Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5_S9iFPDbIGwoMDgHSdwImOsWVw.roa
File: 5_S9iFPDbIGwoMDgHSdwImOsWVw.roa (raw, json)
Hash identifier: EfrevF/VakPQ7Jcmuj9pNThPVQ53u0+N4OPy2zUuRnA=
Subject key identifier: E7:F4:BD:88:53:C3:6C:81:B0:A0:C0:E0:1D:27:70:22:63:AC:59:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E3A6C177525CD2986EBBB6BD361B664B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5_S9iFPDbIGwoMDgHSdwImOsWVw.roa
Signing time: Thu 22 Jun 2023 15:08:56 +0000
ROA not before: Thu 22 Jun 2023 15:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:a6:c1:77:52:5c:d2:98:6e:bb:b6:bd:36:1b:66:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 15:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7f4bd8853c36c81b0a0c0e01d27702263ac595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:bc:cc:ed:6b:c9:b9:23:40:c5:c8:71:fc:
2d:3c:95:0d:50:28:9d:67:42:84:95:42:8e:57:e8:
39:61:e6:44:cd:23:e5:ea:a2:d3:dc:c4:75:f6:bd:
99:8f:82:00:09:30:86:28:1d:4c:17:bc:9c:ba:ce:
1b:ac:5f:1d:71:0a:7d:64:22:4a:c6:f5:51:5e:e6:
bf:e7:42:ae:25:36:b5:6c:a3:bd:c6:0a:bd:85:1c:
0a:71:15:fc:0d:ef:60:f0:e4:11:a6:84:bd:a9:fa:
a9:cb:a6:67:ba:20:d4:5c:43:71:4a:25:07:91:48:
0b:b9:92:ad:cc:e6:63:0b:70:08:46:fb:e7:03:28:
a7:64:71:07:56:a4:07:94:f8:d8:37:fc:f8:28:5e:
ef:41:9c:2f:97:ce:1a:55:7b:82:ff:a7:c5:b2:e9:
0d:c3:b5:60:05:ca:f8:67:99:70:cf:1b:19:45:5a:
bd:9c:e5:b9:06:dd:c3:88:75:52:c5:d7:e3:76:3f:
b4:38:80:f5:9a:01:2d:36:b6:1e:00:13:d0:d0:9c:
f7:28:4b:64:b7:53:e5:f2:1b:44:47:ed:85:a1:b3:
71:1d:fa:f4:27:57:f2:85:de:9c:5d:19:22:70:00:
75:20:28:26:ae:de:a3:33:3d:b2:a0:67:79:9d:19:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F4:BD:88:53:C3:6C:81:B0:A0:C0:E0:1D:27:70:22:63:AC:59:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5_S9iFPDbIGwoMDgHSdwImOsWVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:91:57:d9:df:0c:67:56:99:60:90:5a:3d:8d:ed:bb:17:aa:
96:61:1f:65:ab:6a:2c:d0:57:6a:20:e2:26:db:d6:5a:5a:a9:
bc:9f:5c:c4:bc:cc:a2:eb:e9:43:e2:02:a6:35:64:77:3d:97:
9c:19:d4:63:cf:0a:f1:54:1e:8f:d4:bd:7e:3c:fa:e0:a1:f4:
8b:06:37:b9:37:bd:e0:8e:10:b1:76:83:cf:ce:6e:3b:25:5e:
b0:b8:5e:00:0a:a7:0a:08:10:c5:f6:0c:9d:24:dd:95:85:39:
4a:d0:5d:25:3a:78:25:43:d7:15:ed:a8:a0:87:95:66:75:e6:
00:55:06:2e:26:e3:9c:46:03:57:31:d1:33:83:ab:3b:f5:c2:
e9:a3:9d:26:1e:c8:15:d1:90:0b:b8:63:05:c7:40:72:95:b6:
ca:57:ef:a7:ad:65:fc:1a:bd:ff:ca:bf:fe:b2:a2:d9:1d:80:
b9:93:4e:d0:4f:27:c2:f4:a8:22:9c:0f:46:11:72:f7:75:c4:
e3:ff:dd:10:f7:54:54:06:d8:49:17:7e:7e:c2:d9:3d:1f:6a:
20:c3:dc:35:74:20:87:ed:95:a6:ac:0f:f4:8d:63:47:87:4e:
e2:a3:7e:5d:95:3a:9d:cd:18:4f:29:d1:a7:1b:87:3a:ec:50:
a5:96:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:50 2025 by rpki-client