Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBiqUgC2p0f1aLgw_mpHrMZBFxg.roa
File: pBiqUgC2p0f1aLgw_mpHrMZBFxg.roa (raw, json)
Hash identifier: z1LITGxyq7lmOtlZs8QDr8G44DWyZ5GyYr/MFiaDVMg=
Subject key identifier: A4:18:AA:52:00:B6:A7:47:F5:68:B8:30:FE:6A:47:AC:C6:41:17:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C6102CC4089DB3C23B07D0A48D7ABE52
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBiqUgC2p0f1aLgw_mpHrMZBFxg.roa
Signing time: Fri 28 Apr 2023 04:12:41 +0000
ROA not before: Fri 28 Apr 2023 04:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:10:2c:c4:08:9d:b3:c2:3b:07:d0:a4:8d:7a:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 04:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a418aa5200b6a747f568b830fe6a47acc6411718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:83:12:74:b9:28:0d:74:e4:e1:16:75:92:
94:c7:bb:2b:e7:49:44:05:df:30:8b:48:67:52:96:
a9:2a:e3:91:9d:62:62:30:93:aa:48:71:c2:2c:ec:
cc:04:d9:b1:4a:11:50:e0:9e:34:31:d2:ae:5a:04:
c7:b0:81:14:f7:62:a2:00:5d:31:52:46:7a:7f:f1:
62:03:fd:42:9d:9b:3d:0b:10:41:60:a5:ea:af:e7:
ab:26:da:24:80:72:2b:e5:4d:f2:03:25:e1:d7:66:
52:c7:8a:bc:ce:02:c9:a4:c8:4c:12:42:9f:8b:83:
7a:8b:39:9f:46:12:67:32:d2:3b:f6:b8:03:ba:49:
e6:92:71:29:c4:76:a6:ca:12:29:16:2e:8e:7a:10:
5d:6c:d3:1a:dc:41:49:5b:be:8f:44:d6:22:14:81:
54:7d:6b:59:9a:43:19:5d:22:6e:c4:4c:09:65:28:
47:b7:7a:42:fa:11:87:d0:46:09:bd:bf:7a:35:fc:
da:c6:be:7d:08:ea:c1:4d:7b:84:6f:d6:b1:03:ae:
c1:d9:7b:c5:c6:57:02:fa:96:ce:10:22:cd:63:1a:
f6:fd:5b:76:10:f6:8f:b8:5a:c2:c3:f6:d1:ec:94:
f8:a6:a3:44:58:1f:1b:1b:c3:d8:a5:f3:cd:fd:2d:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:AA:52:00:B6:A7:47:F5:68:B8:30:FE:6A:47:AC:C6:41:17:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBiqUgC2p0f1aLgw_mpHrMZBFxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:42:aa:6d:51:84:f8:79:f2:09:18:bc:32:d4:70:43:54:91:
58:1c:c3:3b:0e:21:e7:d4:83:df:91:52:55:08:25:96:96:0a:
97:d3:8c:63:7d:0a:af:5f:85:0d:23:ba:4c:99:52:21:bf:5f:
4b:0a:22:63:b0:e2:ff:7d:1a:07:fc:eb:ab:ff:d1:8c:56:0c:
24:69:6e:2d:a4:54:4a:a6:14:d9:f1:04:8a:c8:c2:23:78:0d:
8f:a9:f9:e1:e1:d7:b2:35:35:68:96:dd:32:c2:82:35:9d:21:
4b:4f:c1:62:bb:be:87:76:96:a3:89:92:88:07:f5:6d:76:87:
13:91:e2:99:65:3e:5e:76:c3:c4:e3:ba:ee:a2:4d:75:e4:63:
7e:2c:1d:f2:c2:35:4b:e8:9e:10:b8:fd:a7:ce:64:a4:b5:c0:
43:63:60:43:4b:cd:f7:35:ba:94:b5:fb:6b:05:c3:a6:25:19:
2e:dd:47:84:bb:82:3e:d6:b0:3e:53:45:38:c1:5e:0b:a2:7d:
30:58:5f:e1:9d:d5:bb:a9:52:39:6c:19:04:13:87:1e:84:8b:
cc:85:e7:c0:34:1c:f4:3c:ef:95:7c:0b:1b:39:e1:a5:1e:4d:
a9:15:52:46:20:20:3a:6a:c2:45:e3:6e:74:d1:49:0b:0f:92:
86:06:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:52 2025 by rpki-client