Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwbsFuZkd1gRCSeHfWxp-vGYeIY.roa
File: pwbsFuZkd1gRCSeHfWxp-vGYeIY.roa (raw, json)
Hash identifier: 2/uc3A746ESxE21HROgHMO8v3OfjzJmt9zxzQbH8sDU=
Subject key identifier: A7:06:EC:16:E6:64:77:58:11:09:27:87:7D:6C:69:FA:F1:98:78:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852BC9D8EA08D28D9EE0534EFA3CF48255
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwbsFuZkd1gRCSeHfWxp-vGYeIY.roa
Signing time: Mon 19 Dec 2022 19:08:46 +0000
ROA not before: Mon 19 Dec 2022 19:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:c9:d8:ea:08:d2:8d:9e:e0:53:4e:fa:3c:f4:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 19:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a706ec16e6647758110927877d6c69faf1987886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:67:2f:09:af:f3:f5:e1:c2:98:3d:48:2d:
d8:04:0e:d6:89:74:94:69:38:83:1d:65:c5:27:f3:
67:44:f5:b1:d2:d3:84:f0:aa:19:1d:b4:ef:22:2e:
55:99:7f:08:f5:5f:80:95:a9:2a:9b:08:90:87:b8:
89:75:8e:a9:c8:f3:84:dd:56:e6:c9:65:ee:42:69:
83:d5:f0:14:35:0c:8c:a8:a3:69:f4:b4:2b:ee:4b:
2a:ab:da:cc:aa:10:3e:89:dc:06:82:c4:ca:fc:73:
62:65:fb:58:d3:00:3c:46:e6:38:4a:4e:61:e2:73:
1c:e2:95:ad:10:f8:1a:f8:ab:64:61:ea:f6:e3:56:
0e:ee:bd:96:c7:63:e7:11:c3:f8:07:81:fe:42:30:
2f:a8:a3:bf:79:fe:cb:a5:e8:64:dc:f6:83:0a:d1:
74:b2:75:84:16:88:9d:a7:84:01:d8:c4:5b:26:6d:
6e:63:43:b8:c6:0c:6a:f2:26:4d:bb:3b:24:ac:19:
bc:6c:3f:c3:b3:d2:65:bb:64:0b:17:cb:d0:08:ca:
f5:83:2b:f6:a0:31:29:a2:9d:5e:91:0f:08:70:01:
e9:a6:5f:9e:38:db:05:41:81:d8:38:75:d8:54:39:
be:9f:95:a7:27:b0:cc:59:f0:f9:d3:df:18:86:e2:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:06:EC:16:E6:64:77:58:11:09:27:87:7D:6C:69:FA:F1:98:78:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwbsFuZkd1gRCSeHfWxp-vGYeIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:af:37:ca:5b:30:b0:3e:12:5f:38:d2:bd:7c:57:ae:e0:44:
5d:87:58:e2:1e:31:83:6d:12:d0:d7:5d:9c:a8:3a:cd:6b:95:
89:2e:a6:1a:4f:bb:0e:55:06:35:a5:21:00:89:be:16:4c:3e:
a4:bf:20:6c:74:89:8a:c3:31:fe:b6:b5:bd:e1:d6:6d:fd:0a:
fe:bb:fb:f4:ce:38:f5:29:9a:66:7d:f7:ed:60:47:93:a0:33:
bf:c9:d2:6c:86:5b:07:dc:3c:56:40:61:b6:38:68:96:01:3f:
ed:02:78:27:34:6f:8f:95:32:4b:b9:ee:a1:d4:32:3d:00:b4:
64:ee:21:5a:64:5e:f9:dc:64:c7:1c:1b:12:5d:29:b9:b5:1f:
ed:1b:e9:8a:b6:e4:0a:03:71:50:d7:4a:67:4d:05:f6:24:1b:
60:51:f5:4b:a8:7e:c1:04:44:3e:51:1a:70:7a:40:8b:e1:de:
7a:63:02:2a:1e:99:a3:e9:61:fb:b9:e3:39:f9:08:62:3e:78:
25:70:45:5b:f3:09:05:fb:18:7a:e4:21:b9:04:32:a5:80:0c:
10:a9:08:44:bb:15:7c:2e:f6:20:f7:e1:34:18:0a:7d:95:ae:
0f:03:83:e4:7a:30:25:c4:65:8d:3a:af:b8:ca:f9:cb:ba:1c:
86:33:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:35 2025 by rpki-client