Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PVmG7ODz5fipgnZolZ-LxRIUGGU.roa
File: PVmG7ODz5fipgnZolZ-LxRIUGGU.roa (raw, json)
Hash identifier: W7SJwsF7dfWXpTGxYG1+GLvbc9UOFm1gdSccP3Wp0Hc=
Subject key identifier: 3D:59:86:EC:E0:F3:E5:F8:A9:82:76:68:95:9F:8B:C5:12:14:18:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C7959069D55A5B1763136B79D65E1685
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PVmG7ODz5fipgnZolZ-LxRIUGGU.roa
Signing time: Thu 09 Mar 2023 18:15:13 +0000
ROA not before: Thu 09 Mar 2023 18:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:95:90:69:d5:5a:5b:17:63:13:6b:79:d6:5e:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 18:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d5986ece0f3e5f8a9827668959f8bc512141865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:67:08:e8:cc:ce:b0:90:78:d4:88:01:4e:
a1:b0:e8:17:b7:8a:3e:bd:a7:76:7f:9a:e4:58:b1:
2e:86:ea:1d:df:1d:c9:88:fc:49:ec:e4:ee:ae:a2:
46:7c:50:c2:00:53:c8:8d:bc:d5:7c:8d:06:33:4e:
6c:a0:d0:21:61:76:ba:5f:da:96:50:87:4f:64:ab:
f4:3c:88:a3:38:c8:b8:68:0a:1c:be:7d:c0:00:0e:
c8:ef:20:ed:d6:53:72:53:97:9c:c6:c2:86:ef:33:
21:fb:5c:66:86:39:03:6b:28:48:80:77:47:4f:bb:
6e:0f:a0:52:f3:de:6c:fb:9e:3d:25:de:0b:ae:78:
66:9c:90:85:44:6b:40:39:f9:a2:e7:b5:a1:5c:8b:
9a:48:84:66:ab:c1:e7:b0:38:1c:8b:78:29:59:88:
09:e4:3e:18:e9:c0:98:ba:3b:bf:41:eb:94:6a:5c:
92:01:3d:54:69:06:82:e0:55:c9:3a:09:be:a6:ba:
e8:dd:b0:bc:b4:96:3c:ef:f8:5f:a7:34:01:21:e1:
1c:b5:c2:a6:6f:2d:a3:ad:ba:49:af:ff:90:2e:a6:
1f:39:63:1a:29:79:7d:ec:99:0b:69:d0:a3:c3:f2:
b5:65:33:5c:5c:8c:cf:4d:4b:ad:59:de:dc:a1:87:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:86:EC:E0:F3:E5:F8:A9:82:76:68:95:9F:8B:C5:12:14:18:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PVmG7ODz5fipgnZolZ-LxRIUGGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:42:a3:1c:8b:57:63:92:26:18:2c:f1:b3:38:4c:ab:03:66:
e3:6f:ab:e6:d0:86:6b:31:eb:b2:fa:00:82:c5:92:1c:a3:27:
38:e8:c9:69:f9:e9:34:c0:d7:a3:ac:f5:2a:d4:50:d3:9a:f7:
07:d9:e7:74:2b:1a:95:48:9d:35:98:37:77:1d:06:cb:f4:f2:
6f:13:87:76:42:90:cc:c4:23:c4:c4:87:87:48:7e:a0:b0:9d:
03:06:a1:2a:23:a0:85:a3:ee:04:a1:e3:4b:36:1c:86:e7:2b:
4f:7b:6e:92:09:84:d5:c9:d6:40:eb:c4:8f:8e:af:c6:9e:94:
33:7c:6c:d3:2a:5e:cd:19:6a:d1:4e:90:06:62:ba:99:6a:1c:
01:74:50:66:b2:00:70:66:6b:36:64:f7:04:22:09:17:6d:d8:
8d:08:d3:8e:57:a3:f7:35:03:4e:a5:e0:9c:17:e5:43:bb:5e:
eb:2b:58:70:ff:b3:4a:ce:b4:27:e8:3b:39:b7:19:24:b9:4d:
2d:b4:94:f2:49:bc:1a:63:67:92:cf:d3:a1:5f:32:db:19:fd:
51:f0:0b:f7:2e:e0:9e:75:db:e3:b1:04:a6:83:19:3d:26:76:
4e:3e:f1:32:63:a8:10:9e:7c:34:66:2d:eb:be:b9:ee:3e:c5:
06:e9:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:37:24 2025 by rpki-client