Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pchpzAw9cFYEOU-776sxNbHcJWo.roa
File: pchpzAw9cFYEOU-776sxNbHcJWo.roa (raw, json)
Hash identifier: Db7c/xSB9BM8jujtVZPAp9G2Lut5y9VEmfB/w7nXkWs=
Subject key identifier: A5:C8:69:CC:0C:3D:70:56:04:39:4F:BB:EF:AB:31:35:B1:DC:25:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188717F9AA456607F028CBBEB7150FDFE73
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pchpzAw9cFYEOU-776sxNbHcJWo.roa
Signing time: Wed 31 May 2023 11:09:27 +0000
ROA not before: Wed 31 May 2023 11:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:7f:9a:a4:56:60:7f:02:8c:bb:eb:71:50:fd:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 11:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c869cc0c3d705604394fbbefab3135b1dc256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:a8:c7:3f:06:64:0c:ea:dc:1f:fc:4f:a1:
87:8d:89:ff:5e:c8:af:a3:87:cd:74:87:41:26:9f:
52:3a:49:ec:c7:01:54:03:c5:d5:6a:d5:78:f4:43:
1f:17:7b:28:a5:76:39:a1:f5:ef:2d:7d:70:53:2d:
ed:70:f9:ea:5e:cb:d5:8a:ae:e8:cc:8c:9e:c9:27:
c0:0d:3d:68:e5:da:61:8b:12:3c:75:c3:4e:78:ea:
62:ed:c0:1d:c7:36:25:d7:31:60:08:93:ec:a8:8a:
f8:58:3b:2b:05:b1:81:34:5e:f4:4b:61:08:d6:d3:
0d:38:27:28:15:a8:6a:51:7c:ce:63:a6:9d:18:65:
d0:48:18:db:ab:ce:07:5a:6e:5a:21:79:5a:66:2d:
5e:8e:4b:e3:87:82:fe:8e:07:5a:be:c0:9f:25:cb:
82:c0:a6:03:32:aa:73:e3:6c:84:ab:10:fe:41:fa:
4b:96:14:0e:d2:23:b9:82:0e:21:d5:1e:88:23:1d:
22:34:93:86:e4:b0:5b:d7:42:8a:ab:da:5b:58:dd:
6e:d5:7a:38:87:3f:ee:74:7b:06:f3:9f:40:ff:6b:
aa:17:2e:97:30:f8:3c:31:7f:42:2c:5f:cf:0f:f6:
65:5c:27:8f:0d:ba:1f:10:ce:e2:d5:37:d8:ef:69:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:69:CC:0C:3D:70:56:04:39:4F:BB:EF:AB:31:35:B1:DC:25:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pchpzAw9cFYEOU-776sxNbHcJWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:66:27:2e:72:e2:d1:ab:8f:03:1f:11:79:68:11:f3:e3:fd:
34:6b:26:51:f9:5f:1a:8a:39:1c:6b:96:e6:44:1f:aa:ef:8c:
44:bc:62:fb:c8:af:73:47:d4:b5:c5:2a:d7:77:39:e8:3d:88:
55:e9:cf:77:e8:fd:8a:ef:1b:c6:c8:64:75:ee:ba:aa:10:bd:
97:b7:4e:4f:f2:f8:92:7a:d3:42:1a:96:77:c1:e5:75:bc:8d:
4e:86:fd:5e:01:f9:4f:3b:91:38:53:cb:84:b8:d4:3e:12:db:
1e:58:a6:e0:6d:fc:33:3d:22:25:df:9a:c7:60:d5:fc:01:3e:
8c:5f:42:c9:22:ea:00:3e:aa:f2:ab:8d:01:e9:cd:9d:e6:e3:
d7:1e:a4:c7:56:8c:0f:28:f1:83:96:4b:94:13:fe:6e:e7:e2:
8c:b0:af:4b:6b:6f:2d:34:5a:9f:7a:23:70:17:74:60:21:b0:
d8:fb:5b:d4:87:57:6a:37:09:22:4a:9e:12:92:43:b4:e0:d5:
36:43:32:f2:2f:61:14:80:93:56:70:3c:7b:80:30:16:23:bc:
11:be:b6:e6:59:c1:f8:eb:0a:f7:9b:7a:b1:43:ff:46:f6:71:
1e:64:4b:4e:e0:cc:a1:a1:da:02:4e:d4:9d:c4:8e:80:d0:c3:
24:c3:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:13 2025 by rpki-client