Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5cRKT3BvH2P_HhvOnClZjMSCick.roa
File: 5cRKT3BvH2P_HhvOnClZjMSCick.roa (raw, json)
Hash identifier: fmPjWwrC1SaDPB+yrTEa56JvE+FlMBPLGJAHBGSrJ+I=
Subject key identifier: E5:C4:4A:4F:70:6F:1F:63:FF:1E:1B:CE:9C:29:59:8C:C4:82:89:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185112E2229B4E79153B127B82D0E2BA21D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5cRKT3BvH2P_HhvOnClZjMSCick.roa
Signing time: Wed 14 Dec 2022 15:08:34 +0000
ROA not before: Wed 14 Dec 2022 15:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:2e:22:29:b4:e7:91:53:b1:27:b8:2d:0e:2b:a2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 15:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5c44a4f706f1f63ff1e1bce9c29598cc48289c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:7e:32:b0:ad:87:b5:09:b0:70:a4:9f:fa:
1e:0e:60:1b:6c:11:db:8a:68:86:53:7d:9b:77:7f:
69:2f:e0:d2:87:0e:b7:88:73:b5:a5:1a:16:3e:d1:
b0:98:b3:9f:5b:ce:f5:83:8f:1a:75:25:87:c8:2e:
06:ae:98:fa:2b:b7:03:7f:d2:88:06:78:dc:05:ff:
70:66:a0:f5:b7:3d:18:41:b3:0a:2c:ef:c4:2d:af:
cb:91:14:9d:63:87:50:dc:94:97:86:b3:4a:f6:fa:
7c:fa:e6:70:b6:27:7f:fe:b7:08:51:15:24:7a:b5:
d6:55:a4:8e:6d:53:f3:6f:24:fa:ae:e3:e0:9b:11:
8b:61:a3:9a:36:dc:f7:fe:1d:ab:73:ef:22:07:b4:
30:cb:f7:30:59:0d:48:88:10:f3:1a:42:36:b6:fe:
00:cc:8b:e5:b8:30:4d:97:d8:36:ff:cb:04:7f:54:
d8:8b:4d:84:66:11:62:ac:86:76:66:05:b4:b4:a3:
3d:3a:38:5e:7f:49:b4:d7:7c:8c:d4:25:f8:b5:27:
1b:dd:34:ab:77:8d:ee:c3:e3:f7:a9:71:cf:13:40:
d0:b7:58:70:0d:0f:5d:bc:3b:32:9a:90:fa:54:b0:
be:21:22:c3:0f:73:54:86:b6:19:f1:e6:6d:98:8e:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:4A:4F:70:6F:1F:63:FF:1E:1B:CE:9C:29:59:8C:C4:82:89:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5cRKT3BvH2P_HhvOnClZjMSCick.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:4d:0b:66:52:c6:e7:ee:0b:3c:56:a9:c9:03:a9:a2:91:91:
60:ee:01:1a:fa:f8:b8:35:68:85:0b:11:98:a3:46:ce:8c:77:
6c:df:e1:38:33:47:c1:ae:03:a0:af:1a:e4:20:0a:26:0e:3c:
17:10:a3:da:05:a3:2b:0c:8e:1b:b3:20:72:9c:94:80:5f:84:
b5:70:70:8b:6e:d0:f5:26:d6:43:bd:de:06:6d:aa:73:ec:47:
9e:c3:94:cd:c3:48:a4:26:86:7a:f3:fd:1d:98:b7:5e:ab:dc:
c5:b5:c0:fc:88:8f:11:19:3c:3c:89:2d:12:76:be:23:d3:93:
3e:5c:81:b3:fa:f6:27:50:aa:52:be:52:ec:60:c0:e9:a6:49:
b3:79:48:e8:69:5f:a2:cd:c0:f3:c7:76:03:8d:aa:a7:72:d2:
f6:a3:10:2f:c0:43:03:b8:c8:1d:8e:f5:7f:f3:2f:d1:b4:76:
3b:a8:ac:80:70:ee:47:92:28:da:e5:12:db:92:91:cb:30:7f:
33:83:d9:7f:70:c2:17:20:61:aa:62:83:25:b9:e5:8e:04:68:
8b:18:34:b6:6d:b7:74:84:13:13:16:a4:84:62:ef:2a:ab:0e:
cd:1f:49:ba:46:eb:3a:4a:f4:52:1e:18:80:d1:2d:64:2a:09:
8e:a3:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:29 2025 by rpki-client