Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PbIkOPmxtekun_ghVNl2Q-cSzeE.roa
File: PbIkOPmxtekun_ghVNl2Q-cSzeE.roa (raw, json)
Hash identifier: 4bYaxitDiez1CD9eOtNXnhl75SBy8eb2V2p6PdwMd8A=
Subject key identifier: 3D:B2:24:38:F9:B1:B5:E9:2E:9F:F8:21:54:D9:76:43:E7:12:CD:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018816853D89CEFFF50EF250679C10333357
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PbIkOPmxtekun_ghVNl2Q-cSzeE.roa
Signing time: Sat 13 May 2023 19:10:10 +0000
ROA not before: Sat 13 May 2023 19:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:85:3d:89:ce:ff:f5:0e:f2:50:67:9c:10:33:33:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 19:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3db22438f9b1b5e92e9ff82154d97643e712cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:23:89:4b:28:6c:13:a4:41:1c:02:e1:0f:
af:e7:3a:96:38:07:1b:1c:3b:5d:c8:32:9d:dc:66:
b0:e1:c6:8b:55:8c:1e:c9:53:13:a2:3e:4d:ce:9f:
ca:01:d6:ca:c6:1c:b7:3f:f4:1e:30:11:84:8a:f8:
17:75:aa:80:63:87:ee:b2:53:a9:1d:8a:96:d6:41:
ce:a7:67:c5:10:92:29:71:a1:eb:7f:e3:0f:4b:78:
5e:c9:76:cf:4c:ba:cb:07:16:f7:cb:86:75:d1:b1:
dc:78:2a:74:a8:9d:79:71:59:7f:3d:49:69:fc:6b:
44:9d:19:ee:91:44:da:2b:89:7d:29:76:29:82:5d:
ba:1e:83:db:a5:63:98:8d:44:ce:bf:4b:56:04:c7:
a6:4a:d0:3a:e3:6f:bb:23:df:71:1f:a7:5a:25:c9:
7f:fb:ce:6a:4d:22:d3:67:b6:21:cb:4b:b2:37:26:
0a:59:7d:e5:15:d1:86:5d:54:ac:7c:ae:33:96:6c:
8a:4b:bf:8d:1c:7c:b9:9f:51:4c:67:4d:94:6e:53:
8c:9c:62:cf:c6:17:1d:ba:e6:1e:0f:52:ee:cf:a8:
01:56:46:d1:30:39:1d:d8:66:74:40:29:0a:95:35:
81:76:ee:7a:aa:82:e4:cd:73:29:4d:87:69:03:e8:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:24:38:F9:B1:B5:E9:2E:9F:F8:21:54:D9:76:43:E7:12:CD:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PbIkOPmxtekun_ghVNl2Q-cSzeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:14:1d:2c:04:b1:d5:05:0d:a7:2f:2b:c2:58:3a:14:bc:9e:
61:9e:c9:2e:b0:9d:36:10:15:08:07:e8:c2:cb:a7:07:2a:94:
51:54:80:47:df:da:b1:cf:9f:d6:f9:d2:48:13:9f:ad:c5:79:
23:90:1d:24:9c:71:c0:36:cd:56:04:85:3f:a1:53:83:6a:16:
3a:b2:db:a4:20:c7:b4:4a:59:4d:60:57:9d:11:8f:2c:11:a6:
0e:5c:19:ff:9b:84:b6:eb:09:d0:93:a7:36:ad:c9:7c:99:3e:
d0:9b:db:71:83:c3:bb:4b:ab:6b:fa:ef:e8:40:60:0d:4b:ac:
be:87:03:89:db:c6:38:cf:33:86:af:f2:cc:5d:97:07:f9:bd:
75:aa:33:d1:db:ef:b7:00:20:b5:a9:79:e2:de:9c:ed:5f:4d:
e7:1c:08:1e:76:86:43:cf:21:f6:3c:d2:6f:4a:ec:3b:dc:7e:
73:de:1f:5d:4f:2d:aa:93:18:26:e6:55:e3:6c:82:3a:7c:4a:
fe:f8:60:c5:5a:51:c2:95:c4:60:ce:c5:75:c4:e1:f1:38:3d:
f8:c4:70:37:ee:0f:91:1d:18:65:dd:4c:7a:b2:d9:f2:ea:b6:
96:32:9b:f3:97:a8:4a:72:db:99:49:c1:aa:e5:43:50:4c:76:
d5:16:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:46 2025 by rpki-client