Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pgxe0A6gtNWUnWrSsfOUiq_qTu4.roa
File: pgxe0A6gtNWUnWrSsfOUiq_qTu4.roa (raw, json)
Hash identifier: ArH4+anYDGfuzxtreUmceT1Av2JihjXIxtfu839icok=
Subject key identifier: A6:0C:5E:D0:0E:A0:B4:D5:94:9D:6A:D2:B1:F3:94:8A:AF:EA:4E:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DADD6A91AC68A9EFC880C92839211CE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pgxe0A6gtNWUnWrSsfOUiq_qTu4.roa
Signing time: Tue 20 Jun 2023 22:12:03 +0000
ROA not before: Tue 20 Jun 2023 22:12:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:dd:6a:91:ac:68:a9:ef:c8:80:c9:28:39:21:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 22:12:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a60c5ed00ea0b4d5949d6ad2b1f3948aafea4eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:68:15:69:66:82:25:13:97:73:e1:35:4d:
50:11:42:08:cf:37:cf:03:b3:f5:8c:3d:44:9f:3a:
63:ed:fc:46:d0:29:cc:b8:14:ac:c0:ef:81:78:e0:
cc:09:e4:85:e8:85:a4:e0:d9:17:cd:5a:6a:df:55:
b6:6d:53:5b:48:38:4e:5d:b6:2a:e3:bc:51:89:15:
da:eb:6c:d5:4c:da:8b:df:10:b6:e6:f3:7a:cc:5c:
87:99:91:85:5e:e7:23:c7:48:e9:cc:d3:7c:03:40:
44:e4:76:25:10:44:23:60:f3:ea:e5:a9:17:a1:4d:
4a:a7:07:0a:98:ad:61:79:65:ab:1f:aa:9c:b6:03:
80:13:a8:d1:bd:4f:76:09:7a:21:5a:96:b9:32:1e:
15:e8:95:bc:e1:69:f1:8e:2a:e1:ee:c7:14:11:1e:
32:31:a6:1b:0d:1b:71:96:de:fb:a5:a4:11:cb:db:
87:52:23:ed:55:d9:d4:8a:e7:fb:c5:83:a8:d0:8a:
0b:a8:a5:72:c5:f7:f9:10:60:d0:7b:b2:86:27:dc:
6a:c7:3b:92:51:79:a3:f2:24:ea:e3:94:6a:5f:d7:
99:d3:0c:d0:4c:fa:c5:72:d3:28:fc:11:9d:52:96:
17:be:73:6a:15:45:3b:7c:2c:9d:8b:45:7b:56:ef:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:5E:D0:0E:A0:B4:D5:94:9D:6A:D2:B1:F3:94:8A:AF:EA:4E:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pgxe0A6gtNWUnWrSsfOUiq_qTu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:93:1d:96:65:20:fb:9e:99:c8:de:ff:68:5f:f9:fb:e4:1a:
60:7f:98:94:83:cd:cd:08:d6:ad:c7:52:ba:38:4e:7a:23:25:
c8:ed:fb:c7:55:c0:57:e2:e1:a5:6b:43:b4:7f:b6:19:24:8d:
71:c2:44:85:14:30:87:7c:d4:e4:f8:0f:42:00:c0:98:33:de:
09:e5:1f:00:a6:d6:b1:52:01:b1:30:b7:d4:d8:10:9d:72:7e:
74:91:97:9c:ac:f9:2d:69:53:53:a6:f9:19:9d:3e:9c:bf:6f:
8e:17:1b:f8:48:f6:93:5c:0d:b0:3b:1b:c0:31:d3:42:9b:ee:
1d:98:9e:cf:68:d9:da:a5:26:9b:8d:fe:65:6c:99:a2:85:ef:
3b:05:66:32:9d:c7:95:c8:7e:09:62:7a:98:2a:a4:20:6d:16:
73:98:6f:82:c4:53:15:9e:62:70:45:f3:7f:76:05:b6:07:80:
81:24:17:97:81:0e:56:b0:29:07:40:5a:67:e5:86:eb:bf:65:
e5:1c:a8:8a:bb:cc:74:0c:30:91:6f:18:01:89:82:59:02:5f:
7d:43:c2:22:21:c6:e5:c0:55:6b:4e:39:92:3a:82:f9:53:79:
da:8b:c4:1e:c3:be:ca:50:92:ea:1a:f0:f8:1b:a6:bc:e4:2f:
88:0e:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:52 2025 by rpki-client