Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pgH4iLfZSyAc_MOlZivPRyRe0CA.roa
File: pgH4iLfZSyAc_MOlZivPRyRe0CA.roa (raw, json)
Hash identifier: p8DLkqJ8BO3fJpzIdqGXTtxGBCEAZ2t7GY3t0AY0R0A=
Subject key identifier: A6:01:F8:88:B7:D9:4B:20:1C:FC:C3:A5:66:2B:CF:47:24:5E:D0:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F0F38A834D1613EFE9671CAFCD26511E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pgH4iLfZSyAc_MOlZivPRyRe0CA.roa
Signing time: Sat 06 May 2023 12:05:05 +0000
ROA not before: Sat 06 May 2023 12:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:f0f2:bea0/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:f3:8a:83:4d:16:13:ef:e9:67:1c:af:cd:26:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 12:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a601f888b7d94b201cfcc3a5662bcf47245ed020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:51:0b:14:7a:c3:3f:e0:f1:c9:c0:aa:dc:
8a:fd:e3:04:14:3c:95:a8:58:53:37:81:3e:a1:8d:
ba:7c:50:a5:7e:c0:0c:0d:c3:36:84:a1:ff:fc:13:
62:e4:31:07:a7:a4:41:d1:8c:77:f6:a7:b4:b6:e6:
3d:a4:05:91:d6:c5:2d:42:7c:2a:c5:3c:71:e3:92:
76:f1:e0:a9:b6:41:8c:e2:0b:fe:03:e4:0b:1a:2f:
22:7d:42:1c:ee:86:64:a8:71:bd:2c:2f:6d:0e:4b:
f3:90:cf:b7:56:63:ff:12:aa:ca:49:b6:36:fe:99:
b8:71:78:07:49:96:8d:65:3d:43:97:92:d2:e1:95:
54:74:3d:cf:3b:5e:54:79:69:66:e7:50:77:1f:f4:
24:d6:1d:46:94:da:87:66:8c:d2:af:1d:b4:73:17:
21:64:0b:b0:75:90:81:82:b8:f0:5c:d3:02:0a:4a:
05:da:bb:5e:7f:00:5c:3b:37:3e:67:5c:20:6d:7e:
36:a1:e1:4c:f5:11:9f:d4:d6:60:9c:d9:ff:88:f9:
20:1b:97:d9:82:b2:40:52:dc:f1:9d:ce:63:ed:67:
cc:91:57:00:89:6b:5a:68:5b:19:64:67:41:71:dc:
22:fd:70:3c:9d:a2:6d:84:00:c2:94:17:4c:b9:40:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:F8:88:B7:D9:4B:20:1C:FC:C3:A5:66:2B:CF:47:24:5E:D0:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pgH4iLfZSyAc_MOlZivPRyRe0CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:27:2a:ef:ab:0b:23:a9:57:ef:bc:d4:3e:e6:fc:6d:db:37:
d8:00:ca:a3:24:06:78:b6:e8:65:fe:fc:7d:b0:a9:4c:72:8c:
6d:28:7a:2d:4e:40:a4:72:75:67:86:19:ba:28:00:f8:46:9e:
d6:03:0b:04:0c:43:22:ac:1b:2a:f7:27:d7:96:5a:29:b8:90:
5e:e4:ec:71:0e:f2:e5:85:67:5e:bc:6c:ae:46:91:38:05:c3:
08:8b:17:78:19:95:90:a3:3f:4c:85:fe:a2:0d:bd:51:09:3c:
52:24:ad:a5:cc:62:31:d6:63:55:7a:88:08:a8:f3:ea:40:da:
76:7c:22:c6:04:81:ad:49:9f:6d:d8:be:46:e1:f6:84:85:5e:
dc:93:c2:0a:2e:2b:91:19:ea:2d:08:50:17:ef:8c:0a:9a:72:
55:fc:56:fc:1b:7a:25:44:f8:2a:ab:d4:7a:70:08:71:e7:6c:
d7:f3:32:b5:0b:b0:ed:4d:4e:1f:28:6d:24:bd:72:c7:0b:9c:
cc:23:33:97:e4:4c:71:ce:64:31:1a:28:58:93:4a:c1:29:61:
e6:b2:0a:f1:ed:41:8a:9f:13:21:83:64:70:69:be:1c:d8:99:
d0:26:a5:b9:88:70:41:0c:f7:f1:93:a6:ff:e8:3f:0c:9a:08:
ef:4f:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:15 2025 by rpki-client