Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pfSSqpJv7hPxN3JhslVYoaIyetA.roa
File: pfSSqpJv7hPxN3JhslVYoaIyetA.roa (raw, json)
Hash identifier: RttKYxB+fXNBj/xjIYaHmDuhzFkIxeJ/6dRauEGUXHQ=
Subject key identifier: A5:F4:92:AA:92:6F:EE:13:F1:37:72:61:B2:55:58:A1:A2:32:7A:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018988E35346FB3C7E22CC81FB5C99BAFC30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pfSSqpJv7hPxN3JhslVYoaIyetA.roa
Signing time: Mon 24 Jul 2023 17:12:26 +0000
ROA not before: Mon 24 Jul 2023 17:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:e3:53:46:fb:3c:7e:22:cc:81:fb:5c:99:ba:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 17:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5f492aa926fee13f1377261b25558a1a2327ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:da:12:f0:d1:d8:56:d9:94:5f:ec:62:f8:
72:c2:54:e2:b0:62:c6:70:47:c8:fa:0e:2f:68:ac:
63:46:12:ba:3b:84:3d:ec:2a:10:f0:07:a5:e7:9c:
30:d0:3c:c2:ff:7b:26:a1:12:d0:b6:3d:7a:94:b5:
05:8c:7a:be:5d:61:b6:5b:a1:01:0f:04:1c:62:7b:
ca:59:f4:3c:d6:e7:a6:92:9d:45:72:30:9f:05:03:
c4:c0:6c:c4:d3:fa:71:b8:65:b7:3f:6d:c4:af:e0:
48:b4:1a:71:03:61:b6:17:a8:ca:96:3b:c9:14:07:
83:3e:56:f2:82:ff:98:aa:55:28:6b:12:da:ff:54:
13:ee:fb:bd:6e:04:5b:55:34:b7:6a:13:35:9d:cf:
7d:52:ea:76:d3:51:1c:b0:70:0b:ca:89:2d:1b:86:
bd:ee:ca:8d:bc:ca:0d:7d:72:1e:88:7b:a5:0c:47:
ad:33:48:64:36:d0:c2:e1:6f:c1:8c:a7:8c:e4:d4:
a6:14:8a:23:7b:47:48:92:15:f0:6a:6d:bf:2f:32:
af:39:0a:b9:11:75:53:73:cd:bf:35:d4:e8:b4:3b:
c4:4b:7a:59:26:7d:c0:75:cd:71:eb:b1:d1:7b:1d:
c5:ab:96:7f:69:db:ad:75:40:cf:1f:ec:03:fa:f9:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:92:AA:92:6F:EE:13:F1:37:72:61:B2:55:58:A1:A2:32:7A:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pfSSqpJv7hPxN3JhslVYoaIyetA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:2d:dc:f5:90:b5:6d:65:1d:83:47:05:60:f9:31:2e:e0:b5:
48:4c:2d:28:9a:f2:28:11:fd:5b:a9:c2:c5:95:7a:30:0c:fb:
dd:dc:30:dc:8b:fd:9e:db:a8:8a:32:8d:44:06:df:5f:19:3f:
5e:91:cf:3f:03:05:fc:83:79:09:f1:52:1e:63:05:b2:07:a5:
59:ae:d1:92:8d:a6:b5:ea:7e:94:0e:ed:6c:f8:9c:63:b4:64:
e5:04:24:34:f9:16:4f:9b:90:9c:5c:a1:03:5a:8d:e2:65:04:
b2:b4:70:cb:a5:19:5b:a8:c4:8b:43:82:4b:9e:de:af:54:a5:
9e:0c:84:cf:e7:11:3a:ca:b4:6d:1e:77:41:09:1d:08:74:91:
b7:8f:f0:3b:9e:5d:c6:a0:72:82:3f:a5:e6:a2:ee:77:4d:0d:
35:aa:98:21:1b:06:2d:42:4e:a2:dc:ba:eb:05:47:e6:d0:df:
64:86:a4:86:8c:4e:72:7d:3a:f0:38:83:82:21:1d:05:bd:32:
51:70:98:fb:e5:24:2d:10:b7:04:df:1b:e5:ca:3b:ba:cb:ae:
57:40:be:15:42:b8:80:72:b5:b3:04:21:02:72:06:df:08:94:
23:3b:82:13:54:75:a9:11:4e:3d:56:ed:fb:ce:03:b2:28:40:
4a:05:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:37:38 2025 by rpki-client