Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pbkrDwT_yYagy7vOWnKbCWYiEtg.roa
File: pbkrDwT_yYagy7vOWnKbCWYiEtg.roa (raw, json)
Hash identifier: J4d76Yf7uLlyOFQdbGlrkooqKsg3vcf7hQm/8IxiIMk=
Subject key identifier: A5:B9:2B:0F:04:FF:C9:86:A0:CB:BB:CE:5A:72:9B:09:66:22:12:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D46CEFAC4DF1FFE4ACFEAF9FE382FD7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pbkrDwT_yYagy7vOWnKbCWYiEtg.roa
Signing time: Sun 30 Apr 2023 23:08:41 +0000
ROA not before: Sun 30 Apr 2023 23:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d4:6c:ef:ac:4d:f1:ff:e4:ac:fe:af:9f:e3:82:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 23:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5b92b0f04ffc986a0cbbbce5a729b09662212d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:3a:5e:74:18:f0:c7:c7:b8:b4:c1:26:f5:
73:f1:14:82:fa:71:39:e5:23:e8:ae:6a:e4:d5:da:
d6:af:e2:9f:ee:17:0b:87:0a:2e:07:f5:c4:ef:15:
f8:f1:3d:82:b4:b1:48:6f:ec:30:e9:5b:65:1d:16:
aa:79:2b:da:dc:d4:40:94:c3:6b:d4:49:4d:d1:00:
7a:ca:37:57:03:14:bb:62:22:5c:82:a5:3e:5e:8e:
15:51:53:82:7f:87:44:aa:54:86:aa:8c:9b:95:f2:
9e:9d:12:38:3a:91:d7:ae:60:78:a4:20:8d:6a:be:
6f:0f:ae:de:cc:3f:3e:3a:c8:b0:f2:df:6c:95:12:
35:dc:7f:07:7e:12:6a:01:db:3c:a4:ea:2d:36:25:
b4:49:d2:8f:8b:b6:41:3c:b3:55:d1:4a:7d:ec:e0:
ef:ce:39:b4:0c:08:c8:d6:97:57:d2:d5:55:a1:7f:
76:51:6e:8d:66:eb:d1:41:7e:cb:7e:6d:ac:8c:55:
c5:1e:2f:57:a2:24:bf:e0:f3:9d:90:f9:58:07:fa:
ef:0e:33:73:cf:a2:8d:b4:d8:f4:eb:47:73:a3:ad:
93:9b:85:4d:be:c5:05:55:8b:ad:b8:07:ff:88:41:
3f:f2:4b:57:a9:71:c7:e7:df:0a:8a:57:79:5b:64:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:2B:0F:04:FF:C9:86:A0:CB:BB:CE:5A:72:9B:09:66:22:12:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pbkrDwT_yYagy7vOWnKbCWYiEtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:fd:60:54:d1:a2:6c:a5:2b:d2:d9:78:bf:c8:56:43:cf:68:
99:0d:76:f0:52:aa:eb:f9:0a:f3:1b:81:27:16:fe:0f:37:1c:
c5:23:09:d9:e8:1d:17:9e:59:e6:75:76:9c:73:42:ed:ff:7d:
80:54:c7:67:44:24:d8:16:27:f3:f3:88:7a:c6:47:d8:4f:a7:
a0:72:f1:ee:c5:f8:c5:6e:5f:f5:25:d7:f0:c4:46:00:a5:bb:
41:96:25:a8:4f:4b:3b:fc:2b:77:c9:3b:0b:84:c4:51:5d:01:
52:ce:bd:34:85:78:4f:1a:c9:1f:42:4d:50:14:6a:f0:ea:90:
3b:a4:1c:db:53:08:4d:e6:09:5f:46:0e:b4:4b:1e:ce:38:08:
9a:f4:6a:65:94:89:91:3f:26:2c:df:0e:3b:2b:f5:04:c1:39:
a6:bd:0d:59:ac:3a:7d:5b:27:d8:92:8a:1f:fd:3d:be:f3:cc:
62:ab:24:99:6d:a5:63:1e:96:24:7e:9f:3b:e5:34:9c:c5:e0:
87:58:9b:39:ce:c6:b4:82:05:d8:f9:45:4b:03:c6:41:f5:07:
4c:48:e5:ed:b9:f4:b2:dc:de:54:cf:80:96:94:e1:a6:4b:18:
fd:d8:00:25:e8:12:ce:16:d9:8d:ed:54:4b:e6:83:97:5c:44:
cc:69:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:03 2025 by rpki-client