Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PHIaYxMmi4zfrybgjO6NS-29TVs.roa
File: PHIaYxMmi4zfrybgjO6NS-29TVs.roa (raw, json)
Hash identifier: T2iCmS31tE+5you1rL0cO2RVVQhlroHmBPQy46aBnZU=
Subject key identifier: 3C:72:1A:63:13:26:8B:8C:DF:AF:26:E0:8C:EE:8D:4B:ED:BD:4D:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F4E3799500699503C2F7FDAC43BE49E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PHIaYxMmi4zfrybgjO6NS-29TVs.roa
Signing time: Thu 20 Oct 2022 10:14:51 +0000
ROA not before: Thu 20 Oct 2022 10:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:e3:79:95:00:69:95:03:c2:f7:fd:ac:43:be:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 10:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c721a6313268b8cdfaf26e08cee8d4bedbd4d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:52:36:ca:6c:35:90:a7:9c:a3:10:a2:21:
c5:bb:32:42:53:81:0f:e3:d0:58:fc:8a:1c:52:b5:
a7:c1:b9:75:07:d6:35:84:bd:f2:9e:29:57:2c:8d:
d3:94:91:e8:5d:82:49:aa:37:29:d0:a3:01:29:e7:
80:64:64:63:86:23:8d:8e:06:5a:fe:c2:0e:12:5d:
84:f9:ef:8c:54:0e:68:00:1c:c9:f3:18:a3:c4:6e:
c5:62:62:57:0d:0c:3b:c3:b1:67:70:03:3a:2e:82:
17:49:71:23:80:54:ee:15:52:a0:ab:e0:c8:84:79:
34:a3:a7:34:c2:6f:70:f0:42:12:f7:35:75:a0:27:
1e:8a:be:81:12:93:32:7a:2d:cb:30:c0:e0:ba:eb:
0d:c6:26:12:91:e4:25:0a:70:db:9d:cc:51:75:7f:
eb:ee:e6:5f:90:99:38:2b:db:59:e5:a3:17:77:d5:
61:6b:0c:d8:ec:34:98:2d:a0:16:d0:73:50:49:ff:
af:c2:a1:05:5a:ee:bc:84:77:c4:56:e0:2c:2b:02:
80:73:10:9c:00:84:0c:e8:12:c6:bc:a8:35:d5:ae:
7b:68:27:ed:b8:2d:a4:6d:fa:14:15:3a:52:ed:74:
7b:45:d8:4e:2d:c8:c7:86:ee:81:1e:3b:ea:81:65:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:1A:63:13:26:8B:8C:DF:AF:26:E0:8C:EE:8D:4B:ED:BD:4D:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PHIaYxMmi4zfrybgjO6NS-29TVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:fe:a9:05:34:c8:73:e7:6d:24:b6:74:f3:a5:df:da:e5:29:
53:3d:b4:94:d5:2f:d9:72:4e:ee:ed:92:78:64:54:43:64:84:
5d:bb:3e:04:5e:7a:39:65:72:32:e7:7b:8a:d7:77:be:b4:74:
5b:75:bc:31:1f:a9:5f:53:9b:07:58:72:7d:51:33:68:7c:9f:
e7:a5:97:05:43:91:60:96:97:9f:e8:b3:b9:64:63:d7:1c:be:
0e:62:67:02:6e:04:4e:00:7b:c0:bd:cb:b0:5f:03:31:f0:e5:
d7:a1:7c:6e:ab:f9:bd:05:e6:68:e0:b7:49:9f:91:50:81:f6:
e5:69:40:b7:f1:7f:cd:7b:aa:b2:2a:f0:db:d4:35:c5:a9:35:
f6:7e:de:ad:92:23:e4:f7:f2:0c:c3:c5:d5:a6:10:03:f4:44:
34:ce:fa:0b:10:eb:41:5d:7f:67:9f:27:1b:57:de:b4:54:d3:
e5:05:a8:bd:15:02:02:62:a3:21:25:6f:fa:3f:44:58:8b:34:
71:ff:d5:d0:56:82:29:f5:f1:f0:e7:62:03:6c:4f:12:7d:28:
73:0b:07:04:a3:bd:85:d7:df:9c:8e:eb:32:58:38:17:6a:ee:
ad:20:7f:40:c5:dd:e0:84:34:c0:89:9b:53:0a:2f:d2:25:d2:
09:66:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:32 2025 by rpki-client