Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlLkHBXyFTKDq28IrNiWThCrokk.roa
File: PlLkHBXyFTKDq28IrNiWThCrokk.roa (raw, json)
Hash identifier: UWxlQYd0gKVaOH2pu6rmYqnKjcGxlrpsrdW0HZ4UzKo=
Subject key identifier: 3E:52:E4:1C:15:F2:15:32:83:AB:6F:08:AC:D8:96:4E:10:AB:A2:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845E73E4AEC75B489ED5EEE9EC691F074C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlLkHBXyFTKDq28IrNiWThCrokk.roa
Signing time: Wed 09 Nov 2022 22:12:44 +0000
ROA not before: Wed 09 Nov 2022 22:12:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:73:e4:ae:c7:5b:48:9e:d5:ee:e9:ec:69:1f:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 9 22:12:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e52e41c15f2153283ab6f08acd8964e10aba249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:0d:c3:56:0f:8d:4b:59:ca:42:06:4d:56:
8d:eb:44:7c:9c:bc:8c:0d:0a:e2:f5:15:ac:ef:43:
83:e3:4a:6d:67:4e:43:86:41:c5:c5:e9:3d:65:ef:
db:30:91:58:8f:89:82:f5:99:6e:b8:d4:31:47:16:
3a:60:e2:d1:d4:70:d3:15:c0:d7:8c:0d:b7:bb:a6:
dc:a0:50:ee:d5:aa:82:5a:a3:c1:a3:e6:c1:30:f4:
b8:f4:4c:14:56:4d:ad:b8:3c:ba:9f:38:93:fa:14:
4a:4e:e4:3f:28:0f:24:99:3d:2e:1d:49:c5:25:86:
37:16:1c:13:9c:25:b0:33:56:2e:14:98:fd:ec:65:
2e:7d:78:6f:fe:3b:88:37:86:6e:4e:d6:82:be:aa:
b6:0f:c3:4b:6f:a2:53:e5:20:0b:b1:5f:90:b3:c7:
22:3e:eb:1b:d4:15:43:ef:e7:e4:13:e1:ae:c8:72:
6e:bf:74:ac:21:5e:4f:15:3f:f1:b2:b7:0c:0a:5d:
f3:13:68:6b:94:0b:ce:31:5e:4d:ca:30:ad:c7:01:
e3:c4:c4:08:b4:52:1f:7d:62:e7:b5:cb:6c:a7:b2:
d4:f7:45:7f:44:02:53:14:1e:0f:58:44:65:ac:e0:
27:98:b5:4f:93:95:3f:6f:b5:c6:a1:2a:a9:2b:29:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:52:E4:1C:15:F2:15:32:83:AB:6F:08:AC:D8:96:4E:10:AB:A2:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlLkHBXyFTKDq28IrNiWThCrokk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:99:a1:5e:09:69:88:da:3e:74:67:15:24:7b:c8:fd:a8:c4:
66:62:81:de:10:32:ec:9a:c8:9a:e1:ea:6f:4a:a2:1b:f5:18:
d5:77:93:b5:8b:f1:cd:b0:de:47:e1:12:47:6f:9f:0a:3e:dd:
28:36:cf:b3:bf:33:9a:d8:bb:b8:b3:91:10:a8:b8:26:ea:06:
25:a0:7d:50:d4:be:bb:80:7d:89:9f:32:eb:b7:1f:78:9d:5d:
7e:49:d0:b1:ce:48:15:d2:20:4e:73:f5:9a:4d:06:60:62:de:
28:10:12:68:37:da:ae:6b:29:12:aa:0a:cd:e5:fb:84:b9:a6:
3b:f2:43:fa:34:21:6a:cb:50:df:39:a9:7c:b0:a1:d1:c7:55:
35:9a:31:33:6d:87:99:82:b7:df:9b:fc:2f:bd:95:d6:51:c0:
ef:84:cf:78:cb:a0:6a:4e:0f:c3:30:3e:ed:dc:79:0d:e0:a6:
87:2d:c3:57:06:21:e6:37:b6:ce:56:a8:ce:fa:5a:ad:e2:55:
d6:f5:bb:3f:fd:d3:0f:42:f0:0c:0a:e1:b3:73:0c:85:41:51:
ea:3b:4f:58:f1:57:60:ce:7a:44:06:20:dc:a7:db:96:c2:a6:
0b:d8:9c:57:dd:56:45:4a:62:57:71:1d:71:f3:ff:be:52:f1:
bf:9a:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:23 2025 by rpki-client