Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5QkJDKBxC1Piczc4-8UDWZQM2Xc.roa
File: 5QkJDKBxC1Piczc4-8UDWZQM2Xc.roa (raw, json)
Hash identifier: HBFVkgEY1+BUtqmms/fRzZys4obVazNE6YWJPP7DibI=
Subject key identifier: E5:09:09:0C:A0:71:0B:53:E2:73:37:38:FB:C5:03:59:94:0C:D9:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DA60C33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5QkJDKBxC1Piczc4-8UDWZQM2Xc.roa
Signing time: Fri 25 Feb 2022 17:04:22 +0000
ROA not before: Fri 25 Feb 2022 17:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64:ffff:0:17f:31d7:3675/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839598643 (0x6da60c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 17:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e509090ca0710b53e2733738fbc50359940cd977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:d8:ab:24:f1:4e:48:8a:96:84:fa:0f:53:
8d:c9:fd:00:4c:b3:18:a3:ce:86:d7:e7:8d:81:d3:
f4:fb:b9:1a:2d:dd:82:54:fd:91:c6:4c:0a:60:45:
6a:95:dd:f2:3f:5d:d7:2f:6f:d3:60:40:0a:8a:a6:
e2:d4:5a:43:01:0a:84:30:50:18:76:bc:6c:7b:80:
bf:23:8d:10:68:82:7f:9e:76:1d:6e:a5:b4:24:5a:
69:09:9a:ab:b6:31:cb:45:36:a8:03:ee:fa:5c:3f:
6a:5d:e5:97:d9:1e:26:e8:90:2d:64:26:7f:f5:1a:
8d:75:c9:21:57:0b:67:f9:df:11:a4:cb:36:5e:50:
93:74:f3:ee:b2:8a:51:fb:b4:c2:b2:68:07:e8:69:
0e:ab:be:6e:e6:97:74:83:bc:dd:e6:72:20:c5:23:
26:85:bc:08:bf:e1:cf:eb:93:aa:54:5c:51:dc:40:
f9:a9:40:5d:df:f8:70:36:09:6c:da:57:05:96:fb:
c1:b1:b1:e1:5e:22:d0:02:b3:1b:86:74:13:c4:57:
ac:66:e4:22:bb:69:dc:88:b1:27:a0:e0:6f:c7:6e:
9c:00:59:6c:e9:35:6b:94:1d:54:59:dc:22:9d:c8:
3d:35:df:7f:97:72:7c:48:ca:b2:06:74:31:66:76:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:09:09:0C:A0:71:0B:53:E2:73:37:38:FB:C5:03:59:94:0C:D9:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5QkJDKBxC1Piczc4-8UDWZQM2Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:f1:b8:57:af:ac:63:a3:d7:44:07:f2:65:88:93:e8:ba:6f:
10:cc:54:1c:52:87:51:29:55:bc:04:49:da:b9:5c:f9:3c:83:
12:95:5e:2c:e0:2d:22:c5:b1:62:ab:b5:42:52:74:26:10:d1:
5e:5b:9b:5b:25:75:26:8d:57:ec:e2:db:a3:51:ba:f4:89:01:
85:1a:57:df:45:3f:5d:5d:0d:11:88:87:6b:3b:79:a6:a1:32:
8a:17:f9:87:51:10:30:e7:bf:f5:91:c3:d2:8c:d1:8e:4c:05:
4b:91:cf:82:e8:45:0f:bf:cb:56:33:4e:2d:a6:a6:e8:00:05:
3d:7a:ed:76:b7:75:2e:d2:d2:28:3d:de:ee:41:19:a3:d1:e0:
cc:8c:75:2f:48:61:6b:5b:0f:c9:09:49:7b:65:7b:68:c4:ad:
fa:d8:39:d4:2a:1a:6f:dd:68:1b:e5:80:06:98:46:1f:c0:2a:
d8:2b:5e:ce:bb:41:16:76:44:08:b1:38:a1:98:db:2c:ec:80:
06:9e:fa:a2:7a:55:d3:ba:cc:c4:f2:af:0b:82:95:40:5c:cc:
7c:44:06:f9:a4:dd:6e:17:32:36:5a:ff:88:51:e4:4b:10:21:
1f:86:84:4a:64:05:32:4c:13:f1:25:de:1c:95:23:9d:6f:a4:
d8:ae:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:27:35 2025 by rpki-client