Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5LrRy-JC3Rx3KxxU3305RG215pw.roa
File: 5LrRy-JC3Rx3KxxU3305RG215pw.roa (raw, json)
Hash identifier: L3HKczFfWQV825kTTroguvMlE57P1hOV6YQuIUhhEYI=
Subject key identifier: E4:BA:D1:CB:E2:42:DD:1C:77:2B:1C:54:DF:7D:39:44:6D:B5:E6:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018570394FAF7EA5FA893A399EA5B0C20502
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5LrRy-JC3Rx3KxxU3305RG215pw.roa
Signing time: Mon 02 Jan 2023 02:04:42 +0000
ROA not before: Mon 02 Jan 2023 02:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:7038:e6a3/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:4f:af:7e:a5:fa:89:3a:39:9e:a5:b0:c2:05:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 02:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4bad1cbe242dd1c772b1c54df7d39446db5e69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:b8:ce:30:8d:25:14:0d:cb:08:f4:99:89:
d9:ae:2d:4c:e4:1b:f8:39:9e:5c:dc:a7:33:85:a4:
3f:03:94:ef:77:50:bb:79:57:ba:2d:f0:f5:24:84:
b3:70:98:f4:5e:ca:00:c1:e9:17:02:7f:82:57:10:
94:7f:55:35:1a:c2:2b:98:95:8b:b9:95:a5:80:06:
01:d1:16:95:c5:d0:08:6c:0b:2c:d8:d6:fe:1c:4b:
af:a6:ea:6d:db:7d:4f:f7:5a:fe:26:72:fd:a5:32:
18:cb:e1:44:5b:73:a4:1f:0c:16:e5:3f:3c:b2:35:
fe:02:0e:2e:88:b9:15:3a:65:50:70:00:f1:fd:6c:
68:84:10:b3:fd:ec:45:3f:c4:13:9b:d9:c0:ef:60:
d6:4a:76:be:01:f5:62:4d:e8:93:04:0b:f6:8c:26:
fb:56:61:4e:f7:5c:73:9f:70:d2:14:fc:be:91:98:
cf:26:8d:60:32:09:cb:58:af:ee:65:16:20:95:96:
c1:a3:53:0d:35:5f:e4:09:32:33:a7:ba:3a:58:c2:
f9:4f:c7:fe:cb:dd:08:a6:ab:6f:88:50:0c:d3:81:
32:d2:c1:b9:34:a0:63:e4:b8:af:3c:26:2e:0a:48:
c6:4d:d8:eb:95:c5:f1:e5:a6:7d:f2:fe:b9:8b:6f:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:D1:CB:E2:42:DD:1C:77:2B:1C:54:DF:7D:39:44:6D:B5:E6:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5LrRy-JC3Rx3KxxU3305RG215pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:2e:48:13:e2:7f:a5:d6:2c:26:2f:2f:4b:22:d1:42:cb:15:
41:eb:94:12:94:a3:5c:ee:20:0e:f5:df:11:e3:90:5f:b8:98:
9f:c3:c5:b4:85:75:6a:67:f1:a0:33:56:67:ca:c1:8e:fc:7a:
32:5a:c2:97:4d:0f:55:11:a2:d9:a7:47:c4:f4:c8:c5:7e:c5:
45:3c:f6:24:f7:69:85:39:59:ab:f4:ad:07:cc:eb:7f:85:b9:
58:bf:dd:c0:2e:48:7d:b7:05:ce:89:24:a1:ba:e6:c7:05:da:
eb:25:5e:01:cf:05:91:f2:af:4d:b9:97:a4:ff:30:30:4a:99:
79:00:67:1c:5e:ac:a8:d7:ff:24:f8:e7:80:6e:80:13:1e:b0:
d4:02:3e:8b:db:bb:e7:00:0b:f5:87:37:d3:9a:f4:05:69:05:
76:0b:a2:ba:38:91:36:42:4e:de:15:1c:24:2e:bd:69:7a:ed:
33:d7:87:52:44:ec:8b:02:3b:25:b9:0e:f4:e2:d8:65:26:92:
ae:8f:0a:02:72:c6:bd:2f:19:90:58:15:45:12:fa:00:14:40:
df:65:85:18:fc:83:5e:94:a9:a4:a4:81:e7:63:de:2a:0d:18:
ab:a0:1c:03:a2:a5:f1:e9:e9:cf:e2:2a:10:e3:5e:5d:cf:b1:
74:54:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:04 2025 by rpki-client