Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5h9-8aZVtSqa1VGqL6x7nQU3l34.roa
File: 5h9-8aZVtSqa1VGqL6x7nQU3l34.roa (raw, json)
Hash identifier: gO69+T4P59WQISPM89ahUNHYM38rMUOPZ9Bs3T40NbY=
Subject key identifier: E6:1F:7E:F1:A6:55:B5:2A:9A:D5:51:AA:2F:AC:7B:9D:05:37:97:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E2DFBAA51BE83E047A42DFE5E83F1ED1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5h9-8aZVtSqa1VGqL6x7nQU3l34.roa
Signing time: Sun 16 Oct 2022 22:17:36 +0000
ROA not before: Sun 16 Oct 2022 22:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e2:df:ba:a5:1b:e8:3e:04:7a:42:df:e5:e8:3f:1e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 22:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e61f7ef1a655b52a9ad551aa2fac7b9d0537977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:62:a6:d1:b0:b3:ba:90:28:ec:67:25:90:
cf:62:99:03:12:b5:df:17:a0:48:eb:c2:e8:e0:e2:
aa:0d:4a:7c:94:b4:c5:69:6d:3c:5e:47:f4:00:83:
ef:5e:a8:34:ea:24:29:6a:e0:68:ff:38:89:88:42:
07:ea:e3:b2:88:c2:fa:ea:04:21:c1:0d:1b:06:2d:
a3:43:04:c5:09:17:6c:79:7a:3e:33:94:aa:27:8f:
cd:9a:e3:4e:9a:9c:7e:32:83:fe:09:d3:e5:85:4d:
d8:85:20:ec:35:02:15:b7:fb:dc:45:16:60:3a:5f:
91:20:66:52:3b:0b:d0:ce:d2:20:b0:e9:4d:92:13:
ff:1e:e2:17:89:68:45:50:e9:02:df:13:82:8f:1e:
24:05:2f:d4:cc:1e:e6:4a:9f:0e:68:8a:c4:e4:d6:
52:e2:d5:86:f8:ab:9b:62:ea:cd:6b:b6:c4:85:09:
df:7f:6e:45:a6:87:3e:9c:1d:21:11:ca:0d:69:04:
25:e0:b3:96:97:97:c6:1e:37:9b:92:27:f9:23:69:
d2:32:4a:fd:5c:c4:e7:fd:f1:c6:d4:6b:17:3c:c6:
c5:72:32:0a:1d:15:19:54:6a:ab:c7:61:5e:28:c9:
9d:2c:34:86:c3:c3:3d:ee:8c:56:6f:b8:60:57:14:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:7E:F1:A6:55:B5:2A:9A:D5:51:AA:2F:AC:7B:9D:05:37:97:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5h9-8aZVtSqa1VGqL6x7nQU3l34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:94:01:23:fb:32:a2:d6:45:4e:e6:88:24:47:c7:dd:7f:4f:
b8:92:07:55:8f:1c:7a:a5:62:4d:f4:69:6e:79:dd:d9:a1:38:
84:eb:e9:a6:d6:ef:88:ac:ad:e6:a1:83:c0:73:da:cd:0b:ed:
85:51:47:62:94:34:a9:91:c1:fb:0a:b3:29:9b:10:fb:aa:18:
52:c9:60:ef:2b:0c:e9:db:99:49:95:1e:65:46:3a:14:09:c6:
04:e1:b4:19:7f:6c:8f:58:a1:4b:88:6a:ce:88:38:31:05:f4:
9a:91:a3:c7:cb:c2:a2:06:e1:ae:79:59:5b:a5:44:64:da:53:
f9:cb:e8:0e:9a:9d:1d:37:d4:9f:da:af:9f:58:55:f4:d2:c7:
83:f9:05:b3:19:d3:0f:b7:85:62:b3:b4:90:ec:37:fc:aa:76:
96:a7:1f:43:b0:68:0a:83:e7:86:55:f1:9d:e0:c4:4f:dd:31:
c6:06:8e:56:f2:de:8e:36:30:f5:fb:86:e2:ef:75:f1:b8:40:
23:c9:62:c6:31:b5:01:16:95:4f:42:8f:aa:28:60:8d:05:6e:
5f:7c:8d:d5:bf:13:95:d8:b2:bb:f2:54:fd:44:f2:a4:37:b6:
0a:d1:8f:77:86:38:8d:53:27:d3:36:8d:72:f0:90:94:0f:7f:
3b:b2:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:00 2025 by rpki-client