Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/05FYyeFuC6bSJwS4aF_CdWRS9P4.roa
File: 05FYyeFuC6bSJwS4aF_CdWRS9P4.roa (raw, json)
Hash identifier: jU+dlcsxaW5q+txp08gbR55GPOPYETXS4rP/jLXb5x0=
Subject key identifier: D3:91:58:C9:E1:6E:0B:A6:D2:27:04:B8:68:5F:C2:75:64:52:F4:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E44F6BF962FD77DB3120D25989044069
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/05FYyeFuC6bSJwS4aF_CdWRS9P4.roa
Signing time: Thu 04 May 2023 01:10:22 +0000
ROA not before: Thu 04 May 2023 01:10:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e4:4f:6b:f9:62:fd:77:db:31:20:d2:59:89:04:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 01:10:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d39158c9e16e0ba6d22704b8685fc2756452f4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:c5:42:c4:af:f0:21:fd:b2:f8:52:7f:16:
73:fb:f4:6e:a2:c4:dd:58:84:61:01:3a:ab:d4:3c:
44:9d:f7:bd:b0:0b:e6:4e:5a:43:9c:41:67:31:29:
e6:30:42:5e:1e:61:db:e0:c2:df:ad:76:d2:29:4d:
c7:a7:8a:13:51:0f:6f:c8:17:18:24:f1:e7:46:32:
81:d3:27:b3:ed:86:96:39:9a:0e:ac:a5:c9:5e:f9:
8d:77:e9:da:d4:c7:50:74:d7:38:5f:8a:01:21:72:
70:b6:fe:da:f2:a4:1e:a6:3e:8a:3f:98:21:69:a1:
1c:8a:50:45:ca:41:c8:ee:e0:4b:81:2d:16:29:4a:
94:af:35:55:47:fe:84:2a:07:4d:2c:6a:01:72:33:
da:4e:f8:e1:90:82:8b:41:2e:b0:3f:76:65:50:63:
6f:bc:4f:5c:5e:ad:e5:6e:01:22:7d:8b:08:5d:ba:
da:18:a1:6a:34:24:46:6b:65:15:89:80:a8:f5:0e:
97:7d:0a:48:75:d6:17:df:17:6c:1d:02:de:7e:c5:
56:31:95:29:43:9e:0f:03:5f:4c:a3:8f:8b:5f:3b:
f2:49:c8:99:02:8b:f3:32:c7:ff:d3:16:75:fc:04:
44:52:57:2b:4d:ef:52:6d:53:1e:60:bd:6b:56:4c:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:58:C9:E1:6E:0B:A6:D2:27:04:B8:68:5F:C2:75:64:52:F4:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/05FYyeFuC6bSJwS4aF_CdWRS9P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:71:be:74:3d:28:1f:39:f0:36:f2:bb:76:0b:95:f4:60:c1:
17:ce:61:91:92:8d:51:be:e7:f5:ca:0a:d5:7b:9a:71:aa:ce:
c7:27:d1:42:f8:3e:1f:da:6f:34:9a:1c:f6:ae:7f:88:20:f3:
4f:c1:30:ad:c1:e9:a8:39:7e:78:19:92:90:63:47:bf:70:40:
b6:83:0a:df:48:b0:99:6a:40:3c:db:35:d4:b0:76:d6:3f:2d:
23:3c:0c:11:6f:9e:5e:14:6c:2a:c1:30:20:fc:a7:4a:4e:01:
3f:fb:9b:3d:63:93:cc:4e:db:f6:e6:9e:b0:22:4b:09:13:ee:
14:58:c8:b1:20:78:b5:66:b8:c0:36:28:8d:d5:f3:7d:7d:19:
c7:7e:55:e6:14:0b:4e:c6:b3:41:e7:a4:c1:69:06:ac:9a:98:
24:ff:f6:4f:3f:da:aa:c8:71:ad:98:1a:1f:54:7d:44:41:b2:
cd:46:c1:34:73:0b:a1:04:1a:b1:63:54:1e:8b:0a:1b:b4:7c:
a6:f9:6a:4f:05:d5:a9:7d:23:e6:e4:6b:f8:70:88:a4:e0:53:
cd:16:3c:1b:5d:8a:84:8c:21:ff:30:21:92:d4:1d:16:53:91:
eb:b9:dd:63:00:ad:0c:4c:21:80:3c:19:03:fe:0f:71:b2:6c:
fd:31:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:50 2025 by rpki-client