Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5-ywAh_Xranv39AVfVF-vPEUj-0.roa
File: 5-ywAh_Xranv39AVfVF-vPEUj-0.roa (raw, json)
Hash identifier: UInyt+xT0bHrKlX/ytsXOFFFW8bJKuEXD3dkV+wAK1c=
Subject key identifier: E7:EC:B0:02:1F:D7:AD:A9:EF:DF:D0:15:7D:51:7E:BC:F1:14:8F:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B329BC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5-ywAh_Xranv39AVfVF-vPEUj-0.roa
Signing time: Thu 14 Apr 2022 11:12:46 +0000
ROA not before: Thu 14 Apr 2022 11:12:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066914244 (0x7b329bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 11:12:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7ecb0021fd7ada9efdfd0157d517ebcf1148fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:f2:14:e0:d4:4b:37:1a:ae:a4:22:df:a9:
58:1b:8d:ed:1b:a1:4f:5b:5c:ce:c8:41:ac:d5:79:
8d:8c:12:42:03:ab:bc:88:cd:2f:ad:c3:71:73:a1:
7d:49:e9:66:9b:e2:43:9a:ab:5e:ed:fb:36:da:82:
f1:f0:2c:c9:11:4b:27:f3:f9:a8:b0:5e:4f:59:69:
70:b9:bf:1b:57:97:ad:30:36:5c:41:92:e4:cd:77:
3a:2c:5b:85:8e:66:b8:a5:e5:5f:fb:33:fc:49:a6:
cd:7b:f6:31:76:f6:42:de:28:58:38:2b:a0:dc:29:
fe:7c:63:c5:2f:81:91:ba:c3:44:66:ba:fb:64:f3:
e8:92:84:70:40:27:7a:34:cd:83:71:ed:c7:bd:0d:
ca:cf:94:ba:98:4a:85:06:bf:95:99:6b:a8:42:3e:
05:ee:82:33:8d:d1:29:3f:4b:47:ef:05:db:b3:60:
6b:46:cc:45:ab:3b:f6:db:1e:65:15:51:2c:dd:03:
ff:8f:bc:87:07:37:6d:62:3b:81:d6:12:2d:c5:b9:
d5:50:7f:94:93:8b:62:52:be:fa:96:41:1c:0b:42:
f9:b0:33:e6:34:80:d9:c6:2f:8c:a9:05:9c:1b:95:
21:44:43:9a:26:8c:02:2f:ac:cf:77:ea:c0:b2:29:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:B0:02:1F:D7:AD:A9:EF:DF:D0:15:7D:51:7E:BC:F1:14:8F:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5-ywAh_Xranv39AVfVF-vPEUj-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:56:7d:1d:eb:b3:4c:c2:cb:f1:d5:cf:0a:ec:b9:8b:0f:c7:
22:36:84:b2:1e:f8:33:a2:26:7b:36:e9:f2:87:c0:ae:c0:b1:
1c:2c:d8:ef:89:51:e7:62:69:5b:a0:fa:eb:1a:96:c5:05:08:
8f:bb:8b:15:bd:dc:3a:ee:92:2b:38:a5:66:83:4c:91:2f:a3:
92:f6:36:23:40:6f:1c:9b:92:d1:d2:cd:0e:a0:53:1a:d2:8a:
a1:b8:43:89:46:f9:20:96:e4:77:a0:4d:9c:82:d4:e7:6f:b0:
e0:71:d8:4c:ad:e5:71:08:09:c3:9d:89:d5:9a:b2:12:b4:c8:
43:86:ae:fd:5b:a2:02:f2:3e:98:36:2d:2d:30:11:98:5b:33:
ca:dd:a4:fb:44:48:4e:f8:fb:34:08:44:4b:c8:4e:c6:9d:9d:
77:58:36:25:cf:71:9e:2d:29:e4:5b:76:1a:83:b4:60:58:49:
7e:50:4d:b2:a4:18:7d:66:e2:54:b1:f2:ef:20:a8:b7:27:5d:
43:88:ad:bb:67:9e:29:47:97:84:f5:ad:25:76:e1:30:90:58:
89:d0:53:f3:83:cb:39:d9:80:bf:e8:65:b0:56:78:ed:9c:dd:
67:b8:d4:7b:80:f0:e3:c5:b6:5a:db:e7:13:dd:7b:4b:f1:0e:
6e:e7:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:04 2025 by rpki-client