Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjUXr9NxsInW2HBAylWi6S6A0e4.roa
File: pjUXr9NxsInW2HBAylWi6S6A0e4.roa (raw, json)
Hash identifier: 95eGx/8Z7EE9xKnkaX4+pujG0arNvTvpsgcBFIRqWJg=
Subject key identifier: A6:35:17:AF:D3:71:B0:89:D6:D8:70:40:CA:55:A2:E9:2E:80:D1:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018697F02F288F7B87E5EDC0229F1E29023A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjUXr9NxsInW2HBAylWi6S6A0e4.roa
Signing time: Tue 28 Feb 2023 12:12:25 +0000
ROA not before: Tue 28 Feb 2023 12:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:f0:2f:28:8f:7b:87:e5:ed:c0:22:9f:1e:29:02:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 12:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a63517afd371b089d6d87040ca55a2e92e80d1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:98:71:50:84:73:57:95:29:44:e3:c2:b3:
f4:fc:95:0d:67:5c:1a:b1:6c:4e:30:13:a9:73:2b:
49:a2:57:a7:45:24:b6:30:ba:35:df:e7:7e:59:56:
5a:7e:8c:10:9e:8a:d0:fc:cc:d0:62:e5:c9:99:96:
32:fc:2d:11:48:a6:35:5f:2d:ba:89:b3:2c:a2:c2:
ca:a3:1d:d7:cd:55:ab:92:bd:ba:cf:ac:9c:44:73:
2f:f0:4d:57:15:af:8c:76:a8:c8:5d:b8:dc:ef:f7:
6b:d5:f5:5f:24:d1:d1:51:3b:88:22:d1:a2:88:82:
26:73:b9:22:a0:37:b7:4d:05:0b:1c:ad:cb:05:53:
bf:8f:2c:3f:0e:e3:f7:b8:a7:fc:f0:4b:f3:f0:68:
84:a2:f5:2c:22:59:ad:c9:1b:fc:d6:43:74:26:0c:
a3:2a:a7:f6:87:4c:eb:36:6f:6c:56:6d:96:56:fb:
29:36:98:e8:42:48:96:4f:e8:45:34:e0:2b:6a:74:
e2:df:b4:ee:5e:0f:eb:25:e9:58:d3:88:8a:e5:c1:
89:1d:51:06:95:24:0d:fb:63:35:27:3b:70:f2:ca:
c1:ba:0a:ed:bf:68:86:46:57:a1:02:ed:08:d9:dd:
8b:40:b3:fa:d6:43:de:aa:67:6a:89:d0:ee:31:a2:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:17:AF:D3:71:B0:89:D6:D8:70:40:CA:55:A2:E9:2E:80:D1:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjUXr9NxsInW2HBAylWi6S6A0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c9:1b:11:8a:eb:13:43:20:88:b8:09:27:b6:f2:ef:7f:bc:
1b:bb:fc:e7:34:26:ff:3d:37:b8:57:d5:44:22:fb:42:72:34:
44:8a:f2:fe:77:c7:6f:44:49:3f:89:98:5f:10:2b:d2:67:9b:
f6:91:21:bd:3e:3a:bb:5c:c5:0e:b7:fb:d4:d5:02:b8:92:39:
dc:5a:39:d1:6d:0a:98:76:b0:98:98:61:ec:95:3f:c6:d8:78:
d9:7e:56:b8:d9:81:1d:0e:34:61:02:6b:65:89:04:f8:b9:6e:
a7:a3:0b:0a:bd:77:78:40:5d:ea:23:03:96:01:bd:75:47:3f:
f4:3c:ab:95:2b:2a:e1:4f:2f:a4:66:62:2b:3c:48:69:ab:38:
5a:10:f4:d2:4d:c9:d8:58:82:79:58:5c:5d:6e:be:05:54:87:
b1:c3:ec:aa:93:70:57:67:c8:92:4e:c1:ea:0e:cf:cd:e7:78:
bc:3a:ad:27:aa:ef:52:5b:b9:ed:7d:f2:13:d7:3d:f2:e2:e1:
90:74:cf:2c:5e:0a:f3:e9:2b:f6:6e:bf:3e:5d:56:47:fd:36:
c3:a7:5f:e4:1f:e0:2e:a3:93:15:f5:03:40:2c:77:f3:01:55:
69:9b:df:cf:a0:43:6f:89:f3:63:6d:4f:db:1a:fe:48:09:85:
2f:1e:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:16 2025 by rpki-client