Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ZhpL13Dx6pC7CsR4nh2rB_njeQ.roa
File: 5ZhpL13Dx6pC7CsR4nh2rB_njeQ.roa (raw, json)
Hash identifier: eb/hXBVwS2rVEi8C3O5ep7cF+URbql8eSqH+O+Z7AUM=
Subject key identifier: E5:98:69:2F:5D:C3:C7:AA:42:EC:2B:11:E2:78:76:AC:1F:E7:8D:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E569486D2D50C04C9EE4783C00D4B274
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ZhpL13Dx6pC7CsR4nh2rB_njeQ.roa
Signing time: Wed 15 Mar 2023 13:15:27 +0000
ROA not before: Wed 15 Mar 2023 13:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:69:48:6d:2d:50:c0:4c:9e:e4:78:3c:00:d4:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 13:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e598692f5dc3c7aa42ec2b11e27876ac1fe78de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:c7:25:16:3a:10:ca:42:1f:fc:92:bb:97:
23:21:69:11:f2:cb:35:26:4a:96:5e:88:61:6c:d3:
26:73:85:03:73:ce:3f:f1:75:de:a9:04:4a:dd:11:
66:bc:be:f4:d9:ca:1f:71:30:5d:db:2a:49:89:ab:
85:ab:5f:31:0d:9f:2d:35:93:42:c6:40:de:8e:b2:
c7:66:fd:cc:13:ac:af:22:2d:b1:87:13:db:83:e8:
6b:38:ba:40:1c:13:15:1a:3a:d9:fe:ed:9c:60:1a:
d2:7c:48:44:17:54:20:9c:e7:4a:fe:5c:25:eb:9c:
07:79:34:0e:02:c9:fa:ec:b4:ef:c5:8f:dc:1a:7c:
75:fe:9d:ac:f6:c3:30:1f:3a:fb:c5:f1:8a:56:e2:
2f:e4:1b:08:48:97:d1:90:86:87:e7:5f:8c:cb:a7:
a7:ab:f9:ca:59:0d:93:32:f3:18:ca:59:4d:2c:5f:
46:60:48:42:46:bb:91:9e:9a:72:92:4d:c4:06:f2:
95:79:48:32:ec:a7:db:83:35:52:bd:69:10:e9:b9:
76:5d:04:a7:48:ad:de:b6:45:fd:a2:80:6b:48:80:
78:71:13:19:a2:f6:f3:59:6a:7c:bc:93:c3:33:d7:
48:bf:1c:2b:c4:05:1e:a3:c2:71:d4:a4:91:82:ea:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:98:69:2F:5D:C3:C7:AA:42:EC:2B:11:E2:78:76:AC:1F:E7:8D:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ZhpL13Dx6pC7CsR4nh2rB_njeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:da:c8:eb:c3:db:78:a4:7b:e6:95:2d:f2:01:55:db:4f:21:
f8:83:79:db:1f:5a:58:d4:0e:2f:7d:33:8a:27:ab:73:db:30:
cf:9b:93:39:71:d4:39:44:78:aa:65:b5:a3:09:ad:b6:ef:7b:
4d:7e:f2:84:3b:a0:29:32:54:69:b1:8a:69:2d:6b:f8:ab:77:
d7:b2:bf:99:ac:b8:2f:fa:4a:cc:f9:6a:0e:d8:2d:bf:da:35:
e8:fb:1f:8f:84:30:c2:c7:a6:a8:cf:40:76:d5:d8:ac:28:99:
07:89:9b:fc:5a:43:d7:dc:d2:d7:be:94:52:b5:22:90:4c:c0:
3c:d8:1a:07:eb:48:24:86:1d:45:19:fc:c1:74:9a:df:b7:7a:
ce:99:30:c4:8c:b6:96:dd:e2:89:4e:e7:10:0f:7a:eb:64:66:
5e:15:36:2c:99:1c:8a:97:17:26:09:ca:4a:45:52:f9:74:19:
35:a3:f3:75:2d:e7:38:46:e8:11:5c:12:a9:ba:6e:dd:3b:28:
95:7e:7a:cb:5c:3b:42:7c:a0:db:73:18:d2:b7:6f:f2:08:81:
c5:7d:fc:72:29:16:05:ff:35:10:50:78:c2:8b:e1:e8:40:f6:
68:c8:0a:ad:63:5e:7f:3e:9e:bb:cb:27:11:59:36:67:21:68:
99:47:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:10:47 2025 by rpki-client