Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5eIYsNnkBKyJAPSFppk1uzyIexk.roa
File: 5eIYsNnkBKyJAPSFppk1uzyIexk.roa (raw, json)
Hash identifier: hRX75R4LmSqi6YO1v1boP7kKEsBHlWXBAZdylH+vuRw=
Subject key identifier: E5:E2:18:B0:D9:E4:04:AC:89:00:F4:85:A6:99:35:BB:3C:88:7B:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018873A68213497E297913D5CEFFAB41B770
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5eIYsNnkBKyJAPSFppk1uzyIexk.roa
Signing time: Wed 31 May 2023 21:11:12 +0000
ROA not before: Wed 31 May 2023 21:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:a6:82:13:49:7e:29:79:13:d5:ce:ff:ab:41:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 21:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5e218b0d9e404ac8900f485a69935bb3c887b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:25:35:17:99:35:f9:2f:ec:05:02:b1:b9:
04:cd:4e:3b:38:c1:18:9f:d0:3b:72:10:a5:6c:a6:
7f:0a:72:a7:3b:f3:7b:1f:a2:c0:62:0d:50:a7:d1:
73:3f:83:47:53:64:90:4e:aa:17:47:a3:5a:ba:e8:
0d:02:95:47:d5:06:08:20:83:4a:f2:71:8a:a4:af:
6e:89:3b:41:83:2c:b4:eb:9a:34:d6:0e:3f:88:c0:
fd:47:96:11:6e:9d:71:75:50:78:82:5d:18:ab:21:
91:a3:44:98:ad:e2:27:65:d3:34:f7:62:b4:ab:9a:
a1:85:fb:ad:79:76:a7:c0:a7:7e:ca:5b:e2:d1:99:
d7:8f:4e:96:48:55:97:dc:e1:27:14:63:77:20:a3:
85:6a:d4:16:e3:8c:f7:da:9a:27:34:b3:5f:33:9c:
e4:20:85:1b:25:9f:ca:1c:be:2e:de:53:8d:e0:2a:
fa:d0:dc:d4:36:fa:de:6c:3c:82:1e:be:cb:e9:b4:
a5:da:6f:51:14:3e:0f:11:84:de:73:18:b0:ee:17:
ad:17:38:3e:30:52:92:56:e1:f6:ec:eb:17:0f:a8:
c6:96:cd:a1:83:d3:d4:e2:ca:ee:5b:4c:6f:1c:87:
b8:03:d7:bf:ee:84:b6:56:6d:c0:b3:46:4b:e7:8b:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:18:B0:D9:E4:04:AC:89:00:F4:85:A6:99:35:BB:3C:88:7B:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5eIYsNnkBKyJAPSFppk1uzyIexk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:09:55:45:7e:45:49:7f:e0:4f:ec:46:c9:33:c8:81:bb:29:
b1:90:17:25:92:5b:37:6a:60:c4:73:bf:94:34:89:d6:dc:72:
9a:87:ad:a3:2c:6c:93:5e:0c:b6:99:a8:9f:f2:ff:2c:a9:78:
e5:a8:9d:4a:fb:c1:ef:6b:64:3c:9f:09:c4:82:13:8d:cd:b1:
3e:da:b0:aa:1a:df:b5:01:0b:3c:10:b7:33:50:dc:a3:c2:ef:
a2:a9:04:ee:77:15:c6:6f:90:e0:25:98:3c:74:57:51:ec:04:
f1:cd:15:6d:0d:13:24:19:40:48:8a:82:02:19:a1:ee:3a:aa:
84:c4:26:a3:92:96:b1:81:7f:aa:e4:62:1c:78:75:b6:36:e1:
03:33:08:e0:65:fa:c5:9a:ea:b2:a0:7b:ac:66:46:3c:22:1f:
8c:f2:89:e3:45:fa:6b:14:36:c4:df:88:ab:c5:a6:b0:37:55:
4a:54:04:ab:8d:dc:05:85:71:ba:04:eb:9a:87:bd:99:e0:bc:
66:92:45:c6:6f:c9:be:21:5c:c5:98:61:d8:3b:f8:01:6b:b9:
9a:02:46:26:32:21:16:d9:50:80:33:9e:06:46:4b:e8:80:7e:
8f:8c:bb:f4:5a:68:94:4e:d4:0a:bc:a7:67:d8:b4:46:f8:8c:
53:32:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:02:13 2025 by rpki-client