Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MJ9GdUQtNEhyOhBzQQDSNgnwyQ.roa
File: 5MJ9GdUQtNEhyOhBzQQDSNgnwyQ.roa (raw, json)
Hash identifier: QoJvzJU66xNyDQ90e3iVRmqbLM1VID5lez7QXy1Zujg=
Subject key identifier: E4:C2:7D:19:D5:10:B4:D1:21:C8:E8:41:CD:04:03:48:D8:27:C3:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B8CC9601D9BE231D46E98A9CAC9C7BA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MJ9GdUQtNEhyOhBzQQDSNgnwyQ.roa
Signing time: Mon 06 Mar 2023 21:21:00 +0000
ROA not before: Mon 06 Mar 2023 21:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:cc:96:01:d9:be:23:1d:46:e9:8a:9c:ac:9c:7b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 21:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4c27d19d510b4d121c8e841cd040348d827c324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:4f:b7:be:5b:7c:d0:0e:ac:86:dd:23:96:
27:9b:e0:d2:92:4a:04:5c:fe:cf:b1:5d:cc:bd:82:
74:f7:e4:84:14:70:0a:14:e2:d0:f8:2d:06:6d:c1:
b8:c5:34:37:ef:96:c1:7e:b3:aa:44:67:ab:5c:97:
86:01:fb:e6:6a:8e:73:ec:c7:d5:f3:72:d8:ea:1d:
e1:5d:0b:77:8a:6e:3a:b3:08:e7:39:e6:26:04:34:
fa:b1:90:8c:0c:64:b6:05:69:ce:07:a1:54:88:f1:
92:8d:9a:e9:b2:63:f7:d3:d1:0a:a0:e2:54:b2:e7:
ff:0f:8b:1e:a0:44:40:6b:72:6c:c7:41:af:26:21:
25:13:d1:01:9c:67:7a:31:d2:dd:5b:d0:29:95:14:
e4:47:ff:fc:b5:9a:88:7b:be:4c:f4:12:02:c1:a3:
4e:8e:5a:68:f8:1e:10:0d:83:40:4a:fd:31:9d:75:
d8:4d:0b:e2:a7:16:e1:74:6a:76:dd:ce:de:86:a9:
86:1d:e7:41:12:e5:25:b4:9b:cd:8b:15:2d:01:c3:
23:d5:5c:c5:4c:1a:5a:80:1d:55:9f:11:40:73:1e:
46:d8:65:d0:4f:6d:34:04:dd:a8:a6:f5:72:3b:b2:
f8:63:0c:b3:23:78:e7:a9:47:02:c2:29:a8:d9:ca:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:7D:19:D5:10:B4:D1:21:C8:E8:41:CD:04:03:48:D8:27:C3:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MJ9GdUQtNEhyOhBzQQDSNgnwyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:f3:6e:f3:96:54:4c:c9:c1:1f:40:2e:fb:d6:0e:ad:87:1a:
db:a4:13:e0:07:34:83:04:37:59:49:f2:8c:cc:86:11:7b:72:
98:3d:ae:ab:da:2d:96:fa:ae:17:ca:4d:3d:bc:04:4d:59:5b:
a2:31:f6:f5:d0:48:ef:1a:21:8e:da:28:98:d4:04:7a:04:22:
ed:79:16:a6:7c:86:5c:e8:83:13:3e:1b:7a:58:02:78:94:c5:
e5:f7:15:24:89:48:8a:21:2c:d0:a8:1d:91:f3:8f:4b:bb:24:
5f:61:d9:db:ab:4e:5f:11:83:52:80:df:f5:6e:ec:20:02:53:
52:6f:e7:a4:d6:2d:b9:29:fd:16:ce:2d:4e:9d:86:02:ba:57:
a1:52:e5:ee:35:4d:61:40:9c:47:a4:0c:53:16:a1:b1:be:00:
ef:7e:9b:35:17:d6:9f:0e:e8:a3:3d:13:22:e2:b9:ed:77:2c:
f4:e5:83:2f:ac:06:a3:86:18:a1:30:35:58:dd:21:6c:29:6e:
aa:08:47:c2:bf:91:85:bc:ab:33:53:a9:2d:07:45:2c:55:b5:
24:ba:f8:95:2d:15:e2:b8:49:86:8a:ae:8c:ee:51:6f:10:99:
37:b9:35:3e:cc:11:7e:e0:f1:b5:b1:69:9f:07:ed:f6:dd:6e:
3f:06:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:22:10 2025 by rpki-client