Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvRLesNX1GcvZf6pNqF9UaT2xNw.roa
File: pvRLesNX1GcvZf6pNqF9UaT2xNw.roa (raw, json)
Hash identifier: KjTFe9XUU21q5W/ixThnGAER90Rsn7Ht+9RYlxW7Vpw=
Subject key identifier: A6:F4:4B:7A:C3:57:D4:67:2F:65:FE:A9:36:A1:7D:51:A4:F6:C4:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018803DA2B857B7C41F2DCDA347B83E1FCEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvRLesNX1GcvZf6pNqF9UaT2xNw.roa
Signing time: Wed 10 May 2023 04:10:09 +0000
ROA not before: Wed 10 May 2023 04:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:da:2b:85:7b:7c:41:f2:dc:da:34:7b:83:e1:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 04:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6f44b7ac357d4672f65fea936a17d51a4f6c4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:04:8e:06:28:f1:c8:c8:c3:d4:9b:83:5d:
89:cd:f7:6c:25:03:2a:f5:a1:c3:99:f5:f8:84:ce:
43:e7:b6:1c:60:71:f2:74:06:f5:89:3f:3b:80:d0:
3c:80:81:8e:6a:1b:de:37:9c:e7:41:5d:6b:f8:e2:
be:a3:f0:b6:a6:71:e1:18:48:23:da:a8:30:fe:0e:
5b:bd:55:82:ee:23:f0:18:63:e3:47:72:23:aa:ab:
c0:47:86:af:c6:15:2b:52:48:28:f1:48:67:52:64:
21:e4:1a:8b:38:b3:2a:0e:5b:59:8c:59:f9:9d:a0:
23:e5:2f:df:d9:27:38:a2:ff:a2:57:4f:2c:e6:78:
c0:33:26:c3:a2:6a:be:9b:8d:65:42:a2:42:42:91:
a8:89:29:e4:92:f3:17:85:11:25:e7:91:92:cb:e1:
c0:aa:1f:51:b3:d5:fa:86:27:b4:ed:3b:39:90:6b:
9e:b7:15:c6:65:50:a3:86:35:94:ec:ee:19:1a:fe:
e0:65:1a:7d:85:5d:f9:98:d6:a6:5c:2d:38:75:5a:
97:07:51:91:0c:d3:8b:7e:9c:53:9a:1f:9b:88:95:
2c:ab:97:cb:d8:a5:7c:2a:66:40:53:cf:20:af:c5:
27:ca:5d:c5:20:a7:1c:73:33:35:33:41:eb:e5:91:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:4B:7A:C3:57:D4:67:2F:65:FE:A9:36:A1:7D:51:A4:F6:C4:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvRLesNX1GcvZf6pNqF9UaT2xNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:8c:38:b1:e6:53:71:7a:dc:21:2c:84:21:a3:c8:85:2c:0a:
13:fa:4d:10:ba:41:43:33:16:81:f2:34:41:d3:5b:07:21:ce:
cc:5f:fa:ca:38:15:37:3e:2d:2c:29:3d:ee:2c:c9:4c:f4:22:
60:a4:41:ee:a2:23:38:28:db:17:58:56:8d:c8:60:0b:aa:09:
5d:43:44:a1:15:91:31:a7:de:68:bc:e8:4f:e4:04:5e:db:35:
22:a4:ed:3a:71:dd:7a:a2:9a:37:d2:d4:be:fc:8e:24:eb:a4:
fc:75:81:f8:44:45:72:67:52:34:1b:fa:a6:60:9c:7e:ef:f8:
c1:7a:05:6c:f6:89:4c:b6:c1:16:19:51:3b:fc:df:49:1f:5c:
1b:bc:c6:24:23:3e:c2:02:06:18:07:bd:de:cf:c0:df:27:fb:
ce:a3:eb:4d:60:8f:95:f0:c0:1f:09:43:72:a2:7c:2b:06:32:
5e:96:63:12:a5:cf:24:7e:28:57:5f:83:2d:45:5e:2b:90:a4:
c2:fb:28:ec:a9:f1:c4:4c:e3:41:be:a9:82:e7:fe:44:c9:a8:
03:58:f1:92:cd:6c:d1:7b:86:ae:9f:91:13:d4:8b:21:0e:9c:
3b:8d:6d:1d:99:e7:ff:de:67:4d:97:dd:c0:58:99:e9:40:c5:
bd:b0:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:50:57 2025 by rpki-client