Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PJA0ue7BitEh-4kacdVLh3Oxw7g.roa
File: PJA0ue7BitEh-4kacdVLh3Oxw7g.roa (raw, json)
Hash identifier: W7RqX3UukZsZFsjnDlsFgBjaIe14wCY8Cze6mahbkDw=
Subject key identifier: 3C:90:34:B9:EE:C1:8A:D1:21:FB:89:1A:71:D5:4B:87:73:B1:C3:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896E46E4553258E9EC01168203F976576B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PJA0ue7BitEh-4kacdVLh3Oxw7g.roa
Signing time: Wed 19 Jul 2023 13:11:27 +0000
ROA not before: Wed 19 Jul 2023 13:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:46:e4:55:32:58:e9:ec:01:16:82:03:f9:76:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 13:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c9034b9eec18ad121fb891a71d54b8773b1c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:e5:3c:cf:ed:4c:5f:38:8e:1e:db:8e:12:
9c:f7:59:c3:a9:35:b0:5c:50:91:aa:54:8e:77:24:
24:c5:8a:46:c2:db:e2:96:f5:82:53:28:10:4d:b6:
7c:ad:07:d3:9d:7e:d9:e2:b5:93:5a:16:09:14:ac:
3b:a0:5b:92:37:7b:9a:ff:b4:e0:b5:cb:07:b4:c2:
f3:a3:16:fd:c3:40:95:63:0b:39:4b:55:d2:ca:39:
d6:a9:90:d6:c0:04:9b:da:e8:12:5e:25:15:a5:96:
bd:58:65:72:90:fb:8b:5b:ed:e9:0b:5d:17:5d:e9:
58:e9:02:bb:e3:19:2a:91:e6:48:5e:10:7d:e4:8c:
97:d9:78:bf:65:53:88:a3:23:4f:8c:54:0a:d5:f9:
e6:0c:94:c1:76:b4:4f:f4:3c:13:a0:66:b4:ea:c3:
27:40:24:dc:76:80:5b:07:a7:54:74:29:4e:21:8a:
dd:ed:b3:1e:11:f1:d6:04:45:4d:cb:12:05:5c:8f:
40:e2:25:57:71:cc:1c:2b:82:ee:1f:2f:32:5f:a4:
c9:91:7e:44:cf:7f:e9:69:0d:52:78:bf:71:44:3e:
ea:4a:8d:0f:9f:08:f5:fe:3d:03:8e:55:9e:53:27:
3a:ec:a8:08:fc:ca:bd:6f:e9:56:19:1b:22:82:e9:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:34:B9:EE:C1:8A:D1:21:FB:89:1A:71:D5:4B:87:73:B1:C3:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PJA0ue7BitEh-4kacdVLh3Oxw7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b1:ad:43:92:78:fb:49:b6:ca:74:d1:26:cf:db:3a:33:76:
e2:cf:7c:24:93:92:f1:47:cf:62:6d:06:e8:22:44:a3:9e:73:
7c:fd:b0:27:95:c4:c8:8b:29:be:ec:e9:47:7d:d3:67:87:63:
22:8f:b1:12:75:9f:30:31:07:7a:d1:18:c4:86:2a:28:93:98:
42:b5:da:52:dd:1f:4b:19:da:a6:0c:e6:92:7a:7a:db:69:bc:
24:8b:44:1a:cc:45:33:be:97:bc:c1:b1:10:9f:3f:90:a2:fe:
63:a6:67:6f:4d:6e:8c:2c:4e:fd:af:f9:82:f8:40:8d:07:48:
14:ef:92:cd:6a:94:d9:bb:72:d7:4f:b9:05:0e:c3:7c:db:8d:
51:32:f4:7f:17:2b:f8:e5:bb:0b:1e:0d:fa:83:14:a1:2f:d7:
9c:64:86:aa:bd:f6:e6:63:ca:65:1f:59:f8:b4:03:0c:82:bc:
68:f9:13:f5:a5:6e:47:04:4e:8c:a7:29:f4:d5:73:cd:05:33:
4c:00:94:ca:85:c2:0f:6e:39:ad:cf:e5:54:dd:83:2e:74:48:
7d:f9:5c:8d:0f:91:e2:39:72:2c:84:99:04:f0:90:fc:2a:00:
72:38:1b:83:b5:bf:de:bd:1a:cf:b5:94:bc:5d:5f:bc:e4:21:
58:bb:58:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:52 2025 by rpki-client