Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pspAmDvvfnaFVN2SukKAV3OP35I.roa
File: pspAmDvvfnaFVN2SukKAV3OP35I.roa (raw, json)
Hash identifier: 9Kke/xnYrIaUFSyukIb31ARGn+aX33WCEijTSo/w0L4=
Subject key identifier: A6:CA:40:98:3B:EF:7E:76:85:54:DD:92:BA:42:80:57:73:8F:DF:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187917B2E4E3F94DA4E4D4067B5CA709245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pspAmDvvfnaFVN2SukKAV3OP35I.roa
Signing time: Mon 17 Apr 2023 23:09:41 +0000
ROA not before: Mon 17 Apr 2023 23:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:91:7b:2e:4e:3f:94:da:4e:4d:40:67:b5:ca:70:92:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 23:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ca40983bef7e768554dd92ba428057738fdf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:54:d6:f2:ed:7d:58:3d:30:0f:ae:14:ca:
2b:4b:41:e4:82:f4:ac:d2:c3:55:f1:91:9f:58:08:
7c:a3:d5:46:74:2f:8d:82:18:4c:6d:d5:65:84:94:
e6:15:2e:c4:50:ea:7b:09:10:94:f2:d7:5b:b8:37:
8e:0b:32:58:47:0f:db:fc:97:0f:e2:3f:6f:9e:b0:
4f:4f:c8:9f:28:bc:63:c9:fb:5e:de:d6:5d:0f:14:
89:68:5d:47:81:28:d9:94:8e:b2:a0:b8:71:37:92:
1a:ae:95:da:3e:88:ea:79:b3:6d:e9:ea:dc:9d:41:
e8:6a:b8:09:68:e5:e3:fb:a8:53:92:9e:c4:bf:92:
ec:07:7c:1c:3e:cd:6a:45:8f:51:30:5d:20:18:3e:
aa:ea:66:68:aa:1f:f1:f4:41:76:7f:b9:28:cc:8a:
74:b8:30:a7:d1:3a:c5:38:4b:55:af:cb:e4:b6:33:
53:17:13:f3:2e:2b:6f:85:1b:8f:f5:6f:d0:31:0d:
f5:50:2f:8d:62:f3:46:8c:74:96:77:90:81:0c:0f:
7b:72:d6:b0:0c:cd:e9:44:8e:60:bc:d7:d4:58:d5:
43:e9:b7:a0:bb:37:3b:09:1b:65:93:dc:d0:65:60:
3d:f5:b1:92:1f:9f:40:69:a1:06:1a:f8:1b:f3:6d:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:40:98:3B:EF:7E:76:85:54:DD:92:BA:42:80:57:73:8F:DF:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pspAmDvvfnaFVN2SukKAV3OP35I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:92:50:49:77:a0:6f:fb:53:11:d4:cc:98:1b:db:45:28:51:
8e:32:d5:7e:21:20:b6:49:e2:ad:01:fe:8b:4f:64:e0:7c:dc:
14:79:ae:5b:ae:f6:67:20:43:2d:18:64:43:e8:bb:77:c5:f7:
03:51:06:30:19:8b:35:a1:2b:e9:22:4f:0c:9e:74:ad:22:5f:
ff:91:83:71:af:1b:b3:55:03:ed:63:e2:12:8c:d3:7d:81:20:
df:59:e5:f2:18:d0:a6:d1:4f:a9:8d:a1:98:0b:bf:9f:d6:19:
d9:78:78:0d:9c:81:75:77:99:cd:98:50:20:b8:24:a5:0d:6e:
a6:c9:43:b8:c5:b6:b5:1d:b2:23:1a:1b:d0:97:87:b0:58:8f:
88:33:7e:93:7f:64:07:77:65:37:9e:52:25:8f:8a:c2:a7:f1:
fb:1b:58:08:05:21:a8:54:38:32:64:48:a3:74:e6:58:fd:85:
8e:8f:56:00:e9:be:b1:ae:c5:89:63:46:45:18:d6:58:ff:4e:
4f:14:1c:e0:8a:46:6c:74:8d:ae:e1:ae:5d:77:d5:02:32:57:
25:7b:38:44:7f:36:6f:0f:fd:50:0e:62:84:59:34:45:b8:a9:
a6:8c:b3:20:11:e4:7d:91:91:bf:7a:75:57:7a:a5:cf:8b:02:
fb:db:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:49:06 2025 by rpki-client