Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PbwXwof930jUsHwJV5vj31jsW-8.roa
File: PbwXwof930jUsHwJV5vj31jsW-8.roa (raw, json)
Hash identifier: w/lKeYkUhu79b1vqL1zBk3tMDliqa1EgfkzZaJLYjmw=
Subject key identifier: 3D:BC:17:C2:87:FD:DF:48:D4:B0:7C:09:57:9B:E3:DF:58:EC:5B:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BDE44BFB225201799B6931B7793C44FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PbwXwof930jUsHwJV5vj31jsW-8.roa
Signing time: Tue 07 Mar 2023 21:05:00 +0000
ROA not before: Tue 07 Mar 2023 21:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:bde3:9c84/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:e4:4b:fb:22:52:01:79:9b:69:31:b7:79:3c:44:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 21:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dbc17c287fddf48d4b07c09579be3df58ec5bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:3f:28:14:c5:ed:d4:2f:bf:96:4e:33:cd:
2c:0d:f3:e7:b4:bd:ac:79:c3:27:54:20:38:e5:d4:
f0:33:9b:d0:18:d5:f3:b8:4f:cc:93:46:37:f6:12:
29:0a:c2:20:99:c7:ee:1d:6a:f4:df:75:f2:a5:4d:
72:1a:99:fe:1a:44:cf:17:2d:c4:ab:47:e0:ce:55:
7b:19:82:82:68:56:16:5a:dc:21:59:d3:5b:f8:7e:
81:07:34:b5:a0:ea:4a:b9:c1:f4:67:92:de:eb:ec:
41:0e:7e:8e:77:6d:21:75:58:06:f1:ee:04:a5:87:
7b:c4:ec:f4:78:ee:c2:11:b9:2a:6b:86:a0:f1:5b:
f6:e4:d7:be:d5:13:fe:05:c5:df:33:e1:85:f4:40:
ca:21:d2:f3:0b:25:1c:31:8b:4c:dd:86:44:22:63:
35:e1:85:e1:04:78:76:c5:09:b2:94:4f:0a:d7:41:
fa:83:77:86:f8:7e:d6:53:2e:35:02:d9:e2:14:d0:
8c:e5:e6:ca:e0:fc:40:3d:15:79:03:df:42:e1:ee:
2c:44:dd:c3:00:65:c6:80:ac:2f:47:09:77:58:b3:
03:46:d6:d0:67:8e:4c:98:12:1a:a1:3b:6f:11:c5:
4b:20:1c:22:39:d1:fa:91:ce:d2:83:c4:c0:55:11:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BC:17:C2:87:FD:DF:48:D4:B0:7C:09:57:9B:E3:DF:58:EC:5B:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PbwXwof930jUsHwJV5vj31jsW-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:45:71:c0:1a:2a:2d:4f:48:53:11:fe:01:34:59:27:10:ec:
29:44:0e:39:ba:b3:6d:34:8c:3b:0c:98:86:72:34:6a:86:28:
3d:80:ed:9b:38:3d:ee:df:9e:17:d1:8e:89:d1:3d:f4:59:64:
3b:ed:13:09:20:b1:3a:95:d1:db:16:38:2e:54:2f:c3:bb:9a:
b4:34:e2:17:3e:d4:19:f4:fb:80:7c:95:53:d0:15:3e:a7:13:
98:ef:a5:04:d3:12:f3:99:6a:6f:63:d5:d9:41:54:62:bd:35:
09:c0:b7:7f:05:3b:3d:af:a3:f9:3b:39:5c:c3:cb:ce:3e:1a:
5f:69:6b:46:3a:25:98:b0:51:0d:bb:87:08:4c:77:f0:6f:dd:
92:c7:96:2c:53:56:d3:19:e4:86:8e:f6:a4:3a:7c:12:e9:c4:
e7:98:7d:21:b8:73:9a:40:03:6a:cf:f8:36:86:8a:2e:c5:20:
be:a1:eb:d2:fd:b7:68:03:82:2a:a3:ae:39:39:13:f0:db:71:
45:ce:20:45:f9:28:ef:9d:3c:62:14:f9:11:66:44:a2:b3:5f:
e6:68:97:93:de:30:78:3a:1a:85:e1:82:fe:0e:5f:e5:04:28:
df:86:bd:54:60:75:b6:c3:07:0f:27:68:fc:c9:8c:47:f7:e5:
a7:b6:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:24:04 2025 by rpki-client