Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5FxzJ8QniPyODTwOxjmkvbBT7kc.roa
File: 5FxzJ8QniPyODTwOxjmkvbBT7kc.roa (raw, json)
Hash identifier: d51l998HcLNhfsFPlRa7oQpB4uxpOq5nnumVUdga0AI=
Subject key identifier: E4:5C:73:27:C4:27:88:FC:8E:0D:3C:0E:C6:39:A4:BD:B0:53:EE:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018772CBC02ADD0851D8AFA2C1D651A344F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5FxzJ8QniPyODTwOxjmkvbBT7kc.roa
Signing time: Wed 12 Apr 2023 00:09:28 +0000
ROA not before: Wed 12 Apr 2023 00:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:cb:c0:2a:dd:08:51:d8:af:a2:c1:d6:51:a3:44:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 00:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45c7327c42788fc8e0d3c0ec639a4bdb053ee47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:62:ea:fe:ba:7f:32:67:e8:3c:76:17:99:
5f:99:44:02:68:7d:4c:a9:62:60:f2:70:6a:ae:16:
37:eb:7f:3d:e7:d1:0b:3e:64:9c:81:45:dd:03:6c:
79:a1:cb:83:48:bf:b3:55:d7:cf:e9:54:3c:4b:fd:
ea:6f:18:8c:d0:b1:6c:92:ae:b5:96:31:b4:f6:0f:
6d:7b:7c:c8:53:de:1b:6f:e3:b7:1b:d4:0f:a3:86:
d2:04:96:ba:60:cf:65:de:b4:e2:2b:49:fe:4c:3d:
63:b9:39:65:02:f6:b3:bb:c6:fb:5c:95:32:9b:e9:
c3:ce:77:bd:ee:2c:9f:68:4b:6b:5b:38:3b:1f:e6:
91:ba:d2:37:be:13:51:c8:a6:59:13:ac:c5:df:ae:
2f:de:46:0b:39:12:5c:20:ec:23:db:c2:12:60:bb:
cd:94:ce:b2:bb:03:ef:1a:12:a5:c4:b2:7a:0c:66:
c5:60:2c:8d:20:49:79:6a:89:8c:e1:53:06:db:b0:
10:ac:16:28:26:b9:47:f1:ef:0b:56:4c:fd:d2:31:
0a:03:4c:e0:51:dd:5a:47:8f:8d:1c:a4:af:63:6a:
01:8e:6c:de:38:1b:00:41:53:74:be:fd:86:78:19:
b0:3f:8e:50:db:ab:86:c5:f1:97:31:1c:e6:d1:ed:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:73:27:C4:27:88:FC:8E:0D:3C:0E:C6:39:A4:BD:B0:53:EE:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5FxzJ8QniPyODTwOxjmkvbBT7kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:3e:1c:00:f8:ba:92:65:3d:a6:1c:62:a9:1e:a0:74:63:d8:
3c:f3:2f:5f:44:7f:c6:27:4b:0a:cf:57:0b:a6:f6:51:12:17:
70:79:10:54:bc:da:8a:ac:06:ae:28:8f:0a:44:b2:d7:e4:d3:
e7:8d:50:9b:ea:47:25:52:84:14:63:d4:d6:2e:6e:7d:1a:bc:
7a:01:73:0d:f2:0f:79:77:a3:e9:ec:ce:ce:4b:8b:69:91:04:
b5:e1:42:76:e8:fc:ec:e7:33:0d:66:a6:4b:7a:72:16:62:70:
93:3c:2e:71:1c:24:07:79:c3:11:c4:89:fc:de:17:90:94:6f:
61:96:42:84:9e:66:b1:1d:b1:09:a8:be:5f:12:85:61:4c:fa:
41:e0:55:4a:e3:6f:fa:df:12:a0:02:bd:57:bf:0d:60:53:47:
6e:fc:d4:40:b3:01:11:b3:2c:ed:43:28:a6:d2:46:c6:be:27:
c0:6e:00:09:8d:a8:4a:04:72:27:83:04:b8:6e:2d:b8:b8:83:
76:04:76:b8:f7:42:c1:4e:e0:f1:f8:94:da:ae:68:1a:ce:24:
7b:a1:c3:88:bb:5b:22:34:d9:d6:6d:f2:fd:1b:2f:71:1b:b8:
7e:79:02:ba:3e:95:b9:52:c1:5a:07:39:cc:8a:27:f9:2c:0c:
cc:2e:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:20 2025 by rpki-client