Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pSVAIQpByCBiTlEjOeAH9rsEd7E.roa
File: pSVAIQpByCBiTlEjOeAH9rsEd7E.roa (raw, json)
Hash identifier: SlefXFYVPrL9ICqJYa49QQMmCG++HS6sStG9h+6bX2I=
Subject key identifier: A5:25:40:21:0A:41:C8:20:62:4E:51:23:39:E0:07:F6:BB:04:77:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EA87A9F1913B6BCF6049BCE21195A410
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pSVAIQpByCBiTlEjOeAH9rsEd7E.roa
Signing time: Fri 05 May 2023 06:09:32 +0000
ROA not before: Fri 05 May 2023 06:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:87:a9:f1:91:3b:6b:cf:60:49:bc:e2:11:95:a4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 06:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a52540210a41c820624e512339e007f6bb0477b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:07:ef:0a:ab:92:2c:20:d9:83:d9:d2:a7:
5a:8b:04:9c:3c:6d:18:2d:ef:ac:27:09:06:44:06:
d2:f2:69:c7:a0:d0:c9:ec:08:b4:8a:f8:3e:d0:e0:
e3:41:f2:43:f4:cf:54:99:36:31:72:0b:92:30:a5:
81:23:22:57:e7:42:2b:53:18:58:d2:ca:86:53:2b:
0c:11:1d:42:4e:51:45:db:64:39:9b:db:0e:be:09:
6b:51:e6:71:95:96:0a:7f:83:7f:05:eb:08:7d:12:
0d:b8:fa:ac:5f:d9:32:73:54:b3:b0:88:30:f1:1f:
a6:1d:59:8a:aa:7a:89:6f:e4:fb:1e:1c:7a:84:94:
77:ce:cc:40:29:e6:f0:0b:87:33:3f:62:2e:ce:fe:
8a:b2:43:46:72:db:49:13:c0:b0:f8:8a:e9:2f:6b:
39:44:a6:fa:3b:cd:dc:5d:05:8a:4b:64:98:a9:bf:
85:bd:fb:0d:dc:bb:07:5a:eb:74:73:bb:86:d0:ea:
84:9c:9a:0a:ec:09:af:21:33:11:84:7d:c8:1c:7f:
2a:0b:a5:c4:58:fc:ff:6d:b6:bc:d4:7b:65:f2:3e:
6d:51:f5:79:3b:7e:54:fa:c5:a9:fb:92:1c:ad:f0:
b1:e8:de:5c:cb:34:d7:83:86:3e:7d:3c:da:f6:fc:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:40:21:0A:41:C8:20:62:4E:51:23:39:E0:07:F6:BB:04:77:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pSVAIQpByCBiTlEjOeAH9rsEd7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:39:65:62:f2:be:e6:19:3e:6a:94:73:1f:dc:56:3c:7d:9b:
7e:1a:96:e3:1c:9e:f5:c4:98:4a:3e:97:2e:18:7f:f9:f3:01:
c6:c9:ad:5e:12:38:e5:15:a7:07:6b:1b:33:6d:20:d5:54:0b:
ec:26:b8:2e:a5:f7:df:08:71:3b:de:f5:e2:8c:d3:37:75:2b:
e9:a5:43:d4:1f:1a:00:4a:af:11:ba:16:76:55:3a:63:7e:3f:
48:36:26:8e:93:d1:48:50:34:ec:a0:46:38:e7:a0:f9:0e:ab:
75:3c:54:2f:a6:a2:80:48:fd:4b:39:5b:fa:65:10:b9:31:27:
b7:eb:a7:38:3c:85:50:e4:d5:a2:cb:55:32:65:39:39:dd:78:
59:34:91:e7:07:9c:0a:e7:77:76:91:2a:1b:8f:8d:74:18:75:
cd:77:37:19:e3:5e:b6:e4:c1:4f:2d:f9:3b:00:86:10:13:a9:
a0:97:f1:7a:93:7b:f8:6d:44:ec:4e:28:04:a0:fd:bc:a6:18:
0a:12:c7:aa:76:9a:06:0c:7c:79:d2:16:73:7d:53:c9:5d:5f:
ca:1b:30:3a:86:21:89:af:b8:68:66:9b:ee:2d:cc:c2:d2:7a:
1d:7b:a6:c5:f1:27:8a:a3:d6:a5:3b:88:65:c0:92:34:96:b2:
83:f1:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:42:27 2025 by rpki-client