Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pirIoJpRXO07_HRKTu-qTYFbVKs.roa
File: pirIoJpRXO07_HRKTu-qTYFbVKs.roa (raw, json)
Hash identifier: obUyVkw8I3pPh8ATh34OJ+eFDZEKDR+h5cFiCxVALoU=
Subject key identifier: A6:2A:C8:A0:9A:51:5C:ED:3B:FC:74:4A:4E:EF:AA:4D:81:5B:54:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AA022E86C997FCB16511915EFEDA0787
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pirIoJpRXO07_HRKTu-qTYFbVKs.roa
Signing time: Wed 05 Oct 2022 21:16:53 +0000
ROA not before: Wed 05 Oct 2022 21:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:aa:02:2e:86:c9:97:fc:b1:65:11:91:5e:fe:da:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 21:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a62ac8a09a515ced3bfc744a4eefaa4d815b54ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:a0:a5:4d:e7:9c:e5:eb:47:e4:5b:3f:0f:
42:f4:27:81:20:a5:ca:93:b0:18:0e:8f:9b:eb:91:
66:d8:13:78:46:db:9d:bf:59:e1:4d:a0:a7:42:29:
e3:7f:a4:48:70:a6:14:8e:26:68:c7:7e:fc:a0:77:
e5:ed:1e:74:7b:f0:b9:86:3b:a7:89:97:20:0a:4b:
e1:32:c6:28:c3:0f:70:c8:ad:33:a2:11:40:dd:0f:
e5:66:4b:56:32:15:ac:95:a2:35:11:75:e6:f8:8b:
c1:2c:66:76:53:46:9c:09:34:59:b7:79:0e:f8:e9:
ce:a8:d9:4a:cc:68:87:61:21:05:50:3e:4e:4c:b8:
0f:9a:70:e0:97:5b:8b:e8:7c:3c:c8:f7:1b:17:cb:
ec:e2:9d:bd:51:05:48:ea:e3:0d:a9:ec:3e:d7:b0:
34:d2:28:a4:be:88:0f:62:46:d6:75:d4:86:7d:56:
e3:38:2a:a3:1f:a1:78:ab:6a:cd:e1:5c:63:94:5a:
31:b2:f7:ea:5a:4e:b2:20:a3:55:19:d0:b4:97:ef:
36:80:4b:d3:9d:77:dd:f0:91:31:26:06:6a:95:94:
07:b3:ec:91:e5:c4:56:0d:a1:d4:5d:0a:42:12:21:
4b:db:2b:32:80:91:c6:1a:38:1d:8f:14:a1:e5:67:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:C8:A0:9A:51:5C:ED:3B:FC:74:4A:4E:EF:AA:4D:81:5B:54:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pirIoJpRXO07_HRKTu-qTYFbVKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:f4:22:00:44:38:9f:cf:c3:cb:62:21:67:3e:6c:e2:16:23:
af:50:5a:0d:06:f7:e3:de:b1:bc:41:7a:fb:bb:60:b2:f8:73:
da:60:ec:3a:85:9f:5d:cb:97:e2:c0:cf:18:f0:26:64:8a:dd:
6e:d7:d2:31:b9:15:a1:e0:56:0f:b0:68:ec:a2:7d:d2:ad:08:
41:95:6b:f8:17:a0:45:15:9c:7a:9f:8f:ca:dd:36:dd:11:0c:
dc:32:a3:0c:ae:6f:11:ed:74:dc:00:cc:a8:b3:c3:96:0e:32:
03:41:32:df:35:bc:5f:5f:7c:d4:e9:ad:02:6b:fc:09:81:5d:
7e:75:ef:3a:da:78:83:7d:ae:78:ca:86:ae:f3:ee:42:1c:9d:
5e:0b:d7:c1:16:f3:02:b6:3e:3d:67:05:f6:4c:e9:05:a2:27:
36:9e:33:bd:80:b7:14:44:97:25:5a:b5:5d:29:5c:46:f2:a8:
77:c4:bb:5b:bf:67:14:93:6e:14:58:a6:de:49:c0:c5:e8:58:
5c:d4:fa:04:ab:fd:d1:46:9b:ae:b9:4d:60:c6:4b:d7:0b:d0:
2e:2f:71:4a:68:9f:5b:7f:02:06:e8:d1:81:1b:03:55:1e:cc:
41:e2:f3:6a:be:c6:e5:19:73:cf:94:15:27:b2:95:25:a3:07:
49:dc:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:17:26 2025 by rpki-client