Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcIZUV89eaxcGbusu0nAbThhpDs.roa
File: pcIZUV89eaxcGbusu0nAbThhpDs.roa (raw, json)
Hash identifier: 76RkBFifkyN23N54sHSySx+Nq8pZuy2p3DkdTI+9/Pg=
Subject key identifier: A5:C2:19:51:5F:3D:79:AC:5C:19:BB:AC:BB:49:C0:6D:38:61:A4:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F9A3425
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcIZUV89eaxcGbusu0nAbThhpDs.roa
Signing time: Sat 25 Jun 2022 03:11:43 +0000
ROA not before: Sat 25 Jun 2022 03:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409247781 (0x8f9a3425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 25 03:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5c219515f3d79ac5c19bbacbb49c06d3861a43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:7d:db:65:f7:c3:06:16:38:7f:4e:67:48:
93:f8:77:fe:b9:d5:65:e1:1b:f2:43:dd:f8:45:44:
1a:6c:41:9e:fd:54:06:8d:13:1a:6e:ec:de:3b:ab:
0b:00:41:1c:ff:81:f7:13:e0:6c:9e:f9:52:10:6f:
7a:b9:4d:0c:b6:7d:bb:ee:41:29:e3:12:51:9e:5e:
e6:e9:8d:81:cf:ae:9c:19:54:81:bb:44:bf:22:d5:
12:65:1d:c2:7a:c3:6b:58:3f:2e:20:d2:13:43:10:
b1:f3:ad:53:d9:49:d4:46:f1:ac:36:95:28:45:e7:
80:15:a5:e3:c9:e2:05:2d:79:dd:d0:91:66:dd:75:
fd:55:3a:5f:b9:40:d5:b8:8d:e2:6d:69:93:de:4d:
bb:e8:4b:26:09:eb:ba:43:99:88:a0:d9:20:af:3d:
30:e1:31:33:fc:21:ab:61:08:11:31:98:1d:70:43:
c2:d8:c9:e0:45:1d:8a:56:fc:7f:25:4e:2f:94:8c:
46:41:42:6d:07:39:be:9c:21:59:4b:35:0a:4c:c4:
c8:75:83:16:49:94:59:6e:0f:0d:c3:10:38:44:eb:
7d:d4:ea:dc:59:67:c6:7a:cb:0d:f4:f3:3f:f4:eb:
2b:73:19:e6:74:19:d9:b0:93:e0:44:f9:02:0b:29:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:19:51:5F:3D:79:AC:5C:19:BB:AC:BB:49:C0:6D:38:61:A4:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcIZUV89eaxcGbusu0nAbThhpDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:85:9c:3d:f1:21:6a:2f:4f:2e:97:69:ef:df:e7:97:5b:ac:
f1:51:bd:48:ae:70:43:b3:af:c9:09:75:e6:99:6a:40:0a:66:
e5:cc:78:6c:10:bf:f0:e3:80:d0:80:f7:4f:38:ef:e1:40:fb:
95:2d:a8:27:0f:ea:8f:df:68:85:10:c2:3c:5e:2e:cc:fa:d2:
bf:76:b3:60:4a:4a:84:b0:a3:83:a2:92:66:74:38:f6:8d:54:
9f:4d:52:a1:b5:9e:cb:f4:8a:bc:21:86:f4:ed:81:46:f2:6c:
f2:05:b7:ce:41:9e:db:14:1e:4d:72:79:b5:54:bf:8f:fe:8e:
16:0a:d7:db:fa:3a:79:c0:9b:51:d2:a5:55:b6:a5:e0:fb:d7:
bb:95:36:41:c7:25:c7:92:6f:78:52:9d:0d:db:e7:65:ac:c6:
0b:48:56:ba:33:91:1e:6c:7b:4e:be:99:16:15:9d:79:ba:3a:
be:c7:1b:85:0f:db:7e:3d:52:23:36:49:82:5f:21:66:08:7c:
ec:0e:f6:ad:14:7d:fb:6c:d2:e0:68:be:43:19:b1:64:b4:02:
c7:4f:cb:4c:ab:ec:7d:a9:53:b9:b2:98:62:fc:f9:12:9e:1b:
4f:39:92:07:c5:18:39:4f:6b:b2:43:91:24:e0:59:dc:59:ec:
c4:43:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:42:44 2025 by rpki-client