Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pssfyglKHpOiGgzunnim9_DVyWI.roa
File: pssfyglKHpOiGgzunnim9_DVyWI.roa (raw, json)
Hash identifier: NvW7eXToeEKh2/3VQzwLl+ak/L64DuDpcDD2LsMmYkk=
Subject key identifier: A6:CB:1F:CA:09:4A:1E:93:A2:1A:0C:EE:9E:78:A6:F7:F0:D5:C9:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C648F044034B0E548C5E7326C907C0CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pssfyglKHpOiGgzunnim9_DVyWI.roa
Signing time: Fri 28 Apr 2023 05:14:41 +0000
ROA not before: Fri 28 Apr 2023 05:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:48:f0:44:03:4b:0e:54:8c:5e:73:26:c9:07:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 05:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6cb1fca094a1e93a21a0cee9e78a6f7f0d5c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:4c:27:d7:4d:18:2f:32:ed:4b:9a:7b:e5:
8d:90:ea:09:2f:f0:23:46:d5:e9:e9:91:df:f7:80:
b8:93:c8:50:94:d2:5e:ad:92:7c:51:64:19:7c:eb:
ae:41:b4:c6:bf:11:89:68:9c:a6:84:16:9d:88:35:
51:04:90:6d:31:66:61:a1:be:0a:b8:f4:14:5d:de:
62:af:d4:73:52:14:f4:89:90:3b:89:c4:ed:f1:d1:
df:b8:a3:4e:24:22:d3:58:4c:62:72:50:fd:18:82:
e0:3d:35:a3:f2:73:b4:3b:f4:6e:71:ff:63:f2:c3:
ea:5e:cb:4b:68:61:60:05:ae:f3:ff:02:c8:17:9d:
bd:9d:7e:69:51:45:1b:9c:16:d6:6f:02:51:d7:03:
dd:44:8e:9c:73:e7:b7:21:8c:90:8e:98:c8:ff:79:
97:83:2f:b7:02:d7:8c:ca:3a:5f:2f:07:f3:bf:54:
7e:ac:fa:6e:67:8f:cf:5e:ca:1e:c3:dd:ea:11:52:
26:9f:d7:12:93:12:1c:52:2c:eb:a4:b8:f7:ad:ad:
91:3a:eb:60:08:6e:fb:30:bf:d9:5d:e5:98:7d:6d:
ce:62:63:b8:b8:a5:d1:c9:92:15:ad:55:27:b1:a4:
66:58:81:5a:a9:35:ac:b2:5c:9e:38:1b:37:9e:f1:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:1F:CA:09:4A:1E:93:A2:1A:0C:EE:9E:78:A6:F7:F0:D5:C9:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pssfyglKHpOiGgzunnim9_DVyWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:d1:a8:45:6c:64:d0:05:51:41:3b:fd:18:a5:c5:0e:c7:2b:
29:4d:df:00:54:97:a1:b3:93:9c:dd:ba:b0:8c:2d:6d:2e:73:
90:3a:a9:52:86:b0:24:46:80:f8:44:ef:ec:91:0b:f2:da:42:
ec:02:5d:b6:26:61:ee:11:2a:20:bc:ff:92:df:de:46:e8:49:
24:24:18:f2:6a:d7:39:62:e6:3e:de:d9:97:7e:3f:61:8d:3b:
6c:df:67:0c:fe:78:b1:10:73:29:b5:c6:b2:ec:c5:ac:85:93:
49:36:98:18:09:52:dd:21:ea:1e:5b:5c:3c:73:a6:a1:77:13:
3a:93:b2:93:ca:fc:85:35:99:36:55:57:1d:fd:82:df:56:e0:
e5:3b:20:94:35:98:18:8f:3e:c1:79:32:92:b2:1f:2e:b1:b0:
13:e7:7a:82:fb:10:7e:44:2f:fd:0b:b7:73:60:0a:d6:fc:51:
b2:05:4a:d1:65:01:84:f5:b8:e1:72:ef:6a:66:73:2c:ec:a0:
66:1a:30:fe:30:88:36:21:01:ec:87:3c:26:64:c7:6f:bc:46:
96:5e:aa:9b:02:f4:07:2f:fb:7e:0d:a7:46:68:c8:b7:d8:58:
1e:23:df:6b:84:98:76:4d:67:f2:6c:44:d2:2c:96:42:eb:b2:
97:6e:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:37 2025 by rpki-client