Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/palefgHP2C-4uFHAPfqRZdJM7tQ.roa
File: palefgHP2C-4uFHAPfqRZdJM7tQ.roa (raw, json)
Hash identifier: nWVUwPqctNjIGYE7AHH7cqQYaMSQHNbO8UX9cNB7IqA=
Subject key identifier: A5:A9:5E:7E:01:CF:D8:2F:B8:B8:51:C0:3D:FA:91:65:D2:4C:EE:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E97770B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/palefgHP2C-4uFHAPfqRZdJM7tQ.roa
Signing time: Mon 28 Feb 2022 23:07:27 +0000
ROA not before: Mon 28 Feb 2022 23:07:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855420171 (0x6e97770b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 23:07:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a95e7e01cfd82fb8b851c03dfa9165d24ceed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:af:98:17:04:e2:e5:13:b3:64:1d:cc:c9:
44:6f:d3:7a:42:f7:55:e5:e4:27:64:e7:44:4c:9c:
83:ba:b9:df:b5:60:71:0b:8c:e4:42:3e:76:51:2c:
9f:b9:4f:a7:ba:61:b5:bc:99:a7:ac:22:17:2a:ab:
02:f1:6b:02:7e:68:df:5b:b0:3e:c4:43:0e:77:9a:
b3:b6:49:a4:c4:49:90:0d:24:32:14:be:52:8c:8b:
f3:fe:4f:68:61:c3:8e:3b:f5:41:69:b6:9d:34:12:
87:a2:6e:1d:69:9d:2d:15:2b:58:01:99:ab:97:2b:
5e:b4:6b:ed:7c:be:04:54:28:1b:fc:f2:0f:ad:cb:
f3:26:15:6f:aa:c7:6f:0d:58:bc:77:a8:6e:a0:10:
5b:e0:e0:41:7d:77:b0:c3:98:3d:25:93:d2:98:de:
0a:c8:da:e9:fa:19:3a:f8:7e:9c:4a:f3:8e:89:4a:
cb:a4:d2:4f:62:2c:20:98:57:fe:65:84:f8:48:aa:
ba:1c:d5:3d:fc:f3:d7:2f:fe:68:e2:f0:8d:6c:0e:
99:b3:75:3e:23:88:3a:4a:6f:ee:09:62:d3:78:c5:
fd:50:fb:79:aa:7a:7c:65:90:e6:9c:df:06:43:2f:
06:e4:d0:68:63:3c:da:69:af:32:37:d7:a2:f1:9d:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:5E:7E:01:CF:D8:2F:B8:B8:51:C0:3D:FA:91:65:D2:4C:EE:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/palefgHP2C-4uFHAPfqRZdJM7tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:2b:66:8c:16:34:f8:55:3e:f4:26:52:c5:c5:ab:49:e9:aa:
ea:bd:4a:a1:48:fe:0b:95:d5:bf:1e:36:7b:98:50:63:8a:13:
28:65:dd:bb:7c:da:ee:1c:c1:07:81:ae:66:27:4a:47:16:4f:
0c:a7:c3:3b:dd:74:65:13:da:79:7a:a4:45:b2:76:53:ec:c1:
af:f5:40:b3:7e:8b:db:f1:9d:70:85:b9:8b:21:5e:07:35:24:
b5:ab:1c:d6:a4:3e:3a:b0:f3:06:55:81:f2:d0:92:bf:e8:4b:
ca:49:dc:6a:bd:b6:43:ec:84:a0:17:b3:90:b8:c0:36:ab:d4:
29:dc:57:dd:4e:66:aa:22:10:c3:15:17:9f:86:ca:41:0b:28:
d8:85:1f:02:55:75:57:f4:6b:fe:29:5f:41:84:93:7b:41:2f:
33:f3:b7:3d:89:86:54:ac:90:22:49:6f:b0:dc:59:2f:c6:5f:
cf:e8:5a:cd:7b:aa:83:43:89:c6:14:4a:c9:8e:20:7b:ba:30:
42:54:6f:6c:d7:2a:84:13:4c:7d:8d:bb:91:9b:74:f4:7a:e7:
0d:3e:48:35:29:e5:fa:74:25:ae:23:c5:54:fa:1d:ec:9b:da:
32:7c:99:d9:ba:9d:42:19:c5:5b:12:8d:71:75:63:89:1e:27:
8c:a1:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:40:39 2025 by rpki-client