Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmPecasMD_ee6NfF0m8FRSw7jVk.roa
File: tmPecasMD_ee6NfF0m8FRSw7jVk.roa (raw, json)
Hash identifier: YaBs+i7wNrxpYzH2m42/Uso3hKSVmWVYILI86Ox1pkc=
Subject key identifier: B6:63:DE:71:AB:0C:0F:F7:9E:E8:D7:C5:D2:6F:05:45:2C:3B:8D:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9114FFFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmPecasMD_ee6NfF0m8FRSw7jVk.roa
Signing time: Thu 30 Jun 2022 05:13:02 +0000
ROA not before: Thu 30 Jun 2022 05:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434072573 (0x9114fffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 30 05:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b663de71ab0c0ff79ee8d7c5d26f05452c3b8d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:24:d9:3a:c1:ae:5e:cf:88:f8:36:61:c8:
3a:53:e3:14:2c:6c:80:97:4f:b1:50:db:8b:64:c2:
e7:18:73:57:dc:9b:d0:ec:f8:04:5c:55:d6:38:24:
a8:b6:2e:9c:b4:b2:ee:7b:21:72:73:da:d5:81:11:
dd:fd:28:1b:92:0a:17:a5:f2:8b:26:d9:e6:29:5e:
cb:c9:d1:e0:35:e8:60:a3:8e:30:76:be:d1:18:c4:
68:56:99:67:e1:0d:e1:f9:61:9c:6a:6f:95:12:06:
6e:4f:db:fb:aa:fd:2f:d6:dd:c6:80:35:8f:79:d6:
ea:d1:48:78:7b:8f:f9:41:0f:c4:2c:3a:52:9e:10:
85:98:9f:92:cb:bb:8d:77:df:e2:3f:21:c2:81:d3:
05:1b:b1:ab:04:54:0d:ac:f5:36:74:08:2c:ba:fd:
69:c3:26:de:36:ba:51:df:38:21:21:39:2d:17:fe:
56:0c:15:fb:46:c0:fd:34:84:f4:53:29:78:98:f9:
ef:24:ca:82:92:f3:af:11:12:5d:db:37:fb:ba:bb:
e3:04:7f:be:b3:86:80:63:2a:d6:47:d3:88:f3:a6:
a0:51:b2:04:46:62:79:94:02:ef:da:82:05:44:7b:
cf:ac:69:92:34:68:31:31:4d:5c:f2:3d:ed:6d:e0:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:DE:71:AB:0C:0F:F7:9E:E8:D7:C5:D2:6F:05:45:2C:3B:8D:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmPecasMD_ee6NfF0m8FRSw7jVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:75:2e:00:74:df:29:7b:11:22:37:51:f4:9d:9e:0e:ae:79:
a1:aa:61:e0:06:58:ac:d1:ac:76:51:f3:ec:a8:4c:ae:42:35:
6b:bc:2a:90:57:9d:20:2c:a3:4f:c5:07:49:09:b3:45:be:c0:
ca:f1:6b:38:e2:a7:07:cb:32:78:c0:e9:65:95:6e:a1:48:a2:
90:82:36:a9:98:5b:bb:83:89:83:c5:88:c0:e2:6d:4d:d3:4f:
b5:50:16:da:fe:19:b6:c7:92:a8:52:97:f9:a5:2a:ab:09:c1:
bd:30:20:fd:eb:40:70:7f:91:6a:79:ef:1b:f1:c1:12:26:d6:
c7:c2:a0:11:04:00:12:7a:34:40:1b:75:b0:34:a3:7d:c9:2c:
31:0f:df:ac:ee:e2:91:cc:ce:e6:98:3c:8a:e2:6d:1d:f9:fb:
2c:4d:d2:3f:b1:0d:c6:ba:0f:08:de:22:e0:00:c8:b4:73:b5:
85:c2:8f:e1:dd:79:1f:2a:d9:fb:43:34:f5:e0:76:b7:69:e6:
90:fa:5a:11:d6:38:bb:04:bc:f1:c0:66:d5:59:ef:fc:bc:80:
16:d5:44:85:0e:ba:70:90:1f:2b:9d:8c:93:fb:75:a7:53:a8:
fd:9f:97:ef:b5:ab:91:6d:55:19:36:85:a6:75:37:11:1a:8c:
05:c1:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:24 2025 by rpki-client