Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjWYRuFB1VSwsh_9bL1nG8rUj2Y.roa
File: pjWYRuFB1VSwsh_9bL1nG8rUj2Y.roa (raw, json)
Hash identifier: 1ZLRtKqHOftfjv+Bt/YTi2ofs5NmizHBX9X0oZ31rWk=
Subject key identifier: A6:35:98:46:E1:41:D5:54:B0:B2:1F:FD:6C:BD:67:1B:CA:D4:8F:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879A7F3888CE8FF8B2D1289AFE8F848DCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjWYRuFB1VSwsh_9bL1nG8rUj2Y.roa
Signing time: Wed 19 Apr 2023 17:10:41 +0000
ROA not before: Wed 19 Apr 2023 17:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:7f:38:88:ce:8f:f8:b2:d1:28:9a:fe:8f:84:8d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 17:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6359846e141d554b0b21ffd6cbd671bcad48f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:49:67:35:02:3a:75:48:67:4d:5b:a7:5d:
b7:75:17:83:9f:e3:78:13:a8:5b:dd:a8:54:6f:55:
b8:dc:9d:bb:11:19:09:3b:d8:fd:c8:d5:ea:d7:6e:
0a:5a:9b:08:cc:2d:9a:e2:69:66:89:19:b8:59:7e:
e4:24:90:43:50:f8:4b:52:9d:16:ee:5f:bb:b9:64:
79:0e:dd:42:49:c0:9e:1a:94:03:5e:85:00:61:8d:
c1:0f:f2:03:4a:76:7e:26:90:6b:c1:9d:cb:ce:16:
46:03:fa:d5:ba:8c:ae:3c:f5:fc:c4:56:00:99:a2:
55:4d:e7:7d:6f:ab:68:52:5d:90:b0:a8:64:e0:65:
5c:43:08:fc:97:f8:ce:50:ea:27:5e:b1:b4:78:f7:
5f:0b:f9:54:4e:fa:0c:e2:e8:55:54:c1:38:b5:57:
4c:21:ec:05:c8:f0:1c:d0:f2:55:57:38:43:c5:fd:
aa:10:67:73:e5:12:18:87:d9:26:a9:65:2f:b1:0f:
5b:92:8e:59:7e:cf:fd:1b:eb:21:d3:97:f9:3b:77:
e4:00:8e:79:3c:f5:13:21:52:0b:ed:70:03:21:00:
44:d1:73:20:bf:6f:e8:de:7c:ba:26:94:48:cd:c8:
02:bf:ed:b3:56:90:4d:f0:1f:8c:7c:47:a2:5a:2d:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:98:46:E1:41:D5:54:B0:B2:1F:FD:6C:BD:67:1B:CA:D4:8F:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pjWYRuFB1VSwsh_9bL1nG8rUj2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:a3:a8:71:91:09:b9:59:76:60:fa:96:ee:ba:e1:35:f7:e1:
98:04:ff:fa:7b:ec:8e:06:69:05:06:ec:03:c9:22:69:47:3a:
3d:2b:2b:91:fa:99:2f:3d:1c:42:5b:d3:78:fa:0f:4d:2f:d5:
ea:1e:55:48:31:ab:1a:9d:25:e7:1c:f9:8e:82:d4:9c:0d:b2:
52:6e:a5:54:e5:aa:52:a2:04:44:43:b2:64:21:6e:58:e9:3c:
cc:06:a3:8c:37:82:70:be:8c:6d:e5:52:31:da:68:2f:2c:c3:
8c:c6:e0:88:f4:02:85:fe:6c:4f:ab:96:95:eb:1e:6c:8f:6f:
63:d6:c8:12:f1:29:1f:6b:79:d8:8a:41:9c:b6:dc:b0:b1:ee:
ef:d8:f8:59:a4:55:f4:88:13:5a:25:58:65:a0:62:42:87:67:
64:c7:92:10:a3:fd:ed:e8:95:60:13:3a:5d:74:e7:94:d1:29:
46:2e:d6:4a:14:1c:52:7b:b9:31:b7:da:1c:c2:d4:d8:d6:6d:
e6:d7:8a:4d:33:fc:3a:d3:d0:ab:d4:e8:d6:eb:25:a2:02:f6:
1e:e0:25:6d:ab:dd:83:7c:e5:88:65:d1:b3:78:90:ca:aa:5a:
70:08:67:28:af:35:e1:2b:98:7e:c4:05:76:b8:8d:93:bd:1f:
79:aa:09:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeafziIzo/4stEomv6PhI3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE5MTcxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjM1OTg0NmUxNDFkNTU0YjBiMjFmZmQ2Y2JkNjcxYmNhZDQ4ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkClJZzUCOnVIZ01bp123dReDn+N4
E6hb3ahUb1W43J27ERkJO9j9yNXq124KWpsIzC2a4mlmiRm4WX7kJJBDUPhLUp0W
7l+7uWR5Dt1CScCeGpQDXoUAYY3BD/IDSnZ+JpBrwZ3LzhZGA/rVuoyuPPX8xFYA
maJVTed9b6toUl2QsKhk4GVcQwj8l/jOUOonXrG0ePdfC/lUTvoM4uhVVME4tVdM
IewFyPAc0PJVVzhDxf2qEGdz5RIYh9kmqWUvsQ9bko5Zfs/9G+sh05f5O3fkAI55
PPUTIVIL7XADIQBE0XMgv2/o3ny6JpRIzcgCv+2zVpBN8B+MfEeiWi06rwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKY1mEbhQdVUsLIf/Wy9ZxvK1I9mMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcGpXWVJ1RkIxVlN3c2hfOWJMMW5HOHJVajJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACKjqHGRCblZdmD6lu66
4TX34ZgE//p77I4GaQUG7APJImlHOj0rK5H6mS89HEJb03j6D00v1eoeVUgxqxqd
Jecc+Y6C1JwNslJupVTlqlKiBERDsmQhbljpPMwGo4w3gnC+jG3lUjHaaC8sw4zG
4Ij0AoX+bE+rlpXrHmyPb2PWyBLxKR9rediKQZy23LCx7u/Y+FmkVfSIE1olWGWg
YkKHZ2THkhCj/e3olWATOl1055TRKUYu1koUHFJ7uTG32hzC1NjWbebXik0z/DrT
0KvU6NbrJaIC9h7gJW2r3YN85Yhl0bN4kMqqWnAIZyivNeErmH7EBXa4jZO9H3mq
CfY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:29 2025 by rpki-client