Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZGdBIK7A5bmDQXmUYmtubOo_c0.roa
File: PZGdBIK7A5bmDQXmUYmtubOo_c0.roa (raw, json)
Hash identifier: l0NF2koo4X3rkZXcJ7fhdkAh+nNVDUP3p80PFLAUkDQ=
Subject key identifier: 3D:91:9D:04:82:BB:03:96:E6:0D:05:E6:51:89:AD:B9:B3:A8:FD:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018565156EB3567729AFB8DC760685AA061D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZGdBIK7A5bmDQXmUYmtubOo_c0.roa
Signing time: Fri 30 Dec 2022 22:09:41 +0000
ROA not before: Fri 30 Dec 2022 22:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:65:15:6e:b3:56:77:29:af:b8:dc:76:06:85:aa:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 22:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d919d0482bb0396e60d05e65189adb9b3a8fdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:38:f6:f0:3f:d3:28:90:86:04:69:07:1c:
d9:19:f5:41:d7:c9:4a:0f:d2:5d:3e:87:4a:44:04:
a3:54:2c:10:7b:11:f7:ef:72:77:f5:e0:72:eb:56:
09:d0:45:93:76:eb:dc:b6:85:cb:6f:fd:9b:0e:fd:
06:ea:8d:16:41:54:83:7b:a9:3b:fe:cd:b8:28:d6:
7b:a9:cf:44:10:8b:fb:38:79:94:b8:0b:b8:d5:2f:
4d:bc:7c:bf:f7:cc:ab:9b:22:73:7c:e1:d0:28:22:
00:04:01:08:6c:59:a9:9e:d3:f0:2e:64:a5:17:3b:
46:f5:1d:0b:34:7a:7a:03:3a:f0:6a:16:a0:00:3e:
61:5c:27:72:72:47:06:e7:f7:7e:65:ce:0d:42:88:
92:fd:6e:cb:15:10:03:26:92:f1:95:c2:0b:e7:41:
97:12:58:7e:08:eb:6c:7e:4e:39:bb:ed:5a:84:30:
2c:ff:42:a4:56:ef:17:44:d9:71:7a:64:90:07:93:
66:bd:86:f9:3b:51:e9:67:c3:8d:01:44:4c:f6:fd:
e6:71:e4:0b:a2:b4:42:28:f8:e1:8f:05:cc:8f:30:
a1:e0:27:5e:8d:e0:b1:e3:81:b6:92:c3:92:a2:f6:
c2:42:53:44:db:da:a1:dc:01:c1:9c:af:17:03:e7:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:9D:04:82:BB:03:96:E6:0D:05:E6:51:89:AD:B9:B3:A8:FD:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PZGdBIK7A5bmDQXmUYmtubOo_c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:92:34:a5:fb:11:db:af:91:ca:d1:a8:4f:37:79:d2:68:f9:
3a:36:89:9f:2a:26:9c:7c:0c:c2:99:a2:79:42:41:1a:c4:73:
43:01:0c:df:67:5b:c4:ad:a8:21:63:b2:15:63:a9:bc:92:f2:
f0:c5:f3:6a:58:5e:99:80:28:c2:65:b3:e6:e0:f4:71:06:6f:
58:4c:bf:6d:ba:96:b6:f6:93:c2:03:52:70:16:15:ee:99:6a:
3d:76:f2:b3:23:bc:50:7a:45:0a:09:76:90:39:33:22:97:5e:
ae:e2:69:ab:1e:85:0c:15:c0:0e:d3:a8:30:6e:67:a4:6b:5a:
32:64:85:1d:e8:45:73:d6:00:ba:84:e4:e8:47:ee:77:9f:04:
6c:1a:31:8b:f8:80:6e:6a:e8:b6:6f:53:09:b1:da:7e:57:a7:
76:15:fd:9b:49:46:48:1f:ad:47:aa:50:09:4e:b2:b5:9f:06:
c8:5b:84:f5:e3:58:66:22:92:eb:8b:04:c0:73:7e:93:60:4f:
22:81:8f:d9:fe:99:9d:f6:ee:40:dd:e3:7c:08:f4:69:1d:73:
e2:be:49:5e:a4:f6:c2:36:03:44:b3:37:87:77:28:e5:f5:de:
7f:70:3f:33:de:cf:f5:a6:09:9a:76:eb:c3:4c:08:1e:42:15:
9a:d7:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:59:47 2025 by rpki-client