Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Pnybf6gh2FmpElGFlD32eymjSU.roa
File: 1Pnybf6gh2FmpElGFlD32eymjSU.roa (raw, json)
Hash identifier: 86NnxXeKzCe/QjLvv21Ea3syGI6CAmVIL29YflOSpqw=
Subject key identifier: D4:F9:F2:6D:FE:A0:87:61:66:A4:49:46:16:50:F7:D9:EC:A6:8D:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DC93BAFD7D85B86B646E41E72097D9BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Pnybf6gh2FmpElGFlD32eymjSU.roa
Signing time: Mon 13 Mar 2023 20:05:14 +0000
ROA not before: Mon 13 Mar 2023 20:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:dc92:f29b/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:93:ba:fd:7d:85:b8:6b:64:6e:41:e7:20:97:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 20:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4f9f26dfea0876166a449461650f7d9eca68d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:1e:03:0e:d2:79:95:a2:66:15:93:5e:a8:
55:9b:d5:25:75:f8:2a:5e:70:7c:b9:f9:a9:68:1f:
da:9f:50:cd:ad:8e:78:d2:ae:ba:3e:51:4e:bb:11:
a1:d9:33:c1:33:88:91:09:70:5b:03:01:61:40:63:
e5:7f:7e:72:4e:68:b4:be:ec:09:f4:bf:a3:da:6f:
16:61:47:bd:00:87:67:cd:45:ad:7e:5a:5b:1c:91:
ba:80:65:6e:84:6c:71:fc:e1:38:0d:15:7e:1a:5d:
18:95:5c:e5:04:2d:1e:f8:ed:3b:bc:d0:bd:09:fb:
27:5a:df:ef:8e:a1:76:cc:ad:5a:49:44:2f:bb:57:
2f:9b:58:9c:c6:0e:99:ab:07:21:e0:84:e6:f1:5e:
bf:3c:5a:e6:57:be:e9:b5:1a:e7:97:50:29:c2:73:
21:ba:b7:72:2a:ae:8c:3d:09:23:df:0a:04:70:5c:
f4:7c:57:3f:a8:0d:aa:3d:64:81:9b:74:56:0e:6d:
a4:c8:42:1b:cf:fd:86:a2:3f:4e:12:be:86:bc:13:
ac:34:7e:23:17:43:2a:1d:3b:e5:78:01:58:85:77:
f1:20:d0:7e:4f:6d:f6:30:f3:5e:d3:da:3c:c5:b8:
66:f3:0f:6b:ce:22:6d:5c:8a:fe:8f:d7:7d:09:23:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F9:F2:6D:FE:A0:87:61:66:A4:49:46:16:50:F7:D9:EC:A6:8D:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Pnybf6gh2FmpElGFlD32eymjSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:a3:81:c1:55:97:a6:74:45:59:ce:c0:29:56:cc:d3:51:7e:
64:e4:fb:37:e1:5e:50:cc:78:86:c9:04:c2:e3:63:55:29:2f:
d9:9c:3d:12:82:c2:53:1c:f1:73:cb:66:84:20:47:35:eb:56:
9c:fc:76:dd:84:fc:f3:4e:72:31:08:a7:38:98:bd:39:c1:8f:
3c:a6:ca:fd:a7:5e:a5:a9:89:43:9c:9c:c8:e2:2e:7d:f4:51:
61:72:43:1c:9d:3a:58:a6:ae:6a:0a:bb:6a:26:05:4f:71:5e:
1d:0d:b0:21:d2:65:3d:a4:84:b9:e3:da:a2:7b:fe:b8:98:80:
c6:09:5e:5c:b5:e5:be:6a:c3:4d:91:f9:77:1a:cd:2f:3e:43:
48:59:73:fa:ec:55:5f:c9:f0:6a:4c:ae:6a:f7:5a:93:10:84:
8a:22:95:5f:ab:4a:49:57:0d:7c:80:84:7c:26:4d:df:f2:a5:
a5:80:b4:61:01:f5:b4:3f:f8:44:bd:c8:8d:e2:a2:d5:22:6c:
a1:be:ee:5c:04:c8:81:b1:f5:bd:3b:02:41:d3:02:bc:0f:aa:
14:84:01:1c:d2:e0:bb:2a:84:74:db:1e:3d:62:76:ff:3d:aa:
4d:7e:34:87:e6:d5:5b:ee:ea:eb:2d:a9:11:40:39:30:88:46:
51:07:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:25 2025 by rpki-client