Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4-2PWiwC87h2OssSVMX4e__Inpc.roa
File: 4-2PWiwC87h2OssSVMX4e__Inpc.roa (raw, json)
Hash identifier: nsc6/YOf8GxS5LPrc2pncK+9dxKTUBPgQh38+YVwXwg=
Subject key identifier: E3:ED:8F:5A:2C:02:F3:B8:76:3A:CB:12:54:C5:F8:7B:FF:C8:9E:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874E8B735E9529AF93FA1741A9F1DC8EE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4-2PWiwC87h2OssSVMX4e__Inpc.roa
Signing time: Tue 04 Apr 2023 23:12:54 +0000
ROA not before: Tue 04 Apr 2023 23:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:8b:73:5e:95:29:af:93:fa:17:41:a9:f1:dc:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 23:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3ed8f5a2c02f3b8763acb1254c5f87bffc89e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:7e:75:3b:af:45:0a:ce:aa:20:2f:65:db:
82:0b:4a:ea:92:14:25:3f:94:9e:74:81:c9:f7:00:
7c:ee:4b:d3:20:ac:d0:eb:c1:38:1a:de:c3:d5:16:
6d:1a:bc:c3:b6:51:ea:da:a4:2f:99:f4:c5:e3:94:
4d:2c:2a:9b:44:7d:77:36:b4:0b:a0:52:87:bc:ef:
06:e6:ec:34:9d:8c:d0:ad:c0:9a:34:62:63:17:d1:
48:af:9f:b1:a1:20:d5:d0:a3:cf:b0:83:13:d9:d9:
8a:16:9b:03:7b:65:91:ab:2c:2f:1a:f5:f0:2a:42:
f5:2e:a6:4e:02:c9:24:d7:2f:4f:00:24:11:bc:67:
9b:57:ee:da:4a:f3:02:7d:3e:8a:21:9b:ec:38:5c:
4a:62:dd:47:89:b8:8a:c5:5d:a2:85:cc:59:1a:48:
4b:ce:f3:4b:c8:8c:74:60:c8:f0:8a:f5:9b:48:86:
58:7a:b3:00:c8:da:01:95:25:ef:f7:10:de:a5:f9:
02:50:da:82:b1:01:4a:f8:a7:78:aa:78:81:b0:20:
dd:ca:4c:4e:7e:8b:46:c6:e9:f7:b5:a8:ce:d1:68:
65:c2:0d:99:75:e5:65:de:b5:79:78:d4:8d:13:9a:
a7:a4:72:f9:bb:02:8e:bf:a6:89:d3:6d:8a:2b:ba:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:8F:5A:2C:02:F3:B8:76:3A:CB:12:54:C5:F8:7B:FF:C8:9E:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4-2PWiwC87h2OssSVMX4e__Inpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:62:61:b2:cb:e8:74:a9:f5:e9:4e:77:e2:4d:b7:5b:26:fa:
2e:3c:4e:9e:6e:cf:8c:e1:f7:4e:a7:d8:0f:90:3c:6b:7f:21:
2a:23:c0:8f:8b:8b:74:4c:27:fa:01:64:ac:ce:d0:14:ad:da:
fd:9e:02:72:67:46:2c:82:1e:d8:8a:df:39:e7:53:15:ab:82:
12:ae:a7:19:2d:59:64:57:eb:1b:22:44:a6:c7:14:b6:d7:8c:
00:3d:94:89:56:76:88:98:ce:69:64:43:c8:b0:c6:da:f2:71:
29:6f:a8:9f:55:7e:e6:c0:e0:c7:ba:91:38:61:86:36:96:73:
ff:3c:90:35:5a:5f:dd:0a:3c:75:be:4d:05:c1:d1:08:a9:80:
0e:f4:35:d7:dd:a2:18:bf:2e:98:52:de:7a:c4:4b:aa:a2:d8:
d0:6d:a2:b0:96:37:03:9f:c8:4c:e5:bb:8b:a7:28:64:60:6b:
6c:cc:fe:dc:17:dc:08:5f:40:b7:4d:dd:30:e6:45:0a:f0:36:
f1:1c:21:0f:53:55:c7:de:16:c3:04:04:88:a4:07:e5:51:ae:
3f:7c:12:30:47:ca:48:a3:b2:97:48:f9:de:c9:4c:7a:92:d2:
18:cb:c4:21:b8:cb:c2:47:20:4a:49:78:a1:29:71:f7:3d:54:
62:7b:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:34 2025 by rpki-client