Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5PzTAwnhSGfhENsk_Z6MJ9S2ZVw.roa
File: 5PzTAwnhSGfhENsk_Z6MJ9S2ZVw.roa (raw, json)
Hash identifier: K256vuqABEpXvqiOD3cG/PQUj8GjO+SwxpihlnfiTsk=
Subject key identifier: E4:FC:D3:03:09:E1:48:67:E1:10:DB:24:FD:9E:8C:27:D4:B6:65:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879409C723A86B0D0512125B6F1254F124
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5PzTAwnhSGfhENsk_Z6MJ9S2ZVw.roa
Signing time: Tue 18 Apr 2023 11:04:41 +0000
ROA not before: Tue 18 Apr 2023 11:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:9409:835f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:09:c7:23:a8:6b:0d:05:12:12:5b:6f:12:54:f1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 18 11:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4fcd30309e14867e110db24fd9e8c27d4b6655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:bc:ef:92:9f:29:61:44:0f:dd:42:02:9d:
f6:f2:44:cc:ef:f6:72:df:34:f1:df:6a:90:14:5e:
05:24:69:c0:42:91:10:d2:38:8f:43:db:9a:97:21:
50:ae:a4:dc:28:85:04:05:e3:92:67:f6:e1:a5:20:
b5:cd:4e:fd:e6:8b:06:ef:c1:14:b1:8d:77:d7:35:
28:85:7c:d5:fe:df:d4:ff:19:f9:a2:0b:bc:da:38:
a0:b2:09:df:d1:28:8a:ee:9d:b5:1a:e3:ca:8f:3e:
4e:2f:8d:af:cf:53:95:ba:11:00:43:37:6d:5d:bb:
43:5e:41:b0:a2:c8:c1:3a:62:91:98:d7:a5:23:1f:
b6:41:ff:64:e6:3c:98:eb:2e:63:bd:20:1f:79:df:
7f:8e:71:24:2d:de:32:8a:2d:ab:d5:2e:af:55:82:
e6:65:d3:35:b6:f4:45:1c:d8:5b:41:fc:8c:a1:1c:
d3:1a:7d:cd:cd:a5:68:36:01:d2:81:97:dc:db:f6:
7a:c1:45:c7:45:0b:9f:b3:0b:0e:cf:f6:5c:e1:44:
cf:38:e5:17:c4:77:3a:ee:a1:d8:e7:b1:3e:7e:a3:
fd:b9:d4:a2:a2:d4:99:11:79:20:db:76:39:0d:c1:
7a:96:54:1b:e5:80:95:9e:a8:a7:35:ea:21:f2:05:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:D3:03:09:E1:48:67:E1:10:DB:24:FD:9E:8C:27:D4:B6:65:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5PzTAwnhSGfhENsk_Z6MJ9S2ZVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:fa:9a:29:5c:02:52:bc:86:fb:31:81:31:ec:57:a0:90:41:
93:64:c6:ae:8d:8b:0f:34:4b:64:cf:75:09:ec:a1:fd:5a:1b:
56:92:6c:f0:d5:76:a0:a9:91:66:db:fe:06:a5:1b:45:d5:20:
d0:e1:73:e4:0f:fe:75:67:df:6b:5a:d7:a4:d1:59:08:d7:14:
1d:63:27:6d:51:46:5e:43:43:a3:a2:8e:09:1e:d4:0c:9b:e0:
07:c9:63:e9:5f:ec:09:a8:25:75:5c:c2:3a:5e:13:be:6d:3b:
02:d6:e5:ea:57:a4:4e:51:bb:41:51:1b:7c:83:47:a9:ae:95:
e9:f9:f5:bc:95:e8:85:2e:14:8e:a0:a5:8b:6a:f4:9a:d2:8b:
ca:b3:af:31:a3:3f:de:23:9a:a1:48:20:c8:d8:d6:b0:df:a1:
40:69:c9:58:e0:8f:f6:da:cf:f7:e9:03:0f:20:6d:87:5d:de:
f4:23:90:ee:41:83:15:59:08:e0:67:00:6a:81:6b:21:ae:1e:
1c:42:f9:3c:0c:98:66:53:62:72:ab:7e:6f:73:ac:63:2f:73:
86:99:97:a0:12:e5:3f:0c:a4:4e:93:39:71:89:6b:de:24:fc:
57:67:26:9d:f8:2b:28:21:a9:52:0a:7a:fe:96:e8:4d:2c:96:
14:f0:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:34:36 2025 by rpki-client