Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPjBZ9Y3xfJ1NaWNKXJMRtMbp4w.roa
File: PPjBZ9Y3xfJ1NaWNKXJMRtMbp4w.roa (raw, json)
Hash identifier: KMsWc3z20bN7h9OUDbLhgD14BcJrKRoUwjFb6hs+INc=
Subject key identifier: 3C:F8:C1:67:D6:37:C5:F2:75:35:A5:8D:29:72:4C:46:D3:1B:A7:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F27C922082BEED410FB0CB2F53142D86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPjBZ9Y3xfJ1NaWNKXJMRtMbp4w.roa
Signing time: Fri 27 Jan 2023 09:08:48 +0000
ROA not before: Fri 27 Jan 2023 09:08:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:7c:92:20:82:be:ed:41:0f:b0:cb:2f:53:14:2d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 09:08:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cf8c167d637c5f27535a58d29724c46d31ba78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:9f:af:3e:bb:b0:73:dc:8b:8b:69:52:e2:
53:c2:1e:51:4b:e6:92:49:1e:5e:7e:3b:eb:86:c0:
14:af:ce:12:35:40:aa:af:b0:93:45:8c:ba:5a:bf:
2b:b1:f8:a5:ed:c5:b9:79:1a:71:21:3c:ca:45:66:
2c:5e:c2:65:2e:85:aa:d0:34:d7:b9:29:cf:51:52:
b7:09:98:0d:64:e7:8c:56:8d:80:ac:58:7c:d5:7b:
22:a3:94:28:2d:9e:34:7f:07:54:76:f5:de:87:d7:
0e:ac:ea:28:1a:09:93:03:ff:10:8e:0b:fe:d2:bf:
44:55:bd:6a:92:18:a8:80:ef:60:0a:a8:ae:12:6e:
d3:83:08:26:a5:a0:2b:41:2d:a5:00:f7:6b:1b:8a:
f2:c6:39:01:b1:a1:46:c5:de:df:38:25:59:ad:57:
9e:b1:c4:6b:89:c8:28:07:96:e8:9f:5e:b7:83:74:
49:01:46:59:41:3b:5b:15:3d:00:4e:cc:05:c4:b5:
c5:1f:58:27:54:e4:7f:b4:5b:cb:7e:c4:9b:11:ab:
e0:4e:de:54:43:e4:09:ab:55:d4:cc:15:49:27:95:
13:3e:11:a1:ae:51:f7:3c:f9:d6:ba:c1:19:1e:73:
a7:c5:d5:b6:5b:c6:de:d0:79:6c:1f:61:a9:d6:bf:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:C1:67:D6:37:C5:F2:75:35:A5:8D:29:72:4C:46:D3:1B:A7:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PPjBZ9Y3xfJ1NaWNKXJMRtMbp4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b9:39:2b:10:ee:70:4a:2e:47:3e:fe:22:b7:76:eb:4c:d5:
56:61:9a:f3:3d:ed:81:e5:af:6a:9e:5e:e1:89:6e:56:54:f9:
50:ec:6b:3c:b6:67:7d:4e:30:fa:3b:d3:62:37:01:0b:e3:ed:
e1:d4:b9:c4:24:d2:ed:13:85:70:4a:e1:44:03:c3:19:67:59:
2a:98:04:cd:ae:76:6a:79:20:1b:e2:df:4a:c0:9f:5e:4d:6d:
22:36:1e:08:8c:d7:3c:c5:ef:77:d5:40:6e:5d:85:03:43:68:
93:ff:c3:3b:6d:96:82:dd:ab:69:34:4c:f0:38:78:e5:04:8d:
d8:08:33:d1:cc:c8:00:4e:45:32:83:e6:55:b3:8b:a7:91:34:
87:14:b2:e2:33:25:05:33:9f:dc:74:86:c6:2b:8c:1a:99:62:
32:46:ac:d3:b2:4c:d9:69:10:e0:98:db:6d:d3:7a:44:16:f1:
44:7f:24:a2:9d:cf:2a:15:4f:48:b3:56:56:08:3e:24:39:24:
d3:e5:0f:47:01:46:36:d2:58:62:68:6f:57:bc:d4:da:97:13:
69:cb:1f:40:2e:18:75:96:88:47:be:8e:77:3b:07:f2:3b:7b:
64:94:d9:69:aa:5b:2f:bf:ca:05:72:b5:cb:68:f6:21:f6:23:
2e:9b:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:46:35 2025 by rpki-client