Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PT4KjXu-ibPoW1CWJlyE6Z0_0yE.roa
File: PT4KjXu-ibPoW1CWJlyE6Z0_0yE.roa (raw, json)
Hash identifier: mfKF72qOSBixn8+pdcEQLKap7RTGjjSHGi7MpC/y0Io=
Subject key identifier: 3D:3E:0A:8D:7B:BE:89:B3:E8:5B:50:96:26:5C:84:E9:9D:3F:D3:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F209DD278233FEA4C24606234545A395
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PT4KjXu-ibPoW1CWJlyE6Z0_0yE.roa
Signing time: Sat 06 May 2023 17:09:05 +0000
ROA not before: Sat 06 May 2023 17:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f2:09:dd:27:82:33:fe:a4:c2:46:06:23:45:45:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 17:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d3e0a8d7bbe89b3e85b5096265c84e99d3fd321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:69:b0:e1:03:5d:e3:ff:3d:91:ea:80:61:
6c:a5:85:ca:b0:84:02:09:b1:1a:06:58:6d:13:84:
c2:77:ba:83:0c:23:89:98:e8:4b:da:31:05:69:19:
57:29:a7:b3:a9:61:cc:55:8a:30:26:8a:5b:4e:04:
df:c6:ab:52:3e:5d:6a:c7:8c:a6:ae:26:28:f3:69:
70:1a:1b:3f:08:df:db:25:9d:37:69:5b:f9:b5:ac:
f8:27:41:a8:b7:85:ab:e4:b6:39:46:cb:dd:86:4f:
32:84:fb:75:2c:c7:40:ec:42:30:69:e7:99:20:da:
25:9a:7d:4f:75:9a:32:57:2a:b4:37:b5:25:a5:05:
81:81:2a:36:5e:cb:ac:b5:8c:c7:fc:17:5b:86:af:
6b:15:59:7b:4b:b3:21:a6:98:40:15:7a:77:93:40:
d6:92:ad:79:96:34:a9:71:93:ce:8c:97:29:8b:44:
06:33:af:e8:62:45:30:f7:b9:f7:2b:b1:5c:3d:8c:
45:32:b9:cd:03:1f:c7:cf:17:09:6c:de:e0:99:ab:
80:b9:68:12:3a:43:2c:8f:20:6f:de:61:8a:c9:00:
8e:17:29:31:11:43:fc:2b:c7:d1:e0:2d:b3:f3:84:
c0:ce:56:69:61:75:f0:66:51:14:7a:38:49:6b:41:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:0A:8D:7B:BE:89:B3:E8:5B:50:96:26:5C:84:E9:9D:3F:D3:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PT4KjXu-ibPoW1CWJlyE6Z0_0yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:74:56:3d:e2:43:15:c6:fa:5e:86:8b:0c:bc:d5:7d:31:ee:
ff:bc:b7:58:40:b9:39:66:45:9b:29:ba:04:a3:f1:5a:90:4b:
f8:80:2e:82:62:27:0b:cd:9c:20:78:8a:59:86:69:3b:ba:ca:
99:22:3e:3a:5b:50:27:6e:24:35:20:f2:8d:c0:ca:9b:57:88:
39:b0:3c:f4:4a:bc:be:2f:8d:a4:c9:d2:57:6d:21:09:f2:3b:
91:da:8c:35:e0:2d:25:0e:58:05:7d:8e:50:0b:46:49:77:fc:
e9:6e:91:cf:0e:a0:a0:42:b2:30:93:4e:0d:f2:75:19:20:72:
64:bd:fd:10:cb:4f:a6:71:51:8e:86:3c:78:27:34:92:31:06:
59:f0:3b:d0:71:82:99:1a:21:c6:c9:0a:72:0f:a7:9d:d8:11:
3c:66:cc:53:0e:2d:ce:7d:87:29:7f:71:89:82:e6:bb:2e:d3:
e8:9f:cf:da:33:19:7c:49:44:86:d5:24:42:97:fb:59:29:43:
14:4d:9d:13:f7:ec:c6:e8:69:97:3c:6c:c4:9c:85:c3:48:be:
ca:56:39:1d:b3:61:7c:78:35:cd:89:30:af:d0:36:9c:91:d2:
55:61:65:ac:d8:99:fa:6d:e5:20:9a:c0:8e:48:07:bd:9e:b0:
ea:71:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:40 2025 by rpki-client