Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PBeHy1i8b2LtF1RVUeoBP1EoUkQ.roa
File: PBeHy1i8b2LtF1RVUeoBP1EoUkQ.roa (raw, json)
Hash identifier: qDjP5lC+YBV2ztVCyjuZRn4rOQ9eez1uF718dPgVUVc=
Subject key identifier: 3C:17:87:CB:58:BC:6F:62:ED:17:54:55:51:EA:01:3F:51:28:52:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F84C3F8CECBDFA68ADEC3A1FCE99EA32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PBeHy1i8b2LtF1RVUeoBP1EoUkQ.roa
Signing time: Thu 01 Sep 2022 09:05:22 +0000
ROA not before: Thu 01 Sep 2022 09:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:f84b:97dd/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:4c:3f:8c:ec:bd:fa:68:ad:ec:3a:1f:ce:99:ea:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 1 09:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c1787cb58bc6f62ed17545551ea013f51285244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:2b:bd:6e:fe:ba:46:fb:60:bd:f8:10:75:
03:83:c4:68:d4:bd:72:29:27:72:3b:0a:f3:76:35:
da:a5:50:47:25:2b:c8:38:bc:bf:9a:3b:3b:ef:59:
ca:a4:42:fa:00:b5:f8:f8:38:f6:13:14:71:d0:46:
44:cb:e5:8c:2b:85:5e:e8:61:35:cd:26:9f:82:b2:
3b:5a:dc:af:07:7f:70:f8:33:22:e4:ff:19:ee:56:
5c:65:c4:16:25:b6:72:90:d6:48:95:dc:53:87:ca:
72:3c:02:9c:47:72:06:99:44:22:91:e4:c9:d0:76:
01:4a:ca:9c:4a:cf:ab:eb:9a:13:12:5a:02:6d:83:
54:9f:b7:6b:7d:c5:f2:dc:61:46:21:59:4f:e1:01:
3a:bc:07:9e:fa:42:49:52:64:18:31:20:60:a1:cd:
22:35:f5:c2:1b:db:e2:27:1e:9c:de:8c:97:6f:22:
5a:a8:72:f3:42:76:d9:fc:88:97:2b:0d:5c:f0:b8:
1c:7c:8b:8c:62:4e:8c:a5:89:29:cb:53:1a:b8:ea:
f2:e5:5e:14:82:09:d5:10:da:a8:f5:70:ed:1a:16:
3b:f2:d6:7e:ef:8f:b4:c0:11:82:91:d1:c0:3b:a3:
28:4a:f9:12:ce:a2:7f:f9:e0:e2:61:f8:65:30:87:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:87:CB:58:BC:6F:62:ED:17:54:55:51:EA:01:3F:51:28:52:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PBeHy1i8b2LtF1RVUeoBP1EoUkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ca:65:de:60:63:7c:de:19:d1:67:ff:6e:15:91:02:9d:75:
2e:b6:9a:e5:fe:c5:0a:66:dd:d0:3a:b9:52:ac:1e:16:88:d6:
9a:ad:0c:4c:c3:7c:10:7b:69:6e:1d:2a:8e:8c:33:46:e8:6d:
33:37:1e:2c:aa:f8:c1:4b:cd:89:f0:d7:c7:bc:bb:35:60:a4:
05:0d:9b:c1:e9:ec:50:3e:75:14:2c:d5:0e:67:96:e8:96:99:
e5:4e:11:21:b7:19:53:c8:0e:72:d2:80:d7:c7:5d:2c:7b:d0:
d3:a8:14:ec:10:e9:7e:e4:53:85:b8:ff:4c:fc:5c:26:cf:39:
a5:e1:39:47:9e:b9:7f:ee:61:41:95:ce:25:06:20:c6:86:b1:
2e:8f:eb:e5:cd:c5:0c:66:98:b7:10:e0:16:a8:14:9e:5c:b8:
c6:32:e4:7f:ea:5d:9d:9d:17:41:36:e4:1d:b9:d2:7b:7a:89:
e9:f9:a8:f4:0e:01:2f:4e:ba:49:85:87:55:5b:2a:d4:48:8d:
13:c7:1f:80:ed:51:7f:a0:10:6c:a3:95:3a:48:c2:82:41:6e:
c8:41:0d:82:9a:45:ff:61:fc:bd:86:ea:b8:f1:37:29:bc:8b:
16:e9:d6:61:97:a0:51:67:83:7a:ff:b6:d3:d4:ef:86:6b:80:
17:7a:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:16:04 2025 by rpki-client