Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5hKDl2anf-0T54PyXyB8YA0CxyQ.roa
File: 5hKDl2anf-0T54PyXyB8YA0CxyQ.roa (raw, json)
Hash identifier: CyaH4qXI0owXcWpwUhkivLCpmlO69a2TUtCoHa2yvU4=
Subject key identifier: E6:12:83:97:66:A7:7F:ED:13:E7:83:F2:5F:20:7C:60:0D:02:C7:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870A7EADDB74711AEE8613D5A045216694
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5hKDl2anf-0T54PyXyB8YA0CxyQ.roa
Signing time: Wed 22 Mar 2023 18:04:46 +0000
ROA not before: Wed 22 Mar 2023 18:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:a7e:63a2/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:7e:ad:db:74:71:1a:ee:86:13:d5:a0:45:21:66:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 18:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e612839766a77fed13e783f25f207c600d02c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:cb:4b:20:81:24:ed:f1:2c:b4:f6:29:e7:
89:10:f6:08:d9:72:f6:a0:29:ee:26:33:8b:78:f7:
0c:7c:17:61:20:56:c2:1e:2a:84:93:8d:74:d2:11:
34:cb:a8:0f:a1:c0:ad:8d:ca:e1:a4:6f:51:e4:6a:
4c:5f:59:7b:4b:e6:cf:78:54:bf:f0:ac:03:3c:7f:
bc:51:47:03:2d:14:57:b2:33:56:78:0c:bd:7f:d6:
69:0c:7f:f4:da:f9:df:ed:c2:f5:01:47:2c:3c:b4:
28:f7:ad:ff:8b:1a:88:a1:e9:0e:ec:00:e8:1a:27:
34:d9:a2:64:24:a6:cb:be:b9:fb:be:1d:61:c6:89:
61:7f:b2:3d:31:3d:bd:82:ad:58:91:2e:a8:47:60:
a7:08:03:c3:83:2d:d0:e5:eb:a3:4e:35:ec:be:5d:
87:be:ba:fc:89:c5:aa:26:7b:a4:96:25:b8:bc:b8:
1d:9d:d8:2e:94:de:f3:27:7d:a7:51:68:eb:0a:02:
f5:2b:c2:26:85:b1:0d:8f:4e:3d:2f:ea:ee:63:5b:
da:8e:94:0a:a9:0c:d0:41:15:e0:41:d5:c8:fd:fb:
74:b1:26:3c:48:24:69:ec:ab:90:fa:f7:b2:87:a6:
2a:21:18:d1:8b:4e:fe:e5:01:2f:f4:c8:c2:ea:72:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:83:97:66:A7:7F:ED:13:E7:83:F2:5F:20:7C:60:0D:02:C7:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5hKDl2anf-0T54PyXyB8YA0CxyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:73:03:f9:35:d7:94:9b:80:58:bd:1e:8b:7a:da:46:24:13:
58:89:15:d2:f9:84:54:08:c8:fc:c8:ee:d0:d7:b3:fd:c0:3a:
7f:b3:fa:73:8d:1b:d3:ab:cc:77:24:8e:fa:f1:cb:cd:88:4b:
dd:26:cf:98:bf:ef:27:9a:57:ad:54:f5:a6:e5:b7:73:d3:27:
0d:c4:70:7f:79:90:9d:d2:b0:cc:79:12:c9:8c:c4:c1:88:a4:
6c:d2:05:9d:36:b9:5b:bc:8e:41:1f:08:be:14:cc:b0:91:9f:
45:9f:da:09:4d:a1:81:6c:fb:72:6b:b6:3f:8f:9b:4f:60:36:
77:bf:dd:ff:88:32:26:b5:b2:48:df:69:e9:91:11:bb:20:13:
4f:57:d3:e0:95:ca:45:e5:16:64:75:c0:8c:8a:92:0c:4b:e2:
86:e2:ac:21:6b:cc:f1:66:73:9e:3b:7a:57:26:ad:7e:88:30:
51:7c:ec:a5:65:ec:c2:82:7d:c2:23:00:57:22:af:e1:25:81:
5f:4d:f5:cc:bd:f0:04:63:02:dc:d0:cf:b3:60:be:99:b8:8c:
8f:3b:1a:c4:e2:e3:60:78:5d:ef:32:80:82:77:17:ed:dc:cb:
59:a8:7c:37:9b:74:a8:7a:fc:24:db:9c:d0:8f:48:1d:af:83:
74:33:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:16 2025 by rpki-client