Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwDZ8EGeyW8BNhfYBRIzq-L7zpw.roa
File: pwDZ8EGeyW8BNhfYBRIzq-L7zpw.roa (raw, json)
Hash identifier: rzZ+AsDixWMmjOBXgc6Pa61milSuBKwuNleYR1Q6reg=
Subject key identifier: A7:00:D9:F0:41:9E:C9:6F:01:36:17:D8:05:12:33:AB:E2:FB:CE:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878652BBB2E7FD0E8537150948F2AE2D32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwDZ8EGeyW8BNhfYBRIzq-L7zpw.roa
Signing time: Sat 15 Apr 2023 19:09:41 +0000
ROA not before: Sat 15 Apr 2023 19:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:52:bb:b2:e7:fd:0e:85:37:15:09:48:f2:ae:2d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 19:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a700d9f0419ec96f013617d8051233abe2fbce9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:bc:0e:68:51:07:0b:ae:9e:71:fe:9a:5c:
1d:1a:55:a2:35:b0:2c:ae:61:e9:7d:26:2a:2e:7d:
d9:73:22:c4:8d:9f:7f:94:77:63:35:0f:a3:44:84:
f0:51:f7:0d:f5:9f:e8:9c:c1:06:ac:3b:47:e2:be:
81:b4:0c:f2:4a:01:09:75:0c:62:54:07:03:16:2c:
5c:de:82:5e:d1:64:a1:5b:2c:87:f0:3e:7b:df:38:
a4:d5:30:88:f6:c3:57:a0:01:05:e0:38:e7:96:d3:
e7:e3:d7:e2:b4:51:c6:41:eb:de:db:3c:b4:f1:eb:
0e:a4:6b:16:08:7d:76:3f:86:66:a1:64:1e:a8:a0:
da:5d:a2:44:bd:87:7c:80:56:ed:b7:b8:f7:1d:48:
d4:15:59:e6:23:dd:2b:83:36:84:39:af:c3:05:16:
22:1e:3f:6c:e3:87:56:3d:fc:d5:fd:0e:e8:23:72:
02:fc:c7:9c:60:06:45:45:19:33:a1:1e:a4:24:f6:
37:e9:b6:00:40:0c:66:f7:d4:30:5c:d5:a7:7e:b2:
fc:d7:82:9e:0c:24:b9:c0:48:5e:5e:f4:f2:72:51:
62:42:27:c5:3f:65:cf:5f:f6:5b:f2:82:07:04:36:
66:30:9f:fe:b6:65:f1:8b:28:e4:f6:80:7a:34:5e:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:D9:F0:41:9E:C9:6F:01:36:17:D8:05:12:33:AB:E2:FB:CE:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pwDZ8EGeyW8BNhfYBRIzq-L7zpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:fb:d8:7a:42:e4:4f:50:ca:ed:ac:af:57:69:70:78:da:06:
d8:d5:e0:5e:9d:ff:f1:f0:8b:cb:fa:47:ff:9a:29:c0:1b:1c:
a8:3e:e6:4f:04:eb:cb:d3:da:ec:3e:47:9d:cf:35:36:4c:30:
b4:ef:7e:9c:ec:9d:73:b6:ef:dd:8b:ac:e6:cc:1a:2b:c4:99:
72:96:67:e5:df:4a:f5:a1:f1:b2:43:b6:64:d7:b1:14:61:7b:
d8:b4:c7:fd:51:0e:fe:ed:ca:49:41:74:30:cc:17:50:dc:3c:
f2:8b:7c:cc:1a:ca:0d:b8:1a:0e:95:27:7c:64:2c:78:6b:74:
c6:19:61:f1:f5:30:0e:1d:02:cc:b1:e1:a7:e4:77:1f:69:db:
1f:56:d4:4a:f5:b0:23:1d:3c:52:fa:ac:ad:18:32:7f:54:5e:
cb:d1:89:f3:ab:c5:35:8f:71:2a:a7:0a:2c:69:d7:b5:9a:32:
7e:fa:0e:64:bf:92:e8:89:13:f9:8a:b7:53:7a:1d:4c:c6:20:
99:fb:95:53:ab:0b:be:b0:ca:06:d7:dc:f2:33:b4:fe:0e:76:
fa:83:b1:a9:10:98:92:51:5c:6a:3a:80:b4:fb:bd:f9:1d:4c:
da:3d:da:16:c1:75:10:69:39:fb:69:f0:f7:fe:e3:8b:dd:85:
49:f5:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:18:32 2025 by rpki-client