Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ZRxMRN5mEuJdn36LCY5DqkcgkU.roa
File: 5ZRxMRN5mEuJdn36LCY5DqkcgkU.roa (raw, json)
Hash identifier: Y5/VOqqJRmvTuDhCPdE8eF/2KvMUZL5SdmzLK8rYfpI=
Subject key identifier: E5:94:71:31:13:79:98:4B:89:76:7D:FA:2C:26:39:0E:A9:1C:82:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88A1B03F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ZRxMRN5mEuJdn36LCY5DqkcgkU.roa
Signing time: Tue 31 May 2022 05:09:13 +0000
ROA not before: Tue 31 May 2022 05:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292297791 (0x88a1b03f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 05:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e59471311379984b89767dfa2c26390ea91c8245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:7a:7f:ee:c2:14:dd:ad:0d:cf:03:42:34:
57:58:03:66:5c:27:a5:e8:d6:bc:c6:0b:04:6c:4e:
a3:7c:eb:c9:f4:0b:29:4b:d0:93:6f:aa:f7:5c:01:
6d:a1:de:53:7a:4b:ba:ea:fb:bf:f2:ed:a4:02:af:
ca:17:55:7a:a9:bb:02:c8:4a:72:ad:3c:7c:4d:88:
67:54:2b:27:59:c0:3c:8e:95:e7:8b:26:72:2c:c1:
7d:87:95:08:ef:5c:aa:2c:7b:90:49:1d:5c:ce:3a:
89:db:65:25:8c:1e:69:6e:7b:d7:b0:64:27:52:5c:
c1:a1:bd:8b:9f:fc:88:3a:91:da:68:61:ce:14:71:
24:01:8c:6a:c1:0a:b9:b9:57:c7:24:85:a8:99:84:
f7:d0:3a:0b:9c:80:48:49:c4:eb:fb:56:fe:1c:60:
36:b2:28:d1:4f:cf:2c:9f:0f:d2:32:e5:55:d2:d6:
17:37:03:ef:c5:45:8b:d3:d4:01:be:0b:b5:a2:87:
ca:11:95:17:2e:4e:11:34:bf:ec:77:86:82:fa:a5:
4e:14:63:37:23:56:3f:c9:a8:9c:82:94:b7:07:ee:
31:50:cb:c0:ef:da:80:8d:cf:a6:80:35:96:e2:7d:
66:b0:02:be:89:12:81:48:27:00:cf:5b:89:a7:4a:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:71:31:13:79:98:4B:89:76:7D:FA:2C:26:39:0E:A9:1C:82:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ZRxMRN5mEuJdn36LCY5DqkcgkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:e8:49:9a:36:6b:cc:f4:21:ef:ef:6e:5b:b8:cf:90:24:d3:
3b:a8:85:10:9d:8f:5b:27:7a:48:75:04:0e:1a:a3:e9:3f:a0:
c3:9d:9c:26:74:28:43:34:d2:b3:38:0b:ac:6d:60:ff:3b:1c:
cf:70:a9:a0:1c:8f:5c:a8:c2:ae:a1:08:31:1b:b6:44:06:89:
fc:37:a2:6f:2f:fb:d0:00:a6:ff:f0:0b:68:4a:12:75:d0:28:
e5:92:87:b7:8e:ee:24:e5:25:a3:66:bc:e1:5b:4c:a4:19:9e:
e5:d6:51:1e:97:0f:67:12:e6:89:46:f7:28:13:bd:c9:28:c4:
7e:54:57:f3:bd:10:bd:3f:5b:2f:8c:52:42:c6:95:bf:8f:38:
80:81:cf:87:74:d5:25:c1:2f:1b:2d:55:13:93:96:3d:c5:b3:
2d:1e:26:ed:13:90:51:98:df:2d:b8:69:14:d5:21:3d:b1:20:
c6:ae:73:ad:fc:3e:2b:5c:ae:2c:e5:72:7f:57:9a:c5:94:5a:
92:66:ff:62:38:b6:f7:5c:21:3d:ef:2f:fe:47:28:3a:ec:12:
e0:e2:f6:ac:3b:b2:00:29:f4:c7:f3:9f:0d:df:a2:18:e7:c6:
c2:78:c2:0f:3c:18:e1:ad:d9:4b:e1:b1:e7:cb:70:e0:ba:d1:
79:3d:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:57:17 2025 by rpki-client