Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pWI4QzBOXdZHFON5Gp-ZFHLQwF4.roa
File: pWI4QzBOXdZHFON5Gp-ZFHLQwF4.roa (raw, json)
Hash identifier: 6vWWtByv+gmtLmDZUjWrDwJqPXClvzUZCH5BhkywrNU=
Subject key identifier: A5:62:38:43:30:4E:5D:D6:47:14:E3:79:1A:9F:99:14:72:D0:C0:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AD79174
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pWI4QzBOXdZHFON5Gp-ZFHLQwF4.roa
Signing time: Wed 08 Jun 2022 00:11:02 +0000
ROA not before: Wed 08 Jun 2022 00:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329383284 (0x8ad79174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 00:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5623843304e5dd64714e3791a9f991472d0c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:52:e7:75:78:b9:ca:a8:18:39:88:d1:46:
81:d8:38:ae:cc:70:8a:6f:3b:34:b7:d5:87:7f:ff:
a4:d4:0c:01:1f:15:7d:bb:2b:85:30:70:31:dd:0f:
d6:0a:99:41:e6:21:de:fa:7f:42:61:c8:2d:3a:13:
fc:aa:96:65:a4:8b:e9:5c:f6:66:9c:82:9a:2f:28:
bf:03:d8:f2:f1:4d:2a:44:73:3c:c0:9d:f0:15:2f:
71:38:36:38:09:aa:9b:88:ff:f9:67:1c:9d:2c:bd:
6a:11:1d:6d:35:9d:c0:61:6d:dd:71:ba:3f:53:cb:
44:5e:18:4f:03:f0:7c:44:f3:55:20:43:f1:27:53:
36:67:9e:d6:58:54:92:c7:da:fc:e5:c3:77:df:9f:
15:4f:e1:42:c2:c1:01:60:af:66:36:d6:71:90:d7:
02:db:90:89:e8:ec:80:9d:8b:87:ea:2b:a9:d6:eb:
77:0d:bb:ab:3b:87:56:d0:2e:c5:bc:6b:04:98:2f:
fe:0e:40:18:8a:b6:f9:1c:57:64:5b:df:a9:49:9f:
db:76:48:29:87:b4:8e:99:8f:54:bd:de:4c:9a:44:
e5:5a:c5:30:ce:84:96:8d:82:c2:5e:9f:49:86:8f:
6c:d5:91:bb:5e:6f:74:7a:ba:7e:6e:c8:84:54:c3:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:38:43:30:4E:5D:D6:47:14:E3:79:1A:9F:99:14:72:D0:C0:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pWI4QzBOXdZHFON5Gp-ZFHLQwF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:bc:46:44:2d:57:1c:94:ef:ed:ce:75:05:f3:82:e2:08:12:
9b:99:dd:fd:d0:1b:95:2e:74:11:e2:f2:a1:08:50:a0:95:9c:
df:21:39:83:14:cb:bf:f5:ca:24:44:36:4f:b0:0e:3f:ac:ed:
34:84:48:8e:91:c3:71:69:14:6b:0c:4e:f6:5a:3c:c9:3b:e5:
3c:af:99:fc:af:04:55:89:d5:08:ae:a6:79:26:2a:dc:62:d4:
45:03:e7:c0:37:40:32:f2:80:09:d6:de:b6:10:19:40:30:78:
a9:43:77:a3:98:61:07:ba:da:a6:6f:f0:ce:c3:70:24:61:de:
dd:a9:11:2c:10:44:be:d9:55:58:36:f9:8c:df:37:61:cc:60:
8a:82:d3:77:b6:63:9d:ea:48:1b:00:c4:de:28:98:6d:a6:82:
1e:09:37:cc:5b:8a:22:43:b1:f2:5e:b3:b2:34:a1:de:4d:41:
a7:c7:29:97:65:e0:6b:2c:d4:19:b9:5b:21:5a:d1:9c:04:e7:
4c:16:3a:98:fd:53:ff:d3:e9:54:3d:8a:d7:ae:70:33:5b:be:
31:5e:aa:4f:b1:a4:83:40:cf:85:74:6e:cb:7b:4a:2d:98:34:
f5:5b:e5:8f:01:21:51:29:c6:f5:b4:28:1e:e2:57:b3:33:00:
46:2f:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:37 2025 by rpki-client