Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PcfDbI3wkcS0ADJC6OxuD5VNEVM.roa
File: PcfDbI3wkcS0ADJC6OxuD5VNEVM.roa (raw, json)
Hash identifier: S0dYYKDtkGNvxlnpfPpTh0h0UB/9RMda4FF2OgAwzds=
Subject key identifier: 3D:C7:C3:6C:8D:F0:91:C4:B4:00:32:42:E8:EC:6E:0F:95:4D:11:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188402631B2F35B59327D3B0045A3AD6EDE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PcfDbI3wkcS0ADJC6OxuD5VNEVM.roa
Signing time: Sun 21 May 2023 21:10:24 +0000
ROA not before: Sun 21 May 2023 21:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:40:26:31:b2:f3:5b:59:32:7d:3b:00:45:a3:ad:6e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 21:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc7c36c8df091c4b4003242e8ec6e0f954d1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:47:5b:40:6f:d1:5f:2f:a7:49:24:7a:9d:
c3:c3:ef:22:a7:93:9c:c6:7f:72:29:82:42:1f:93:
35:d0:b2:0e:d1:e0:e1:04:be:6b:20:07:89:d9:e0:
b2:69:30:bc:5d:0b:6c:54:08:51:9d:21:84:79:f1:
e4:6b:5d:bf:4d:25:45:0e:b3:68:a5:20:a7:9b:3f:
6a:71:a3:06:48:b7:e9:8b:1a:2e:0b:9a:d4:8e:8d:
a1:fa:2e:68:b8:39:fc:ad:57:b4:3b:41:f3:12:31:
9c:cc:09:41:4b:e6:e1:50:3f:8d:31:a5:b1:bc:56:
c4:df:ca:31:47:c4:e1:81:e0:44:98:c9:b7:02:cc:
e8:83:95:75:44:81:b6:8b:6a:65:83:1b:76:00:61:
fc:64:df:8d:15:44:df:fa:94:b7:c3:49:b8:0d:97:
41:da:3c:3d:00:14:20:e4:91:88:de:61:04:8e:6c:
87:76:ae:9e:51:55:fd:17:f1:01:d6:fd:0b:62:f9:
d1:e9:39:55:5a:55:92:47:32:07:e9:22:91:07:11:
38:e1:59:b3:01:bf:2b:34:d5:1c:88:52:d0:26:5c:
b6:ce:ea:fc:16:c2:6f:30:9e:b2:b6:35:73:23:7a:
ee:26:38:c9:05:fe:de:86:32:54:ae:84:9f:88:fe:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:C3:6C:8D:F0:91:C4:B4:00:32:42:E8:EC:6E:0F:95:4D:11:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PcfDbI3wkcS0ADJC6OxuD5VNEVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:2c:1b:2f:7f:f5:50:7c:1a:d5:7e:a1:05:f9:f8:01:b9:99:
99:76:d1:d8:46:f0:03:7a:ee:49:fe:0c:36:dd:33:d6:f6:a4:
87:78:f0:cc:d9:14:e9:1b:d0:92:e3:3b:8c:6c:ff:6f:e4:e9:
70:ae:08:ed:04:80:50:98:fa:e3:bd:f9:f1:ad:25:6d:bc:54:
fa:0c:23:15:2c:b2:ee:2b:d0:b7:ed:aa:bf:14:24:a0:ee:c8:
c8:de:88:b7:b8:5e:90:a4:c3:9f:1e:38:7b:9e:35:ad:a9:e6:
e6:3c:b9:53:ec:f6:97:92:1b:1f:9b:f6:29:11:b8:e8:26:66:
70:af:3e:cd:1b:d3:06:6d:62:9a:3d:5f:ea:1c:f1:7c:5a:81:
8d:ba:3d:a4:d8:e1:7e:22:5a:ab:c9:38:a2:ca:48:a2:7f:83:
51:f0:67:bf:87:19:7d:43:6f:d7:dc:ad:74:ac:a6:e8:e5:4e:
68:b8:90:4a:e9:22:40:36:8c:46:11:50:e6:4a:6f:1f:be:d6:
41:d8:ba:0e:dc:64:cc:1e:df:49:40:1f:eb:a8:6e:85:4e:35:
e4:36:ec:d5:20:a4:c5:20:15:76:4b:f3:2e:bb:ef:29:e2:d6:
1f:05:57:02:8d:e0:32:5a:8e:26:00:24:13:be:09:07:16:80:
56:69:4a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:14 2025 by rpki-client