Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pXekPUOkYKBzQ4Cv9bU0fVBmXqs.roa
File: pXekPUOkYKBzQ4Cv9bU0fVBmXqs.roa (raw, json)
Hash identifier: JTeudg5KkBMp9BqQt+eXstIsTMfe8Bqd3Q6uPITU3kc=
Subject key identifier: A5:77:A4:3D:43:A4:60:A0:73:43:80:AF:F5:B5:34:7D:50:66:5E:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188326EAE28EA16CDD7738B8B1544D0D08B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pXekPUOkYKBzQ4Cv9bU0fVBmXqs.roa
Signing time: Fri 19 May 2023 05:14:54 +0000
ROA not before: Fri 19 May 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:6e:ae:28:ea:16:cd:d7:73:8b:8b:15:44:d0:d0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a577a43d43a460a0734380aff5b5347d50665eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:1d:87:3b:02:00:15:34:47:c1:41:ed:b6:
43:75:9f:a6:6c:29:44:65:00:07:f2:d7:4b:4a:3a:
68:51:25:18:71:07:23:05:32:72:af:57:46:53:b4:
d0:2f:89:38:df:03:03:44:1a:4b:0f:a0:ee:6e:7e:
50:de:70:d5:fb:04:0d:02:19:95:5a:33:ce:63:c8:
1a:e6:bb:81:99:88:5c:67:77:aa:b4:7e:a6:44:3a:
7c:e9:37:1d:7e:3d:06:41:a2:cb:37:04:a0:a8:d0:
cb:b4:59:4c:4b:3f:1c:63:32:aa:98:3e:45:c2:ce:
93:fa:0a:bf:c3:54:b6:d1:e4:25:6a:4d:ad:09:01:
b0:5e:d7:fa:a1:b2:5b:00:80:05:fe:77:7a:bf:9f:
6b:9b:d4:c9:c6:90:9d:43:dd:8a:ef:d6:d0:23:b7:
f2:5c:59:ca:91:3a:d4:50:03:4f:5d:7d:4b:c0:8f:
0b:2a:d8:0a:54:1d:7e:23:18:30:12:74:26:13:92:
70:46:14:8d:f6:17:13:72:8b:e6:25:28:10:81:bc:
84:8f:39:20:7d:d8:4b:32:97:f9:65:75:a4:ba:b8:
02:a7:97:00:5f:29:2f:8b:33:cf:b1:23:fe:c7:7f:
64:a9:a9:18:3e:99:31:9b:f4:04:bd:c3:25:b8:ae:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:77:A4:3D:43:A4:60:A0:73:43:80:AF:F5:B5:34:7D:50:66:5E:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pXekPUOkYKBzQ4Cv9bU0fVBmXqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:ae:09:20:e4:78:b9:5e:b6:df:23:e9:42:0d:9e:a5:58:be:
b6:d3:54:64:7f:9f:e6:66:95:9d:da:c1:c1:9d:f8:72:1c:57:
cb:af:30:72:1b:68:1c:89:46:dc:fb:f1:d7:2e:a7:69:0f:4c:
ca:40:50:2a:59:6f:e8:fb:52:42:33:53:df:ed:d8:d7:07:e4:
b5:95:df:aa:cc:22:f9:4d:f2:d9:4c:c1:48:41:07:07:98:99:
04:f7:d1:df:1d:ed:90:87:a9:57:46:94:7c:15:2c:c7:99:e0:
70:40:7f:39:e7:b6:dd:16:de:de:ea:29:65:f5:ee:7d:b3:e4:
46:bc:7b:08:b5:fc:dc:07:01:8e:48:7e:e2:66:d6:5b:e6:2c:
b5:cb:c1:2a:66:32:6d:fb:44:af:e2:d7:95:b3:c7:6e:06:ca:
21:ab:a8:0a:99:97:03:76:72:2c:5b:62:90:bc:ed:7a:ad:aa:
d8:f9:8a:06:79:d1:a0:99:15:ec:1a:2d:13:8a:83:0b:89:58:
de:a9:10:c8:ed:5d:74:e1:88:85:43:98:3d:7e:38:38:b0:e8:
fd:93:0c:04:ec:4d:69:76:e3:5a:ce:47:58:8a:ea:15:0a:26:
e6:d4:1d:5c:b6:47:f0:65:36:97:44:08:82:00:aa:08:47:38:
a1:e2:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:14:35 2025 by rpki-client