Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Suby2CbNeG5GmeHrvMK-P-kuG8.roa
File: 5Suby2CbNeG5GmeHrvMK-P-kuG8.roa (raw, json)
Hash identifier: rvifz3TixaTGml00d8c3hP3ow/mGB6AtJLAbrTpyfeo=
Subject key identifier: E5:2B:9B:CB:60:9B:35:E1:B9:1A:67:87:AE:F3:0A:F8:FF:A4:B8:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D65CB3B76CF6EA2B9572A976BB90B446
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Suby2CbNeG5GmeHrvMK-P-kuG8.roa
Signing time: Sat 21 Jan 2023 22:04:37 +0000
ROA not before: Sat 21 Jan 2023 22:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:d65c:7bea/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d6:5c:b3:b7:6c:f6:ea:2b:95:72:a9:76:bb:90:b4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 22:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e52b9bcb609b35e1b91a6787aef30af8ffa4b86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:92:c5:2b:d8:84:d5:16:b3:a0:9f:de:8a:
ad:6b:b6:8f:57:b1:47:20:0d:47:5d:f6:b1:5f:55:
b0:e4:89:a3:e7:aa:c8:b7:29:f4:54:d4:54:41:42:
9a:ac:ce:af:69:0c:ca:dd:54:a4:25:33:e2:b3:4a:
39:2b:07:8a:fe:a4:f5:95:5a:81:67:71:e0:02:b6:
da:07:bf:66:66:f4:43:1c:14:a1:a6:58:21:fa:20:
6c:ab:ec:c0:c8:d0:7c:fe:8c:ae:35:f1:b3:3f:94:
23:f3:58:23:4a:16:7a:f2:03:c2:97:d4:a1:3e:9c:
bd:1b:16:ec:74:c6:b5:6c:d1:52:2f:25:1d:40:5e:
f9:f2:b9:ed:fa:c3:de:aa:c6:3b:e2:9a:eb:84:3a:
e5:f1:f7:c9:fe:4a:1f:be:90:44:c5:c7:1f:15:ef:
10:cd:99:6f:10:8a:1a:09:26:e1:17:c1:88:30:87:
da:87:36:3d:e8:a5:99:45:2e:54:88:88:0a:8a:d9:
b2:55:17:dc:e5:61:72:da:5f:e5:49:c9:6f:78:00:
b2:7e:ca:c4:d7:1e:f8:dc:a9:35:c9:e4:fb:54:60:
a9:63:e6:1b:57:12:33:01:23:17:10:a8:b6:13:ab:
30:e5:ff:d4:8e:e0:b0:dd:76:a7:c9:8f:c7:1a:67:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2B:9B:CB:60:9B:35:E1:B9:1A:67:87:AE:F3:0A:F8:FF:A4:B8:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Suby2CbNeG5GmeHrvMK-P-kuG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:31:19:e6:1c:5a:cb:cb:b1:f6:e7:48:ba:23:85:b7:2c:69:
28:c2:5d:09:94:b7:49:fb:6b:63:d2:33:c7:46:7d:f3:39:ec:
85:98:3f:5a:71:7a:cf:9b:f4:04:c7:75:eb:1f:94:48:c3:93:
70:bc:8b:55:2a:db:2d:ac:ff:b7:ee:02:43:96:cb:a3:c7:42:
ae:ae:b0:77:46:43:5f:b0:12:b7:df:57:86:06:3b:43:75:59:
54:7e:02:db:1d:cb:8b:5f:e5:40:98:c7:42:82:d0:75:73:5c:
e6:ab:19:ba:17:04:86:93:e9:35:07:4f:57:16:88:dc:f1:9d:
bb:cd:bc:8b:cc:e6:c6:d8:f0:4b:fd:ce:66:6d:9b:e3:d5:ac:
d3:9a:43:3e:ac:d8:43:13:99:bd:cd:49:d3:d7:18:78:08:ae:
e7:23:c5:3b:f6:c4:52:5f:eb:9f:e2:af:69:12:95:b7:ee:49:
63:84:6c:dc:6d:11:dd:75:5a:46:66:a4:a7:39:ed:7e:e2:bc:
71:7b:21:16:69:4d:04:32:1a:d4:71:cf:12:cb:c1:ca:2d:b3:
54:99:38:2a:28:19:02:9b:23:26:ff:69:2c:c8:18:d0:47:69:
81:88:88:dc:86:02:8a:0c:17:f2:1f:80:9c:76:d9:66:d6:a3:
a4:15:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:38 2025 by rpki-client