Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5GcpsZBWxM_76WGmULjsVg2KUaA.roa
File: 5GcpsZBWxM_76WGmULjsVg2KUaA.roa (raw, json)
Hash identifier: VRlFsD0XdnBXkudCsSPpl+m8M+inn9fkg6a0BQ9b+rs=
Subject key identifier: E4:67:29:B1:90:56:C4:CF:FB:E9:61:A6:50:B8:EC:56:0D:8A:51:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A178D84F7FE56A962BB3F3AE3FA0FD950
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5GcpsZBWxM_76WGmULjsVg2KUaA.roa
Signing time: Mon 21 Aug 2023 10:04:25 +0000
ROA not before: Mon 21 Aug 2023 10:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:8d:84:f7:fe:56:a9:62:bb:3f:3a:e3:fa:0f:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 10:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e46729b19056c4cffbe961a650b8ec560d8a51a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:46:f7:2f:4c:04:54:a1:f1:6c:13:e7:6d:
a7:20:09:ae:e9:80:34:47:af:e5:b2:42:85:52:0e:
6d:d9:a4:dd:24:b5:9a:14:3f:11:ca:76:3b:7b:dc:
5a:13:36:0b:c4:d2:38:f6:36:1b:70:f4:fb:b6:75:
ad:e8:ae:d1:a0:df:58:78:a1:7f:c0:3f:f0:85:b5:
3a:5d:b5:0d:9a:09:13:59:c5:d2:66:c6:36:58:b4:
fb:60:5c:ca:80:cc:ad:77:65:ad:ee:62:0f:e0:ef:
e6:a9:87:51:fc:77:49:85:a4:ee:fb:38:66:9f:35:
77:13:94:78:68:12:c8:31:f6:84:60:c8:15:0d:37:
4f:47:f6:4f:c7:b1:27:83:cf:99:82:00:b7:35:67:
39:cc:60:96:ff:1d:96:8a:5f:82:f5:c0:31:44:59:
88:33:53:4b:34:41:70:b0:be:ff:dd:dd:c3:a6:91:
d9:c4:aa:e9:a2:ba:5e:e3:3a:b3:00:0e:56:80:9c:
54:53:96:6e:92:90:33:ff:43:8e:de:ab:e8:57:03:
6a:54:a1:0a:45:79:ab:d4:d6:e2:08:14:e7:0d:cd:
a1:c4:e6:ae:59:3c:98:2c:18:6f:f3:88:82:22:e6:
45:20:09:c8:bf:fd:fc:0b:96:00:40:5a:35:8f:15:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:29:B1:90:56:C4:CF:FB:E9:61:A6:50:B8:EC:56:0D:8A:51:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5GcpsZBWxM_76WGmULjsVg2KUaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:9d:ba:c8:3b:6a:40:b4:2e:e6:0e:09:48:e2:7e:5b:67:b0:
57:de:8a:71:8b:8f:51:d2:4f:74:61:dd:c1:c7:8c:ec:03:a6:
6b:db:08:76:eb:51:2a:1b:81:96:f6:6f:c6:41:38:2d:b1:c9:
c7:ee:6a:6d:85:d0:00:42:1f:13:6c:dd:15:21:79:4f:8a:94:
20:fb:f6:56:49:1c:e3:b3:64:42:68:9c:22:9f:2b:91:9f:9d:
66:a0:d5:ed:b0:81:92:13:f6:d9:ae:d0:ef:c4:f4:94:31:9d:
d3:1c:a8:b8:69:18:b1:84:a9:10:e8:4d:7c:94:b1:51:b1:b9:
bd:c5:5d:b1:34:cc:8d:a9:d0:e9:84:85:fa:86:37:79:bd:f5:
16:8f:2c:61:f8:77:5c:fb:fa:96:8d:ca:74:e0:fe:7c:0e:26:
e6:77:bd:bc:2a:93:f2:ac:56:74:f4:ec:09:de:43:08:29:c1:
19:18:00:64:35:2b:36:44:d5:79:59:4d:49:22:89:d5:38:32:
86:61:f4:cb:44:b7:1d:77:da:f6:4c:59:8e:48:99:ac:ad:a8:
61:a7:b1:d0:d2:d2:56:76:4b:0e:c3:75:6e:1f:7d:d1:9d:34:
e2:c4:df:f6:96:82:a6:cc:a3:ec:e0:f5:d2:47:0a:84:69:70:
42:9c:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:34 2025 by rpki-client