Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5bfd7bv_FBrE2JRp1-kRrer1jUo.roa
File: 5bfd7bv_FBrE2JRp1-kRrer1jUo.roa (raw, json)
Hash identifier: s3kdBM25yZjRmHq8yMSHfsimQPrmMJrt0dBw0BuPK9I=
Subject key identifier: E5:B7:DD:ED:BB:FF:14:1A:C4:D8:94:69:D7:E9:11:AD:EA:F5:8D:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69375965
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5bfd7bv_FBrE2JRp1-kRrer1jUo.roa
Signing time: Wed 09 Feb 2022 19:13:29 +0000
ROA not before: Wed 09 Feb 2022 19:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765235045 (0x69375965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 19:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5b7ddedbbff141ac4d89469d7e911adeaf58d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:8e:82:e4:91:8d:87:bd:ed:d7:f2:9e:b4:
5d:d1:5f:b5:e5:b5:fa:be:b7:c6:f4:be:12:69:3d:
25:ff:c8:ca:b9:06:2e:76:c5:e6:b8:e8:21:3b:99:
d0:a0:e6:94:9f:b0:52:39:fc:e4:d8:97:13:d5:01:
4d:42:51:fe:57:09:66:f7:df:44:6e:90:3f:21:79:
7c:58:bd:88:6c:11:2d:d6:1e:5a:52:27:af:e1:d7:
b9:fe:4a:dd:12:6f:f9:ff:e1:76:3b:5f:e8:5b:60:
20:1a:ce:4e:e9:3b:f4:3f:33:f9:51:22:16:e0:e5:
41:e3:f3:04:5b:2b:cb:95:59:33:6a:dd:f2:27:ae:
6b:c1:88:5c:88:32:d1:e4:9f:a3:48:93:d2:78:45:
19:95:05:cd:e7:11:da:bc:6e:b2:56:91:8a:5f:9f:
fa:aa:05:ab:89:b8:ec:b4:17:3c:66:56:5e:5f:c4:
28:f3:ac:82:e3:a8:df:21:c1:89:8c:fb:28:a6:44:
15:e5:72:e2:d1:07:d4:89:7c:16:0f:6f:d0:e2:6a:
23:b7:f5:77:fe:40:f8:de:e5:93:3c:98:d1:30:3b:
cc:f3:f2:cb:95:e4:78:8a:84:95:88:c2:43:72:b6:
8d:9f:09:ca:24:36:c0:22:f4:d1:23:8c:66:3d:07:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:DD:ED:BB:FF:14:1A:C4:D8:94:69:D7:E9:11:AD:EA:F5:8D:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5bfd7bv_FBrE2JRp1-kRrer1jUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:68:d3:9a:48:8d:41:97:eb:bc:ba:31:97:3a:c6:9d:51:06:
51:18:73:fd:37:f3:37:98:54:44:12:97:64:1d:a1:d0:1a:1c:
1d:a4:a8:ed:b7:88:6f:ba:6d:25:21:81:56:4b:09:33:df:65:
7f:64:8b:11:7a:34:3e:86:5f:65:4b:0e:bf:5a:28:e4:d3:bf:
00:35:9f:7d:11:b9:f5:c0:cf:32:56:ba:9f:7b:b7:0c:de:59:
b2:28:cd:0c:7a:50:8b:4e:a2:e3:52:fb:41:76:b8:6f:0a:ce:
28:42:84:fa:4a:1f:9e:23:ea:26:be:59:2c:dd:da:ff:56:68:
27:17:67:0d:61:48:b1:b9:29:10:23:84:5a:42:cc:3c:0e:26:
7c:21:6c:60:b0:7d:4b:d9:c5:e9:46:79:c7:17:71:6d:93:6c:
28:ee:3e:4d:ce:a7:93:b0:16:6f:a6:75:c4:ba:98:b7:17:68:
97:f3:bd:85:1a:d1:b4:4f:e0:5b:0a:67:09:46:d3:ee:e9:8c:
3d:f1:90:92:9b:68:4b:40:f2:9b:2f:2e:e2:52:5a:1b:a2:31:
4d:9e:34:eb:ae:25:5a:67:90:b5:ac:84:80:10:f2:74:92:a7:
52:f6:ca:5e:59:de:c1:b0:8e:e4:5a:7a:2a:90:60:25:87:16:
9b:68:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:24 2025 by rpki-client