Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ExPI_vwZGEs6UI3CnutGnno80M.roa
File: 5ExPI_vwZGEs6UI3CnutGnno80M.roa (raw, json)
Hash identifier: lh3YlHvS6mZfYDz4NeRXxTAZEz5JKG8HCT7EKiWxDvs=
Subject key identifier: E4:4C:4F:23:FB:F0:64:61:2C:E9:42:37:0A:7B:AD:1A:79:E8:F3:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1D593507CF0F6EED01E469A877CF1E77
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ExPI_vwZGEs6UI3CnutGnno80M.roa
Signing time: Tue 22 Aug 2023 13:05:00 +0000
ROA not before: Tue 22 Aug 2023 13:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:1d58:7619/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:59:35:07:cf:0f:6e:ed:01:e4:69:a8:77:cf:1e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 13:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44c4f23fbf064612ce942370a7bad1a79e8f343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:de:56:f6:fd:ec:ca:63:24:77:e1:09:29:
1e:ce:83:79:00:bc:31:15:51:0a:eb:6e:ef:22:a1:
9a:70:50:29:bb:42:da:b4:82:6e:69:35:3a:f5:05:
cc:b2:45:70:2b:cd:e3:50:51:c4:fb:39:df:ba:19:
10:59:8d:a0:65:07:58:d6:03:26:76:2b:f4:e7:43:
1d:e4:9c:77:f1:7e:f9:e7:9e:2c:28:9d:3b:40:0f:
49:5d:8a:c3:1b:d4:b0:ef:97:d4:33:34:c3:71:1f:
63:53:37:87:11:56:9a:2d:7c:48:0b:91:d6:4a:29:
8e:19:d3:c8:14:36:66:63:a6:d1:ca:78:81:0e:a8:
fa:73:d7:67:31:59:e5:55:0c:ca:77:4c:f9:60:97:
74:83:42:8c:6a:8c:61:db:89:9a:6d:b1:15:8f:4e:
04:9b:44:5b:17:8e:19:f7:f0:93:58:c7:f0:da:ac:
dd:9c:e9:89:99:30:af:bb:c1:c4:f5:98:3a:c8:4c:
21:13:ec:6b:9e:ae:e3:7c:4e:82:0b:d2:de:06:3a:
05:32:a5:96:80:4e:27:80:bb:f8:83:a9:3d:d7:d1:
79:3a:0f:99:a9:82:a2:4e:fd:93:39:e7:43:82:6e:
43:d3:c4:52:f7:0c:26:87:fd:31:8e:e5:eb:82:0a:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4C:4F:23:FB:F0:64:61:2C:E9:42:37:0A:7B:AD:1A:79:E8:F3:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ExPI_vwZGEs6UI3CnutGnno80M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e7:84:b3:87:fd:b0:c7:a8:ea:f0:06:dd:14:7f:40:c0:7f:
38:f3:41:a0:c0:38:8c:a6:9e:a3:75:27:e2:1e:5c:dd:c8:4a:
d3:0b:2a:5b:7f:99:25:d0:c2:d9:5e:59:81:17:07:a5:2a:0c:
c5:31:55:ea:4d:61:0a:ef:a4:cd:2d:7d:23:21:c9:c0:bd:e4:
e0:68:dc:cd:25:78:4c:72:20:f1:6b:87:8b:21:2e:8e:81:fb:
0a:2c:39:65:6c:6b:b5:df:c1:a7:c7:57:77:98:78:ef:25:ff:
21:20:1c:18:f9:35:bd:2e:65:8c:fb:5e:60:44:2a:9e:87:a3:
b1:f1:2c:17:72:e9:52:f4:da:e5:ca:7e:ad:ff:52:a9:60:ac:
d7:fc:74:f2:24:4e:8b:72:77:23:30:1f:f5:1b:3e:8f:12:50:
f8:68:17:91:b3:b7:1c:42:10:2c:a2:04:02:cd:db:5c:c7:0d:
f5:15:ca:af:8a:cb:d2:f7:98:66:c1:3d:23:99:ff:d5:17:25:
7a:0c:54:8c:a7:cc:21:50:8a:24:cc:f8:6d:63:1e:26:4e:65:
b4:2c:0b:f2:bb:a8:49:b5:91:a8:b7:42:db:b9:f2:c6:84:26:
e2:eb:cf:9c:7d:82:49:bc:4c:ce:99:31:0c:93:8b:e2:2e:4e:
0e:ed:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:02 2025 by rpki-client