Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsfWLuMXy3P1Z8LQ99vX2uvegDY.roa
File: PsfWLuMXy3P1Z8LQ99vX2uvegDY.roa (raw, json)
Hash identifier: sOwe1GfZ8s2t78Bg0dVShRSzeYRcNeM+egCS88K9o5w=
Subject key identifier: 3E:C7:D6:2E:E3:17:CB:73:F5:67:C2:D0:F7:DB:D7:DA:EB:DE:80:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018946CE9CA5D2356ADD096968AD10CD521A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsfWLuMXy3P1Z8LQ99vX2uvegDY.roa
Signing time: Tue 11 Jul 2023 21:14:52 +0000
ROA not before: Tue 11 Jul 2023 21:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:ce:9c:a5:d2:35:6a:dd:09:69:68:ad:10:cd:52:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 21:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ec7d62ee317cb73f567c2d0f7dbd7daebde8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:21:58:3f:23:ac:10:f0:d7:41:62:64:b0:
68:ad:9a:9c:66:99:43:2e:fb:c3:a8:3a:b2:62:0a:
9a:09:8c:33:62:31:04:82:d1:a5:2c:8d:18:c2:17:
96:19:80:3c:00:9d:2d:a4:c4:ab:d3:82:49:a9:6d:
28:3a:2b:ee:df:a8:45:ba:db:c1:df:d6:a8:32:d5:
4b:13:fd:48:fb:da:d5:92:46:96:c0:12:2a:16:ac:
81:60:53:5e:2d:7d:3d:83:1c:ee:fc:32:c9:03:ec:
06:51:07:1b:39:86:f7:b1:38:a2:8a:f6:90:35:e9:
5e:59:0a:5f:f4:8a:0e:64:bc:69:7e:c8:ab:74:b3:
2e:1c:66:9a:eb:25:bb:a1:e6:92:55:c4:ec:e0:0a:
f7:f3:05:4d:2c:4e:ae:bf:65:eb:34:9f:ab:fc:2c:
97:fc:bd:af:5d:c9:69:23:6d:c6:08:80:60:5d:3c:
7a:fa:3e:de:02:ed:84:28:2f:e3:ba:f1:ab:69:4d:
b9:11:21:74:bf:4c:05:39:0a:a9:a3:6e:d4:6f:54:
8a:9e:79:49:46:35:18:39:1f:68:14:b4:92:24:da:
bf:22:88:4b:42:be:e8:48:2e:c6:ef:2f:55:d8:8b:
7e:61:c7:5f:32:01:cf:1e:80:f9:67:3a:b7:1d:da:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:D6:2E:E3:17:CB:73:F5:67:C2:D0:F7:DB:D7:DA:EB:DE:80:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PsfWLuMXy3P1Z8LQ99vX2uvegDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:da:71:19:17:15:75:5a:1c:9a:19:31:45:cd:b9:10:93:2b:
93:e2:5e:a7:8f:52:a7:3f:08:53:9e:e8:04:eb:d6:8b:0a:51:
df:f8:23:5e:71:ec:a4:95:c9:bb:a5:6d:44:63:25:d6:73:02:
24:06:e4:6b:7d:07:7f:fc:46:5c:bd:7b:a5:52:6d:4b:60:76:
4a:47:6f:52:e5:89:7a:0a:0e:d0:58:bc:42:f6:d7:8a:4b:52:
0b:59:70:fe:6b:01:ea:1f:97:05:64:85:60:88:26:2d:9d:74:
0d:b1:2e:a8:a6:bb:46:cf:eb:af:43:f3:cb:e2:e0:df:d5:40:
1e:9e:9f:24:89:1d:6f:a9:fe:49:31:25:ea:40:a1:b7:20:17:
4a:02:99:53:5b:3e:b7:d6:17:d1:6c:81:9a:2f:ae:63:61:50:
5f:72:96:fd:67:82:67:67:17:32:9e:5a:22:c7:e1:59:35:fc:
02:4e:d3:ba:0e:b6:f1:17:02:8f:ae:83:84:e5:3c:c3:ee:64:
63:64:d1:15:65:cc:1c:99:2c:aa:a7:65:5e:5e:07:1a:dd:ec:
7e:9d:1d:50:a5:d9:fc:67:a7:d4:c0:4f:29:a9:dc:21:62:65:
48:3a:8f:37:04:dc:b3:63:ab:87:53:fe:91:b5:e4:0b:89:5e:
89:80:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:44:54 2025 by rpki-client