Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p5khi1PwMqrlRooODq1mDpvUhfY.roa
File: p5khi1PwMqrlRooODq1mDpvUhfY.roa (raw, json)
Hash identifier: qCsTRcX3BYcQu/ABUDG/MpTfutPSXnSL5uM9J9qoJHw=
Subject key identifier: A7:99:21:8B:53:F0:32:AA:E5:46:8A:0E:0E:AD:66:0E:9B:D4:85:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878B43FEF34BB8BA47429EA315AEC476AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p5khi1PwMqrlRooODq1mDpvUhfY.roa
Signing time: Sun 16 Apr 2023 18:11:41 +0000
ROA not before: Sun 16 Apr 2023 18:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8b:43:fe:f3:4b:b8:ba:47:42:9e:a3:15:ae:c4:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 18:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a799218b53f032aae5468a0e0ead660e9bd485f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:0e:83:0f:94:b2:79:fc:80:b1:99:9f:dc:
23:dc:7b:c8:23:a8:29:87:51:9a:c5:7a:45:31:43:
ed:78:de:27:cb:d7:a0:54:74:df:3a:30:9f:d8:6b:
b9:b2:26:89:92:97:44:d1:ac:52:9c:02:8c:d4:d8:
5d:12:e0:f9:0c:76:d3:2d:fe:41:22:24:43:b5:f2:
9e:66:b3:fd:e8:4b:fb:01:d6:3f:02:02:c1:0f:2f:
ed:13:db:9a:fb:3c:18:38:5e:7a:75:5a:46:bb:3b:
84:6f:1a:cc:05:4a:69:2e:a6:02:f2:6c:67:eb:65:
a8:a1:e9:fa:46:5f:12:b4:48:bf:2b:9a:11:2a:0f:
06:25:62:f2:c7:1a:e1:42:b2:ac:86:cf:83:8e:5b:
22:1a:66:7b:ba:d6:7f:8f:25:a7:82:10:49:4b:41:
b7:cf:4c:3d:5c:a3:bc:b9:c9:cc:10:63:d4:c8:38:
57:62:1a:27:42:69:0f:97:44:0a:66:09:0e:5a:02:
8d:b2:5f:fa:8f:27:04:35:58:6b:36:69:8d:76:0b:
55:45:cc:00:7c:9c:be:b1:35:43:d1:da:ad:bc:4d:
9e:4f:87:5f:f7:91:cd:54:d4:b1:5f:95:cb:59:c5:
33:bd:c9:f4:c5:55:aa:07:f5:f1:95:b8:2f:c3:a4:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:21:8B:53:F0:32:AA:E5:46:8A:0E:0E:AD:66:0E:9B:D4:85:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p5khi1PwMqrlRooODq1mDpvUhfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:7b:d3:6f:16:65:9f:ca:88:e5:5b:0e:9e:3d:6f:bf:d0:b2:
51:48:a8:c4:22:43:7d:4f:43:71:d5:1d:08:e5:9a:91:cd:d4:
85:56:e3:33:b1:f2:51:4e:56:3c:f9:75:f3:31:64:74:f9:c6:
ef:ef:d0:0b:7f:d1:3c:0c:23:1a:f6:8e:c4:ca:c4:9e:21:4b:
83:de:db:11:e1:92:01:da:11:93:56:df:89:3f:bd:66:9f:12:
ee:ca:37:aa:f8:1f:7c:66:12:bf:a1:99:8a:56:62:95:1f:15:
33:19:be:3b:2b:45:9e:e1:5c:25:70:44:c3:10:29:5a:39:c6:
ea:1d:2b:a7:89:ff:cc:9f:6c:f4:82:7f:8c:17:ad:44:ac:f6:
34:92:01:80:63:39:6c:51:ac:17:4c:07:3c:32:37:6a:99:e9:
da:04:a9:71:48:e9:72:b2:76:fb:94:01:43:76:0c:14:f3:0c:
c1:80:e6:bf:d2:ce:e1:4e:cb:ea:f6:a1:53:5b:d9:73:ab:96:
ad:39:94:dc:23:89:76:cc:7e:31:c4:0e:b2:4e:2b:b6:e1:62:
9e:b3:c1:c7:f6:31:ad:4f:db:65:8a:cf:1d:b7:4c:2c:7b:1a:
ff:48:ce:0d:40:a5:95:a4:26:39:5b:8d:ba:75:37:7e:4e:c5:
9c:5c:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:29:07 2025 by rpki-client