Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PE0LMiFbJ38CskeweuYbaF3dFjo.roa
File: PE0LMiFbJ38CskeweuYbaF3dFjo.roa (raw, json)
Hash identifier: A5NsNTaXR09CFMzmWrlYBnelloYqxdk3JjGzosvwc94=
Subject key identifier: 3C:4D:0B:32:21:5B:27:7F:02:B2:47:B0:7A:E6:1B:68:5D:DD:16:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018444B8C12D422193287BD09E9CB3285572
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PE0LMiFbJ38CskeweuYbaF3dFjo.roa
Signing time: Fri 04 Nov 2022 22:17:49 +0000
ROA not before: Fri 04 Nov 2022 22:17:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:44:b8:c1:2d:42:21:93:28:7b:d0:9e:9c:b3:28:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 22:17:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c4d0b32215b277f02b247b07ae61b685ddd163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:0f:ba:bf:71:bb:63:a2:b4:bb:0a:6a:2a:
f2:24:2d:e5:83:ab:12:66:77:a9:b7:d0:56:b1:70:
64:45:5a:a5:99:1f:c2:c5:09:16:9b:05:80:f7:a0:
d6:ec:b8:4b:56:4a:00:85:4e:c4:94:90:96:eb:b1:
9e:5d:cf:94:ed:51:5a:75:eb:5e:48:3d:81:9f:99:
9c:0d:1b:f9:c0:b1:f4:26:0d:a9:b2:ac:df:ac:6e:
64:31:e9:af:34:73:ed:5d:49:35:72:cd:ef:d4:15:
fa:f6:41:16:b8:41:80:cb:3f:04:ab:1c:eb:7e:ca:
f2:be:71:84:c0:61:fb:6f:01:78:6a:b1:33:3d:6b:
70:de:8b:ac:17:4b:d6:97:f3:3b:ec:8f:58:6c:9a:
ca:d3:5c:9a:ea:77:89:80:cd:41:63:a1:05:a3:3b:
5b:54:fe:a0:18:1d:b5:db:6a:c5:ae:56:d3:01:c9:
80:15:ce:bb:a3:bd:02:9a:9d:75:d1:5a:4f:9e:b5:
b7:bf:86:3d:99:4c:96:35:62:4d:a5:b1:8f:93:37:
31:ee:f4:bf:c4:6a:78:0a:5d:c8:c2:65:08:17:32:
6c:9c:d6:fc:51:3a:a0:63:0c:98:24:a4:9d:61:4b:
23:a9:1e:79:6f:40:ec:2b:00:2e:dc:52:2f:ee:34:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:0B:32:21:5B:27:7F:02:B2:47:B0:7A:E6:1B:68:5D:DD:16:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PE0LMiFbJ38CskeweuYbaF3dFjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:bc:7d:0f:73:bd:83:1d:70:dd:38:f7:9c:7a:5a:b3:0d:9d:
82:7e:97:20:df:3b:d3:e7:7a:54:9a:24:ca:a2:3e:d9:02:9b:
1b:e7:04:31:ac:6e:90:03:33:3e:8b:08:4a:07:af:27:c8:ab:
f2:ee:5b:90:c1:ee:b9:34:90:6f:66:a6:53:1a:47:2a:37:bd:
7b:5f:20:45:3c:0c:b6:64:44:a0:ee:9c:c7:9e:70:81:16:d0:
e2:35:e0:40:f3:a8:bb:e3:6b:92:e5:9a:4e:d1:ec:21:1b:63:
cf:3c:73:a6:44:af:9c:a8:76:0f:78:12:e7:f0:51:a0:6b:77:
4a:35:8c:0e:3e:9a:34:d4:23:c8:a2:80:a2:cc:4a:8c:03:9c:
1e:02:86:3e:fb:6e:d0:0d:76:da:cb:a6:57:87:3a:16:77:f6:
13:44:5e:de:5a:1e:96:9c:8c:66:3b:f5:bc:09:df:4d:39:3c:
db:50:35:c4:78:55:1e:b9:c1:0c:4c:7c:21:18:4b:da:e5:dd:
46:e8:40:4c:76:f2:c2:1e:99:e8:8a:03:0b:27:2c:23:74:ba:
1b:05:34:75:1a:12:ee:d2:6a:a2:ec:8f:cb:70:97:4d:b2:b3:
bb:25:11:c8:c3:0d:49:01:d2:01:25:b8:e1:03:58:9d:71:cd:
d3:82:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:53 2025 by rpki-client