Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p1vdGMHDWw2QD-YN8skOrp8ydgE.roa
File: p1vdGMHDWw2QD-YN8skOrp8ydgE.roa (raw, json)
Hash identifier: pDX3Vo2xlj+BxHuI40+IdBN9qkUsqh3guXTdJU932DQ=
Subject key identifier: A7:5B:DD:18:C1:C3:5B:0D:90:0F:E6:0D:F2:C9:0E:AE:9F:32:76:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895E28FDE6F596FC6D7A7671D3C1C9A411
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p1vdGMHDWw2QD-YN8skOrp8ydgE.roa
Signing time: Sun 16 Jul 2023 10:04:51 +0000
ROA not before: Sun 16 Jul 2023 10:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:5e28:6eed/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:28:fd:e6:f5:96:fc:6d:7a:76:71:d3:c1:c9:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 10:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75bdd18c1c35b0d900fe60df2c90eae9f327601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:1b:c3:bf:69:24:78:3e:01:b5:4b:70:91:
4e:16:61:2a:3f:fe:45:4b:34:f6:63:eb:21:b0:e1:
b3:8a:a2:58:84:bc:ed:ce:f7:ad:95:3d:6d:96:e1:
8f:b1:ad:7c:8a:a0:d6:ec:18:0a:e7:d7:a5:d2:a5:
6a:18:20:85:6d:38:dc:62:c9:75:32:db:5f:c4:34:
a6:f6:b4:75:1a:6b:22:cf:5c:4c:63:bf:49:c9:9e:
a7:25:fe:8f:62:95:5f:0b:0e:ae:aa:70:98:73:58:
b4:f3:a6:ab:3d:93:5b:df:ad:c4:1c:1e:93:7f:9c:
2e:12:43:cb:ce:22:45:61:08:cc:75:25:06:2c:f4:
f3:16:f3:08:3c:5a:ae:90:4d:77:56:ef:14:1d:38:
2f:0b:18:6b:83:cc:03:fa:9a:bf:83:b4:41:67:ce:
5c:f9:a5:b6:a3:bf:e7:74:64:f2:7b:59:67:1a:53:
f3:5a:e2:ab:d2:a2:2e:20:6d:0b:ee:1e:6a:24:83:
f5:2c:08:73:61:42:6f:e0:bb:c8:53:90:6b:04:75:
7b:9e:6d:25:45:af:aa:2f:bc:ee:bc:07:f9:fa:e1:
b5:b1:f0:e4:a5:7a:cb:41:e4:23:0f:29:13:66:73:
f4:9f:96:c3:50:49:75:85:98:4e:98:39:08:d0:cb:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:DD:18:C1:C3:5B:0D:90:0F:E6:0D:F2:C9:0E:AE:9F:32:76:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p1vdGMHDWw2QD-YN8skOrp8ydgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:80:bb:fd:ba:ec:9c:6a:3e:88:72:a6:0e:e2:ff:9f:a8:75:
33:e2:7d:90:91:70:dd:50:6c:64:5c:cb:b4:12:74:a2:f4:14:
db:3a:c0:78:57:e5:27:3b:8b:4a:84:9c:5f:8e:a0:e3:2e:39:
ad:18:38:65:f6:74:0e:62:5d:80:e9:59:7a:82:5c:76:42:be:
34:77:6d:52:e6:f3:3e:90:d8:6a:1d:5b:4d:e5:a8:c9:6a:f9:
63:67:21:ef:ca:0a:10:fe:58:8a:59:63:5b:50:55:1b:4e:c6:
8c:97:50:79:84:1e:ff:13:ad:a6:ac:70:b0:fe:01:d1:f8:74:
7c:14:da:13:f4:88:5d:2e:69:fa:b7:e5:2e:13:98:07:60:31:
ac:80:0e:2f:18:43:7d:82:8e:52:b9:1a:1b:c2:a5:d2:f1:6f:
72:1c:fd:a6:45:fb:b3:ba:56:14:61:61:79:2f:0a:00:0b:da:
c5:cc:20:33:ec:1f:ab:84:45:cf:50:96:09:b5:9e:a3:84:29:
5c:86:16:09:86:3c:c6:af:61:10:04:42:91:c2:79:bc:c4:15:
11:ef:61:22:61:ee:3d:40:1e:9e:80:55:29:bf:34:5f:56:e8:
5a:52:0a:75:0c:4b:6c:9a:6c:a3:70:f9:29:7d:c7:30:d0:60:
a8:9d:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:44:53 2025 by rpki-client