Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PRArssgosvidcWetUbOazZhZ53M.roa
File: PRArssgosvidcWetUbOazZhZ53M.roa (raw, json)
Hash identifier: mPFZxN+VgDDvT1iiuOzI5/LokDXllvJB+4X1k/tDxKE=
Subject key identifier: 3D:10:2B:B2:C8:28:B2:F8:9D:71:67:AD:51:B3:9A:CD:98:59:E7:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A04EB9D1220368B54712C391E315ABEE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PRArssgosvidcWetUbOazZhZ53M.roa
Signing time: Thu 17 Aug 2023 19:14:24 +0000
ROA not before: Thu 17 Aug 2023 19:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:eb:9d:12:20:36:8b:54:71:2c:39:1e:31:5a:be:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 19:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d102bb2c828b2f89d7167ad51b39acd9859e773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:f7:82:3a:56:2a:93:4a:4f:14:5e:c7:a8:
9e:dc:d3:ea:53:0f:d6:36:e6:98:87:45:fd:31:c6:
b1:6b:7c:bd:e5:5d:21:23:cf:a1:c0:37:51:5e:a5:
8f:77:c2:f6:ea:49:16:5e:1c:5d:b1:d0:d8:2e:1c:
5d:15:fb:63:45:48:b2:94:81:8b:9c:f5:95:b4:28:
46:cd:80:af:51:a3:7a:6e:7d:72:02:37:07:80:68:
d3:ba:ba:a7:cc:d5:67:be:c7:dc:23:24:c5:e3:d1:
b0:63:0c:ec:fd:58:4f:da:07:9b:72:43:b0:98:46:
67:ff:de:7e:d1:ed:bb:be:71:90:7f:58:67:f0:40:
ca:0d:b1:19:1d:9b:67:65:e9:60:df:81:ac:fe:3b:
15:96:fd:98:57:43:3f:b3:73:37:9c:4f:cf:e7:54:
ab:2c:93:ad:45:b3:ff:93:3d:45:60:eb:98:7a:41:
7d:ee:7b:6c:31:71:b2:cf:53:a3:c1:de:fc:da:7d:
83:84:ac:6a:f2:b5:69:f9:5d:08:17:47:27:12:67:
43:21:0e:5e:93:a2:49:1a:61:46:52:b8:18:47:c5:
f0:02:f7:ea:58:23:4f:fe:13:ee:5a:b9:01:c8:28:
a8:b1:a9:30:65:08:3f:bc:ef:82:c2:1d:ee:35:fe:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:2B:B2:C8:28:B2:F8:9D:71:67:AD:51:B3:9A:CD:98:59:E7:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PRArssgosvidcWetUbOazZhZ53M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:09:59:d4:24:16:92:d6:7d:a7:56:10:36:ff:0a:2a:fb:17:
47:23:99:a3:85:3e:8a:52:2a:12:e4:76:7d:7b:8e:70:6e:17:
7b:99:86:64:84:4c:b6:91:d6:8c:54:0d:5b:70:67:7d:84:a2:
f4:98:13:65:ea:cf:d5:a2:4e:97:55:c8:55:da:56:25:2a:8e:
06:2b:e2:26:e6:d6:0a:39:29:12:c0:e8:74:8c:84:15:eb:56:
d2:34:44:4c:a2:9d:0d:29:b4:40:f6:b7:fa:d4:fa:c1:ca:9d:
1f:a7:ba:0a:3b:bf:5e:73:26:ed:1a:1b:a3:fd:75:54:11:d4:
40:12:84:70:e5:03:e1:5a:f5:33:19:df:e9:d8:e4:c1:45:ba:
bc:ee:62:c3:85:62:57:64:13:99:9d:75:53:fa:50:df:a0:45:
4f:97:28:a1:bc:23:5c:82:19:e0:9d:d1:19:73:2f:5d:26:aa:
e7:12:c4:d7:58:19:42:f3:69:7f:3d:35:27:72:12:fe:d6:fb:
e0:b7:15:72:8c:be:58:7b:2b:14:cc:a0:e0:5d:94:96:c7:a4:
d7:21:c6:72:7e:78:65:14:e0:24:9f:d9:f3:10:43:57:cc:3c:
cf:29:66:b3:8a:c8:d3:df:40:14:3c:b2:ff:f2:7e:8f:f5:a5:
e3:6a:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:15:09 2025 by rpki-client