Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSPqoEXaNeJxrf8FRYE1IBXZGCs.roa
File: PSPqoEXaNeJxrf8FRYE1IBXZGCs.roa (raw, json)
Hash identifier: MvjeC3fF9v2Ct7BhKSYDG3AFRKEnq+sWz859d/Jt5KQ=
Subject key identifier: 3D:23:EA:A0:45:DA:35:E2:71:AD:FF:05:45:81:35:20:15:D9:18:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184410D6EB4631536AAB12D57DC70C35F4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSPqoEXaNeJxrf8FRYE1IBXZGCs.roa
Signing time: Fri 04 Nov 2022 05:11:50 +0000
ROA not before: Fri 04 Nov 2022 05:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:0d:6e:b4:63:15:36:aa:b1:2d:57:dc:70:c3:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 05:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d23eaa045da35e271adff054581352015d9182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:fd:7e:10:74:9e:d2:30:76:50:50:a7:69:
ad:79:fa:57:9c:39:94:01:4f:99:8f:e8:dd:4b:3f:
40:90:ad:6f:e5:f8:78:a4:78:bc:50:a8:48:c6:70:
34:c0:04:30:50:a4:1a:55:b0:96:ad:e6:bf:4b:88:
74:14:3a:05:0b:fc:67:70:b2:e3:d7:19:db:11:17:
27:61:07:0e:d4:50:d2:54:12:58:52:2a:d8:3e:06:
79:f9:fb:39:46:d0:45:05:01:80:71:91:e7:5a:06:
b4:b6:c4:9d:78:7d:a3:7a:bf:6f:e4:c7:fc:c1:77:
ea:f4:6d:c8:77:b7:3b:28:c0:71:fa:74:0f:9a:cf:
21:84:ef:a1:51:79:d3:ef:86:62:cb:e0:b3:c0:35:
21:8f:53:d8:96:40:6f:f9:50:9f:e7:94:64:e5:80:
37:a6:85:02:f6:cc:e7:1d:82:a6:b4:0d:c2:69:c5:
67:cb:9d:b8:89:44:48:94:40:c2:96:84:e2:5f:74:
13:1c:68:cc:6b:ed:2d:20:e8:75:53:8e:92:dd:ac:
ab:e5:65:4e:2f:45:2a:b8:b6:4b:b5:58:d3:a6:ca:
5b:33:fe:02:f1:fe:1e:be:30:8e:a7:d9:b5:f8:9e:
53:17:d0:c5:8b:81:4e:0d:10:2d:ee:f8:01:08:d9:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:23:EA:A0:45:DA:35:E2:71:AD:FF:05:45:81:35:20:15:D9:18:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PSPqoEXaNeJxrf8FRYE1IBXZGCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:12:6f:f8:0c:58:e9:e7:ff:24:b9:2d:b5:a7:42:a7:a2:72:
50:f8:1d:c3:fd:0a:e0:cb:21:c3:d4:e4:14:62:e5:dc:50:8c:
9c:e5:53:31:c8:19:d8:e6:f3:5a:3b:49:83:cb:2d:76:e3:e5:
d0:22:30:72:bc:89:79:77:b2:7a:e6:1a:9b:da:b9:c7:7e:dc:
1a:44:17:3b:08:7e:a9:12:68:af:8c:0c:f4:6b:6a:31:57:6a:
a4:0d:bc:09:70:ae:03:d4:bc:fd:d1:8d:d9:51:d3:14:e7:ea:
9b:96:9f:b8:a0:15:ed:6d:5d:6f:3a:97:b1:0a:f8:c8:dc:22:
f5:12:84:7f:00:ff:b7:39:78:cf:5d:ea:96:ed:96:9b:03:81:
b0:72:70:b0:c1:e7:94:63:fe:1c:7d:97:e3:10:2d:10:4f:b1:
c3:6f:ef:dc:c8:03:27:5b:d3:13:b5:57:43:4f:77:f4:c5:ca:
97:76:69:11:77:b1:c8:a9:a8:31:ae:b9:3c:4c:33:6c:b0:6c:
df:dd:16:b9:a6:c8:9e:b3:c0:b8:1f:7e:2b:b8:03:4f:47:6a:
f4:4d:43:48:45:9e:db:65:26:4f:ef:88:df:aa:f3:20:70:ab:
e4:70:a0:fd:32:48:cd:84:44:99:6c:3c:7e:1e:11:ed:5f:b6:
93:20:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:48 2025 by rpki-client