Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcGwT_5ayKmj5EHYFj7lHb9P5h4.roa
File: pcGwT_5ayKmj5EHYFj7lHb9P5h4.roa (raw, json)
Hash identifier: 9XO/yRe0SOV80ToWYWPjpE/w4V1vUgWGGcTdw75CGHw=
Subject key identifier: A5:C1:B0:4F:FE:5A:C8:A9:A3:E4:41:D8:16:3E:E5:1D:BF:4F:E6:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A28C786C1F6F55457257EE7BF9B96ACD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcGwT_5ayKmj5EHYFj7lHb9P5h4.roa
Signing time: Thu 24 Aug 2023 18:21:19 +0000
ROA not before: Thu 24 Aug 2023 18:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:c7:86:c1:f6:f5:54:57:25:7e:e7:bf:9b:96:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 18:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c1b04ffe5ac8a9a3e441d8163ee51dbf4fe61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:d9:ba:e3:88:af:84:ec:cf:f8:97:b9:12:
1d:cc:8f:02:ce:94:c5:d0:f9:aa:aa:0b:59:ad:84:
11:70:54:13:58:2c:4f:00:c2:95:51:ff:3f:3c:ca:
cf:07:f7:2e:e2:52:de:0e:c2:85:10:b1:fa:af:e2:
c4:56:85:30:8c:f8:32:86:25:b6:22:59:d0:d0:d6:
2a:3c:da:bd:81:b9:59:12:44:44:1f:fd:e3:88:9f:
93:6d:ed:cd:51:21:8b:40:4e:22:1d:b9:ce:1e:20:
79:90:12:f0:b4:c6:22:08:28:88:39:4a:b5:90:c6:
c2:b8:7c:5d:5a:9a:82:f0:da:ed:ee:da:3a:73:9d:
5e:e8:3e:71:6a:85:09:37:5d:48:08:4c:8e:cd:08:
16:0a:90:5c:18:c6:26:31:fd:02:a2:7c:9c:8d:a4:
07:6b:03:cf:8a:39:34:e9:bd:d8:3e:96:68:b1:8d:
e6:ae:b2:7b:2d:95:7f:b5:63:5b:fa:ae:36:4f:21:
44:36:90:0c:26:9b:40:5c:33:97:e2:46:8b:2a:70:
b0:aa:e9:4c:e2:8f:4d:47:87:9b:6f:a1:cb:9d:8d:
1a:87:cd:73:af:0d:aa:a4:b5:32:d5:fc:74:4c:1b:
43:95:91:ac:cb:83:ab:de:cf:a9:56:64:e0:6a:89:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:B0:4F:FE:5A:C8:A9:A3:E4:41:D8:16:3E:E5:1D:BF:4F:E6:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcGwT_5ayKmj5EHYFj7lHb9P5h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:34:91:f5:82:29:5e:8f:fa:71:43:b0:24:0a:38:c6:51:41:
a2:4a:9d:34:dc:c6:09:2f:17:1f:fb:96:b7:2f:67:25:16:1f:
d0:ab:8a:59:ef:1c:bf:fe:7f:a8:c4:80:8c:81:43:3a:f4:bc:
c4:bb:39:c4:28:f8:ea:ef:e5:b1:a8:29:2f:c3:e0:64:2d:6d:
90:c6:51:45:a2:60:78:54:61:f5:98:78:e3:09:2d:82:a3:d8:
1c:11:92:07:14:63:b4:77:61:7f:9e:38:fd:5f:33:6c:0f:3d:
77:43:a7:d1:79:4e:fa:d6:45:61:f2:54:24:b3:2a:03:d1:7e:
7c:b7:62:4c:f7:6a:59:20:3d:bd:20:ff:4b:cb:9b:92:5a:01:
68:46:20:54:37:62:c4:96:62:e9:bb:b2:90:c9:43:38:f3:01:
6b:4b:ea:b1:56:b1:54:2c:28:15:10:2d:ff:4b:ab:d2:a6:34:
6a:b5:b6:a2:49:7b:56:f9:72:67:17:1a:29:21:61:a3:3f:7d:
51:86:07:52:29:f8:f0:17:d9:27:69:af:85:ba:f7:9e:56:da:
ef:dc:e5:09:cd:76:80:88:64:2d:5b:33:6d:11:a3:42:be:b1:
db:57:4f:26:b5:87:7c:fd:d4:35:71:19:e0:61:5b:0a:b0:a4:
8c:37:90:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoox4bB9vVUVyV+57+blqzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI0MTgyMTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWMxYjA0ZmZlNWFjOGE5YTNlNDQxZDgxNjNlZTUxZGJmNGZlNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprrZuuOIr4Tsz/iXuRIdzI8CzpTF
0PmqqgtZrYQRcFQTWCxPAMKVUf8/PMrPB/cu4lLeDsKFELH6r+LEVoUwjPgyhiW2
IlnQ0NYqPNq9gblZEkREH/3jiJ+Tbe3NUSGLQE4iHbnOHiB5kBLwtMYiCCiIOUq1
kMbCuHxdWpqC8Nrt7to6c51e6D5xaoUJN11ICEyOzQgWCpBcGMYmMf0ConycjaQH
awPPijk06b3YPpZosY3mrrJ7LZV/tWNb+q42TyFENpAMJptAXDOX4kaLKnCwqulM
4o9NR4ebb6HLnY0ah81zrw2qpLUy1fx0TBtDlZGsy4Or3s+pVmTgaonUCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKXBsE/+Wsipo+RB2BY+5R2/T+YeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcGNHd1RfNWF5S21qNUVIWUZqN2xIYjlQNWg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACM0kfWCKV6P+nFDsCQK
OMZRQaJKnTTcxgkvFx/7lrcvZyUWH9CrilnvHL/+f6jEgIyBQzr0vMS7OcQo+Orv
5bGoKS/D4GQtbZDGUUWiYHhUYfWYeOMJLYKj2BwRkgcUY7R3YX+eOP1fM2wPPXdD
p9F5TvrWRWHyVCSzKgPRfny3Ykz3alkgPb0g/0vLm5JaAWhGIFQ3YsSWYum7spDJ
QzjzAWtL6rFWsVQsKBUQLf9Lq9KmNGq1tqJJe1b5cmcXGikhYaM/fVGGB1Ip+PAX
2Sdpr4W6955W2u/c5QnNdoCIZC1bM20Ro0K+sdtXTya1h3z91DVxGeBhWwqwpIw3
kE8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:12:30 2025 by rpki-client