Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5yW_tLELkCbraxIe-2OFSqx1_0.roa
File: 1-5yW_tLELkCbraxIe-2OFSqx1_0.roa (raw, json)
Hash identifier: Mg/QZblnHxS9MAeGg0mOnBBp0mEdNxXQznfwEk6AEjg=
Subject key identifier: FB:9C:96:FE:D2:C4:2E:40:9B:AD:AC:48:7B:ED:8E:15:2A:B1:D7:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E84C8CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5yW_tLELkCbraxIe-2OFSqx1_0.roa
Signing time: Tue 26 Apr 2022 00:11:29 +0000
ROA not before: Tue 26 Apr 2022 00:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122631372 (0x7e84c8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 00:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb9c96fed2c42e409badac487bed8e152ab1d7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:fd:58:35:98:67:a3:7f:07:57:cc:62:c7:
62:01:17:3d:fb:c7:9a:35:e2:8a:b2:39:40:9a:d0:
47:65:26:74:76:bf:06:36:90:89:13:5b:fb:d4:62:
6d:4e:4d:7d:10:2c:45:d6:81:ef:0e:f1:6b:61:ee:
2a:95:c6:f1:0f:66:ac:b7:9d:71:61:89:41:9b:d5:
c5:75:eb:fd:5e:7c:93:52:c1:51:27:5a:1a:00:e5:
be:a2:4c:32:e9:3e:2b:47:b5:02:13:29:86:d1:93:
77:f8:a2:1f:68:1a:61:c6:8e:dd:7f:9f:db:85:1d:
cd:a1:5d:76:05:3e:42:b5:58:f9:9d:6f:0e:6a:d3:
7f:7d:c5:ee:95:9f:ec:7f:0b:95:aa:42:43:9f:c8:
a5:12:62:d5:13:80:39:2a:8b:52:26:a5:06:09:a6:
34:c3:ee:1c:a2:1a:e4:83:69:86:43:cf:d1:eb:31:
39:1a:29:11:94:2b:bf:b7:7d:cd:90:9e:18:ff:7f:
f8:07:42:79:b7:78:91:4f:22:61:18:34:aa:82:2f:
f1:b9:9b:c2:d1:77:3f:93:49:1d:03:47:2c:5a:31:
22:0b:7f:9e:49:a6:9c:c5:cf:57:f0:30:1b:c6:dd:
64:11:4e:1d:74:f3:74:19:27:44:6d:68:83:75:11:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:96:FE:D2:C4:2E:40:9B:AD:AC:48:7B:ED:8E:15:2A:B1:D7:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5yW_tLELkCbraxIe-2OFSqx1_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:83:6a:30:38:60:28:96:86:1f:82:84:82:2a:6f:6d:dc:c9:
ed:60:e9:0a:d5:cd:1e:1e:52:5b:14:c6:0d:26:79:66:97:e9:
c3:5b:b7:22:37:e0:a3:44:54:40:4f:40:6d:52:28:b0:44:45:
33:17:b7:4e:01:1a:fd:68:b1:39:3d:38:98:8c:55:eb:63:25:
a5:fd:10:41:d2:f4:bc:99:1a:6f:06:51:9e:d4:49:6d:89:80:
e9:ae:02:e5:c2:4d:9e:cf:9e:c0:f7:95:98:c6:a2:20:fc:5b:
8b:df:63:36:97:36:81:8b:c9:03:2b:c3:e0:1f:3a:30:ed:d7:
9d:e7:c4:41:c4:d2:8d:3b:82:75:f9:c2:28:1d:37:78:df:b7:
e2:e5:ed:44:3d:a6:50:c7:8c:52:89:b7:ee:e8:41:0a:9c:50:
97:f7:c9:56:3d:22:7e:e8:68:cc:81:b4:ad:3d:83:c8:66:f2:
c2:19:bc:71:9f:3c:aa:5a:41:6b:d2:85:3f:03:46:0d:bf:a0:
68:a7:48:29:2a:a7:85:9e:2f:12:3a:e4:0d:d2:3d:cc:16:80:
3a:51:e9:2c:73:bd:d2:af:55:49:34:8d:ba:66:44:fe:3b:ed:
cb:a3:6d:38:73:39:3e:f7:3f:29:ef:a6:97:95:3a:ed:6c:0a:
27:f4:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:26 2025 by rpki-client