Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvU-h4EIZeTAQO-LprM5_fZK6uo.roa
File: pvU-h4EIZeTAQO-LprM5_fZK6uo.roa (raw, json)
Hash identifier: B5FfXkGlS/Pxci22pv14QXEmvvB4g9Qv3nqEladbNlo=
Subject key identifier: A6:F5:3E:87:81:08:65:E4:C0:40:EF:8B:A6:B3:39:FD:F6:4A:EA:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A4A382EB5B2A757F704C91C472E0D062
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvU-h4EIZeTAQO-LprM5_fZK6uo.roa
Signing time: Tue 16 Aug 2022 03:12:35 +0000
ROA not before: Tue 16 Aug 2022 03:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a4:a3:82:eb:5b:2a:75:7f:70:4c:91:c4:72:e0:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 03:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f53e87810865e4c040ef8ba6b339fdf64aeaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:20:13:50:c8:af:32:29:d0:6c:2e:4c:b9:
5b:db:71:a8:89:e5:69:92:86:f9:76:09:49:25:fc:
75:89:f5:ca:d4:f3:0f:ef:5e:15:0f:62:7a:e3:a5:
76:f0:d1:be:c3:6d:b3:84:ec:7c:bf:7e:b6:ba:de:
be:de:67:9c:19:20:b3:e4:36:54:d8:9a:ab:6b:f3:
6d:65:1b:40:dd:cc:77:f5:2d:19:3c:c3:23:80:48:
af:27:66:17:96:90:9e:7e:4d:09:3f:d9:65:59:78:
6e:dd:39:41:e1:53:8a:dd:65:22:36:fa:e2:4c:8c:
72:0f:3a:03:89:54:4b:ab:4a:89:fe:91:b8:a4:30:
88:5f:0e:bd:67:d0:57:c2:2e:a3:09:ee:f4:c1:63:
83:20:26:2a:b4:56:ae:6b:01:7c:08:ce:1c:e1:f5:
e6:55:20:76:f9:76:49:a2:0d:98:28:c2:9c:8f:fc:
ed:07:46:09:1e:ae:7e:33:5b:8d:2f:40:24:8a:b6:
4e:e1:3a:42:64:4f:15:62:43:f2:86:6d:bb:0a:cc:
fc:4e:96:45:94:da:45:65:6f:61:61:8f:f4:33:8d:
4b:36:65:83:bf:2b:de:af:50:9b:02:44:32:11:f6:
ab:b5:3f:ee:b5:0b:88:64:03:be:bf:cd:b1:c2:45:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:3E:87:81:08:65:E4:C0:40:EF:8B:A6:B3:39:FD:F6:4A:EA:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvU-h4EIZeTAQO-LprM5_fZK6uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:a2:fb:f3:ee:27:6a:89:87:a0:32:7f:cd:eb:46:54:90:81:
ac:dd:d8:ae:4b:8b:e7:18:8f:27:53:3b:0b:93:19:2d:6b:b3:
54:39:b5:33:18:1c:b0:ef:ef:03:a7:4f:f0:6d:3b:0f:51:51:
b3:f6:0b:49:93:57:7b:bd:2b:06:d2:82:44:b7:3e:b3:9c:60:
ac:73:ca:e5:0c:0e:09:d2:63:fd:cf:a9:85:a4:81:81:47:3f:
94:79:5d:14:1a:a5:32:5a:5c:93:2a:15:27:e6:8a:04:71:fc:
11:0e:76:93:6c:0d:b8:06:a8:e5:be:31:30:6f:de:b4:4c:03:
a9:81:26:d7:f4:93:c4:65:ae:36:5a:0a:22:16:9a:e0:e6:d8:
0b:6b:23:99:d1:5e:2d:5e:7a:57:fd:04:36:b9:39:0b:46:ec:
ae:2c:b0:ab:a4:6e:a0:b6:51:15:92:3a:cb:cf:02:98:cf:01:
90:d7:b8:a6:50:c8:fd:c7:01:d9:1d:ce:1e:1f:e1:a3:88:74:
61:b8:2f:a8:3f:1d:c3:81:5f:6c:fa:9f:4a:d9:1c:35:45:a7:
39:51:43:f3:ac:d3:d8:68:9f:88:d3:7e:6b:c7:38:70:3d:28:
70:37:c4:98:b9:78:1c:d7:10:b5:0c:be:b5:ba:90:68:70:a2:
3e:0f:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:12 2025 by rpki-client