Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5c3XtTjKiO__9mF94FPR60vQ994.roa
File: 5c3XtTjKiO__9mF94FPR60vQ994.roa (raw, json)
Hash identifier: CStVeVHJlKHja/iIvrWMYR5/KWOEwamb52EuohdXZjE=
Subject key identifier: E5:CD:D7:B5:38:CA:88:EF:FF:F6:61:7D:E0:53:D1:EB:4B:D0:F7:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C1641B6877542925918D1EEDC7FD3E86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5c3XtTjKiO__9mF94FPR60vQ994.roa
Signing time: Tue 29 Nov 2022 03:17:54 +0000
ROA not before: Tue 29 Nov 2022 03:17:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:64:1b:68:77:54:29:25:91:8d:1e:ed:c7:fd:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 03:17:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5cdd7b538ca88effff6617de053d1eb4bd0f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:3f:46:f2:72:5f:05:c4:c9:6e:83:29:0c:
a1:ca:04:93:41:d1:2d:87:5a:66:9c:66:27:cb:5d:
05:af:c3:77:ef:ed:c6:9a:e2:ed:6f:ad:ef:7f:98:
07:bc:48:43:27:5c:25:7b:e1:06:ff:25:1a:86:9f:
70:df:ea:24:a7:b3:6c:49:cb:e3:08:c5:26:b4:8a:
30:79:35:27:1a:ed:51:3c:14:50:78:31:a1:a3:ba:
c9:ed:2d:d7:ec:c7:d2:a1:2f:72:62:ad:e2:0f:bc:
12:eb:07:82:c9:39:8c:e9:9a:5e:fe:16:59:07:8f:
af:3b:48:c0:e5:f1:8c:20:3f:43:47:5f:26:31:73:
90:bb:68:c0:54:75:7e:2b:d5:30:a3:87:99:8d:1b:
5f:33:ee:14:59:78:b9:85:ae:ab:6b:fb:b0:29:3b:
d5:9b:57:f6:64:23:7f:fa:b8:56:3a:3f:2b:d0:9c:
21:af:3c:4a:c1:52:b3:f9:42:9d:b6:7d:53:ff:98:
cf:dc:12:93:12:78:a8:7c:6d:f6:f7:fb:88:e2:d2:
c6:9f:59:9c:5e:19:ba:58:81:f9:b1:98:67:4f:73:
24:da:3b:12:4f:24:5a:a5:ca:c7:dc:21:06:62:6f:
87:e4:51:1a:9b:7e:a8:cc:1b:9f:52:40:1b:be:6f:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CD:D7:B5:38:CA:88:EF:FF:F6:61:7D:E0:53:D1:EB:4B:D0:F7:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5c3XtTjKiO__9mF94FPR60vQ994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:57:5a:52:04:cd:66:8b:76:a0:93:ae:a6:e5:9f:bc:54:c5:
ca:59:c8:05:13:83:f0:f8:2e:4b:c7:e4:b4:3e:59:61:bc:14:
40:fd:4e:2d:4c:30:90:92:a1:28:b9:ea:63:0f:c4:71:38:2f:
7e:dc:83:0d:25:66:7a:47:cc:70:cc:6e:f5:10:25:5c:5f:e4:
44:56:39:13:3e:87:0f:9b:69:e0:ca:e3:fe:23:16:ea:c3:5a:
a4:c1:74:59:47:e6:59:01:b3:1f:fa:cf:94:cd:82:6e:53:e6:
39:6d:9e:e2:d8:dd:de:15:c3:7f:fc:1a:94:fd:8e:9a:02:48:
37:da:41:8d:68:ac:de:10:c3:e9:95:97:9e:fb:68:6f:77:4b:
43:73:8a:d3:c2:65:5d:9b:f6:cc:68:fc:92:b2:30:96:47:3f:
7e:ff:b3:61:4f:e7:90:42:cc:13:03:ba:d0:f2:a2:9c:2f:e4:
5f:72:b9:c0:7b:82:19:ef:06:38:71:3e:53:7d:45:41:03:fc:
d3:f6:6e:db:1d:de:ac:ca:f0:ed:11:97:66:30:8a:7b:a8:a2:
a6:19:dc:88:0f:1f:92:c7:bc:5c:98:15:9c:42:37:60:b2:0a:
bb:05:69:36:6c:59:51:df:2b:95:c9:74:6a:c4:46:86:b5:1e:
6f:79:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:25:40 2025 by rpki-client