Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5WkiVSnegSBcia47i5quSkET3lM.roa
File: 5WkiVSnegSBcia47i5quSkET3lM.roa (raw, json)
Hash identifier: 9h7fudBV10VyOE/Mqyk23Ag9LVnbouaMc2QzzDrX0b0=
Subject key identifier: E5:69:22:55:29:DE:81:20:5C:89:AE:3B:8B:9A:AE:4A:41:13:DE:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851D6B1455665F03A6944706F4783F5F68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5WkiVSnegSBcia47i5quSkET3lM.roa
Signing time: Sat 17 Dec 2022 00:10:34 +0000
ROA not before: Sat 17 Dec 2022 00:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1d:6b:14:55:66:5f:03:a6:94:47:06:f4:78:3f:5f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 00:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e569225529de81205c89ae3b8b9aae4a4113de53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:fe:bd:6e:54:b6:c8:90:79:58:4c:a9:eb:
1d:52:70:ce:00:04:0e:c2:a4:1b:7a:e6:c7:22:74:
3b:a9:b6:61:83:0a:7c:c6:42:aa:81:e3:9a:42:59:
3a:b2:00:1b:cb:cf:22:32:a6:aa:47:5b:9c:f7:49:
6c:f3:4e:07:25:e0:c0:23:e1:f1:08:30:a7:3b:38:
c8:da:d8:e9:b6:42:6f:9f:5d:33:1c:40:80:70:2d:
f6:68:d2:eb:bf:ec:7d:c9:0b:49:d6:2a:e4:f2:8d:
5b:6e:94:18:16:2a:70:cc:c4:d4:3b:d1:97:0e:bc:
fe:7c:bf:d0:a2:f0:28:88:2d:85:11:20:07:54:17:
c3:53:51:d6:4e:bb:14:89:65:a4:58:23:27:e8:3a:
98:c0:fd:fe:f1:5a:2c:49:bd:ad:1a:a6:e1:9b:3a:
e5:23:eb:55:c9:91:39:ce:e6:e7:a5:52:ff:da:c0:
4d:f1:63:98:3a:5e:98:da:26:c3:e0:e1:ea:ff:fe:
70:64:83:9e:8c:16:12:7a:e4:80:c4:22:5c:ab:74:
10:d5:6b:45:af:10:c3:41:e2:61:dc:f3:38:82:73:
8c:7f:77:0c:f7:55:7b:91:67:6d:67:07:07:6c:67:
b3:07:13:38:60:ac:79:1a:b0:f3:b8:ce:fd:4f:5c:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:22:55:29:DE:81:20:5C:89:AE:3B:8B:9A:AE:4A:41:13:DE:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5WkiVSnegSBcia47i5quSkET3lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:14:57:c8:53:bb:a4:9d:28:6f:13:c8:64:56:07:3b:43:7f:
25:b4:4a:63:ee:7f:a9:9c:d5:bf:28:43:a3:40:0b:99:cf:cc:
ab:6b:e1:98:69:60:dd:9e:f5:fe:e0:d8:e5:5f:26:5a:c8:7e:
0a:26:19:80:0a:f6:8f:fd:fa:fd:56:f4:a1:59:65:6c:92:29:
a2:46:0d:af:97:b4:19:d5:79:9d:b6:4b:02:6d:fd:63:13:c0:
45:53:c6:fc:49:47:46:92:d4:fe:fc:3e:d5:2e:10:cf:c2:74:
b2:f3:09:e8:cb:bd:64:31:13:e5:db:93:cb:0f:c7:bd:7a:71:
25:62:f6:f6:f2:a1:a0:f8:c9:8d:ee:fd:d5:05:fc:38:dd:1e:
00:c9:b6:6d:94:1a:59:27:3c:75:24:ca:61:46:8a:5e:d2:db:
ac:59:ee:b2:de:62:3b:13:a2:fe:5d:8e:89:0d:53:85:0e:46:
a7:33:6c:b0:2a:9b:42:0e:db:f1:21:04:4e:f4:30:e9:b6:f6:
8c:7d:1d:cb:c3:ef:c8:15:6e:69:fd:5e:34:23:59:da:06:74:
66:f9:82:1c:1e:80:b6:a7:ff:c4:07:10:a4:67:75:9e:41:2d:
52:44:d7:84:3e:e6:b0:02:e4:27:20:03:11:36:df:09:09:99:
a8:e0:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:08:17 2025 by rpki-client