Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_puoSGWgXuEcZN1XrkWg-QjvMbw.roa
File: _puoSGWgXuEcZN1XrkWg-QjvMbw.roa (raw, json)
Hash identifier: YWNNgEZLeidR1RUwp1JuYK7xCTiUhoUIvg3G0tJ6Tyc=
Subject key identifier: FE:9B:A8:48:65:A0:5E:E1:1C:64:DD:57:AE:45:A0:F9:08:EF:31:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854CD7137202825EC1A611458426F520EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_puoSGWgXuEcZN1XrkWg-QjvMbw.roa
Signing time: Mon 26 Dec 2022 05:10:41 +0000
ROA not before: Mon 26 Dec 2022 05:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4c:d7:13:72:02:82:5e:c1:a6:11:45:84:26:f5:20:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 05:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe9ba84865a05ee11c64dd57ae45a0f908ef31bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:1a:e3:98:2b:6e:9e:49:c7:8b:18:1d:0a:
de:40:8c:6a:c9:e9:a3:8a:5e:f5:f0:c6:ab:79:2f:
2a:eb:81:fb:77:c9:b5:b5:1b:ac:aa:f0:ac:55:2d:
ea:62:7c:b9:8c:4c:e4:2c:7f:ed:1b:ac:16:d9:f6:
88:29:db:8a:fb:4c:11:50:d3:57:a6:5d:12:f1:ac:
5a:e6:2f:ed:2c:43:4f:7f:60:b3:ea:ae:be:5f:61:
60:7f:8c:2b:8f:26:8c:52:5a:f5:c2:c0:3d:48:77:
0e:44:60:37:80:da:dd:61:e9:58:ca:85:e3:b0:46:
5a:87:38:3a:60:d2:de:ff:50:12:13:3e:28:01:29:
aa:82:ba:34:3d:0e:80:ef:27:c4:60:ea:16:49:58:
65:ba:dc:5c:01:11:44:b2:31:db:26:53:bb:68:d7:
83:38:6d:f5:bd:db:09:a0:27:8e:6e:37:a3:4e:ec:
a5:3f:5a:e2:22:72:2e:50:e3:70:4c:e6:50:8f:cf:
cb:d3:c8:27:7b:3d:53:00:ac:bf:cf:ea:d9:16:ad:
e7:93:4f:51:6a:f9:c0:3c:3c:f9:3c:2c:85:38:7a:
a7:0c:e3:4d:42:74:af:ef:38:4c:2b:2d:4d:ed:93:
85:d0:52:f1:d3:d3:be:24:f6:b8:f8:2e:da:e5:a5:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:A8:48:65:A0:5E:E1:1C:64:DD:57:AE:45:A0:F9:08:EF:31:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_puoSGWgXuEcZN1XrkWg-QjvMbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:f5:db:1c:50:ac:e7:eb:7d:d2:8f:7d:44:9d:18:c3:1b:ff:
98:5f:ea:78:63:86:3e:4e:35:0e:c0:a1:a8:cc:92:02:c5:ad:
87:49:2d:58:08:e7:3f:4e:55:f5:4a:d5:0c:74:b6:ed:c2:88:
0e:f9:60:40:cf:51:d0:09:ff:3e:75:3e:87:58:a5:19:69:06:
de:7d:13:0e:f5:d7:1c:a5:84:4e:b4:1a:ef:e8:5c:be:6e:47:
ce:1d:2d:4b:c5:fe:d4:e0:ed:1d:26:eb:bb:07:aa:4f:2c:07:
62:6b:7e:00:e4:f8:96:bd:fd:81:32:d9:9b:d9:6d:2d:31:b8:
84:7a:c7:be:ee:70:d2:9d:9e:d8:af:a9:a3:f3:93:04:fd:d9:
c4:2f:ab:fa:31:11:06:d0:06:1a:e7:73:44:c2:51:14:04:0d:
a6:88:f0:8a:b1:a7:fc:44:d8:b2:2c:fe:c1:15:c8:13:80:b9:
4a:cd:e2:61:86:7b:a1:e7:2a:88:8c:69:41:a7:f5:a3:5f:64:
f1:d6:a0:bf:75:73:be:f5:a2:37:4a:4b:a5:ae:d3:02:1c:de:
fb:16:f5:2d:6b:90:5e:40:50:09:27:7e:4c:4c:22:7b:d6:65:
01:16:fa:a1:cb:75:5d:36:2e:ac:57:89:b7:e2:98:55:44:01:
5e:47:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:28:22 2025 by rpki-client