Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5R1LshvVW-cASd96CxNEK2uoORA.roa
File: 5R1LshvVW-cASd96CxNEK2uoORA.roa (raw, json)
Hash identifier: QasfxcAkjsSHa1odub8gcCekxjjjof2SZxh1jjLj5NU=
Subject key identifier: E5:1D:4B:B2:1B:D5:5B:E7:00:49:DF:7A:0B:13:44:2B:6B:A8:39:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B6A7F45495C801D78EA6AD4B0B6BF7FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5R1LshvVW-cASd96CxNEK2uoORA.roa
Signing time: Sun 27 Nov 2022 01:16:11 +0000
ROA not before: Sun 27 Nov 2022 01:16:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b6:a7:f4:54:95:c8:01:d7:8e:a6:ad:4b:0b:6b:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 01:16:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e51d4bb21bd55be70049df7a0b13442b6ba83910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:c4:12:e5:2f:de:e8:18:f2:c3:23:9f:b7:
73:ad:05:3b:23:20:69:e5:f5:9a:02:4a:7d:b5:b7:
67:70:2d:f9:ff:5b:8e:80:5a:4f:9b:90:f9:28:dc:
9a:81:88:7b:07:b6:bf:77:17:0c:68:3a:b3:11:18:
fc:56:80:10:53:9c:92:58:b7:49:39:ea:9b:30:f4:
ef:a2:85:2b:32:aa:34:61:7b:07:2a:90:2f:75:60:
ba:50:4b:9b:b5:41:cb:de:aa:a2:dc:14:1c:3e:83:
f8:5d:85:8a:79:b2:a1:9d:5b:d4:a8:6b:f0:6e:28:
20:41:fb:22:f5:67:4f:b8:ec:4c:46:bf:54:6d:44:
ee:4f:0f:a5:f3:e1:c2:42:da:33:44:d9:85:d3:a0:
19:a9:8b:db:d7:f4:bc:0d:63:0c:1e:30:09:ca:30:
e3:54:29:b9:5c:44:0f:06:44:3c:d4:4f:be:93:5c:
4c:5e:e2:cb:1a:65:81:f5:ba:59:55:61:39:16:75:
39:1e:84:a0:d0:5c:9f:13:05:62:0f:c4:5a:1d:3a:
d6:ac:bc:23:94:07:a5:e7:ba:f9:0a:80:be:5b:c3:
69:03:ad:94:ea:6a:2a:42:11:56:b3:59:f5:8f:a1:
f3:a3:55:3c:07:eb:c6:48:08:79:76:74:08:56:23:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1D:4B:B2:1B:D5:5B:E7:00:49:DF:7A:0B:13:44:2B:6B:A8:39:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5R1LshvVW-cASd96CxNEK2uoORA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:37:9a:49:74:f2:70:83:9c:d9:03:f5:c2:37:87:97:1f:a0:
cd:8c:25:e5:85:72:56:14:13:83:28:a8:9b:26:42:54:2a:f8:
cc:15:6e:78:55:5d:27:37:ae:a6:b0:22:7f:0b:0b:5d:13:2e:
fd:c1:6b:fd:ee:e9:13:99:6b:f7:32:b3:2c:1f:cf:4a:3a:3b:
76:ed:9d:b5:05:46:8d:88:9e:66:b0:35:17:8c:b1:57:16:c9:
6c:75:71:7f:45:03:3b:c3:62:0d:f6:22:7b:f9:f0:e0:e1:13:
33:6d:06:ab:45:17:c3:fb:ef:ce:2f:1e:a9:23:46:67:44:40:
d8:5f:9a:3c:25:10:6c:71:68:54:27:90:64:54:7a:83:e6:c1:
36:fe:20:82:18:0f:4d:33:85:ca:1d:59:71:fe:02:49:8b:ba:
d9:7b:c2:01:01:fa:44:b7:c4:9b:78:47:d7:06:62:aa:af:5e:
03:89:a5:dc:97:cc:91:1f:5f:55:44:e9:06:68:3f:69:13:99:
b8:ac:55:fc:de:62:34:d5:de:d4:48:63:fe:15:4f:14:a6:56:
20:98:c1:92:9a:ac:03:6f:55:3d:f0:64:e7:6d:32:23:ca:19:
87:85:97:89:26:12:1b:bd:1f:9b:6e:99:4a:6b:75:18:d9:32:
ac:bc:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:37:15 2025 by rpki-client