e7:4a:
f0:f4:37:eb:b7:92:b9:65:fa:dd:bc:fb:2e:21:ee:
1b:b6:19:4d:b5:fe:67:17:cd:69:07:6b:84:cd:ec:
cc:45:b9:fb:ed:52:83:ef:c7:3f:61:9e:e2:8a:94:
eb:39:a8:bd:18:2f:d5:da:39:e3:39:b4:4c:15:8f:
e1:c4:11:66:b1:e7:69:41:59:55:b1:aa:6c:11:de:
43:b6:0c:cb:da:a6:0f:41:f6:a0:ca:6e:49:0b:26:
77:26:c6:33:3c:57:0e:ee:28:8e:e0:84:b4:44:10:
30:1f:53:1a:fa:16:17:11:f8:11:9a:33:4e:2a:fa:
13:66:1f:d2:f6:76:8c:cb:a0:65:6e:60:ee:aa:81:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:58:B4:54:BA:15:45:21:18:CE:22:80:2E:FD:D5:61:8B:0D:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwlYtFS6FUUhGM4igC791WGLDQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:37:ca:2e:62:dd:11:a1:17:2f:a2:78:6c:6a:2b:ce:94:ba:
d2:1f:44:ca:ff:1e:08:a3:c5:49:cf:51:f9:a2:23:2d:3b:7a:
7b:df:d1:05:0c:84:c0:cb:17:3a:1f:8c:72:3f:6b:e2:7d:d0:
b5:f9:24:5d:4f:1e:97:ec:a4:9e:e8:a3:ef:a6:2c:7c:b8:51:
c1:28:d0:ee:8e:a9:f2:ed:74:58:b2:bf:48:d5:37:2c:5a:c8:
3a:ba:ce:d7:5c:2c:7d:be:38:85:e2:05:f8:b3:c7:53:fd:00:
17:59:70:5f:73:51:53:34:87:4a:50:16:59:df:ba:1e:7a:b2:
fb:1c:cd:48:49:f3:bb:84:9e:40:97:73:36:5c:ac:fd:46:38:
ac:07:ba:13:af:bd:b6:ae:7c:eb:43:7a:bb:e7:d5:3e:25:71:
d1:c1:6a:5b:7d:70:be:84:f4:20:26:28:e7:25:92:56:8f:0c:
fb:d0:af:14:59:f3:4c:78:f6:11:f7:ae:a7:20:ea:0a:36:87:
41:24:22:11:36:83:ca:16:56:63:e6:84:92:c1:4e:8c:1c:6b:
72:a9:c5:80:f8:bf:0d:69:aa:f1:51:52:b4:d7:35:70:f7:ae:
03:ac:53:66:ad:f8:b5:63:dc:b2:f3:1e:47:de:2c:24:70:07:
0b:10:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:31 2025 by rpki-client