Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ptP42BxTbzacKq_4YWaRej5MVMg.roa
File: ptP42BxTbzacKq_4YWaRej5MVMg.roa (raw, json)
Hash identifier: iH6fjmndz7z1y65VsFYX9LE+KgK9bimdl/sVb5FPLwk=
Subject key identifier: A6:D3:F8:D8:1C:53:6F:36:9C:2A:AF:F8:61:66:91:7A:3E:4C:54:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01849D8D07D29A38B2406BB8044B954E661E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ptP42BxTbzacKq_4YWaRej5MVMg.roa
Signing time: Tue 22 Nov 2022 04:16:16 +0000
ROA not before: Tue 22 Nov 2022 04:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9d:8d:07:d2:9a:38:b2:40:6b:b8:04:4b:95:4e:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 22 04:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6d3f8d81c536f369c2aaff86166917a3e4c54c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:5f:81:b3:b2:b6:72:58:de:53:f2:df:e3:
07:36:51:0d:4d:d8:ff:aa:40:4e:4e:0a:37:f0:f9:
66:66:12:fc:93:22:f1:76:95:88:f9:35:06:f8:40:
bb:f1:52:ea:72:c0:41:8e:67:62:c3:24:f2:70:39:
24:e4:f3:f7:9f:38:4b:e0:d0:53:9e:aa:9f:f8:6d:
d6:96:8b:13:55:5a:bf:61:10:9d:bf:da:5f:d9:b7:
66:cc:3d:9d:df:4c:ba:24:85:77:72:28:e5:5d:e8:
fd:4e:d8:dc:07:4b:db:46:e8:30:df:4b:ce:89:e0:
c2:7b:c4:57:f9:2f:e4:68:f6:c2:aa:0b:8e:75:f2:
24:9d:6c:41:e3:8b:98:47:c0:09:81:15:93:ec:d7:
71:d6:8c:9e:5a:21:4b:20:97:3f:11:6d:8b:11:55:
65:bc:be:49:b7:77:4c:e5:ea:da:f7:15:b9:e3:72:
32:38:9e:af:9e:68:1d:12:c9:5d:c6:cb:d1:ba:f6:
8a:b2:e5:1e:68:7e:d7:ce:f9:1c:4d:9f:20:04:bf:
66:cc:7b:f4:d8:6c:a6:36:58:c0:06:d9:76:05:1e:
4b:d5:6c:f6:fc:4f:71:50:67:a0:1f:e3:6b:ee:d9:
79:54:1c:9d:d0:28:2a:5b:10:03:51:da:bc:ac:d4:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:F8:D8:1C:53:6F:36:9C:2A:AF:F8:61:66:91:7A:3E:4C:54:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ptP42BxTbzacKq_4YWaRej5MVMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:0f:6e:ce:8f:62:f4:e8:35:4c:83:aa:1a:69:04:68:46:52:
ea:8e:cd:45:b8:ba:4b:fb:0f:c7:7c:18:fa:f4:a2:bb:29:99:
7d:00:eb:66:86:e8:58:bb:db:68:93:40:1e:ca:3b:65:99:a7:
fd:8c:80:2e:d3:a8:97:e5:46:30:8c:47:d1:12:2c:8a:cb:77:
13:8d:d9:8c:fd:b3:24:42:9c:23:cf:e7:45:82:c3:a4:2d:6c:
2a:31:43:43:e1:83:5c:fc:18:f3:dd:8a:1e:16:1e:49:f8:5c:
ad:ca:bd:a9:42:e8:6f:0e:68:b2:d4:ec:d3:9c:6f:0f:c3:59:
f2:f7:39:7a:16:36:e8:dc:4b:06:0f:72:c4:d6:99:c5:68:ba:
8d:92:e1:5b:e6:39:9f:c6:5d:63:d0:ca:ab:9b:3a:fa:57:dc:
f5:d1:2e:7f:cb:1e:79:a9:85:c5:9e:99:ae:2e:5d:36:30:4d:
12:2e:86:db:f5:00:48:60:6e:8b:16:54:0d:16:47:72:c6:41:
d9:ed:a3:2a:fb:70:5f:d3:35:2d:b1:f7:07:29:e0:dc:67:5d:
4d:bb:5c:4a:77:99:69:9b:44:3b:51:58:c7:53:f3:a7:fc:23:
69:84:1d:9e:04:d3:4d:16:66:d3:6f:42:af:e5:a5:d4:ff:68:
b1:a3:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:03 2025 by rpki-client