Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5jBlI-Xm2z2lLUBexH08Z1fc5gY.roa
File: 5jBlI-Xm2z2lLUBexH08Z1fc5gY.roa (raw, json)
Hash identifier: ola3CfdVKICUCOus62dNOxu/ef6Em2uKHVqo1M+yZaY=
Subject key identifier: E6:30:65:23:E5:E6:DB:3D:A5:2D:40:5E:C4:7D:3C:67:57:DC:E6:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1125CF47F50A6FC490CDDE9B92664755
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5jBlI-Xm2z2lLUBexH08Z1fc5gY.roa
Signing time: Sun 20 Aug 2023 04:13:25 +0000
ROA not before: Sun 20 Aug 2023 04:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:25:cf:47:f5:0a:6f:c4:90:cd:de:9b:92:66:47:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 04:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6306523e5e6db3da52d405ec47d3c6757dce606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:36:7f:5d:bd:df:80:0a:21:5f:71:6a:40:
5e:d0:db:47:5a:18:85:df:ab:03:71:e2:55:c3:68:
3f:5d:bf:e0:03:58:d7:10:dd:28:8d:9d:c6:65:6c:
e4:0e:a9:c7:3c:b1:af:26:59:ae:5d:2f:81:fb:d6:
22:2f:1c:dc:a3:36:31:38:a3:99:7a:37:86:77:f4:
c9:32:85:5f:73:8f:7f:2e:dc:ab:61:a3:ba:f9:92:
d6:5e:a6:5e:39:bd:92:e2:e0:be:cf:0d:9f:dd:1d:
ae:c0:51:7c:bc:6c:a2:54:42:8b:9b:25:f8:64:a6:
e1:33:ee:0f:b1:91:2d:1b:d4:9c:10:c4:bf:80:e8:
40:3d:e9:ea:f9:74:e7:ed:8d:8d:1a:7f:69:f6:dd:
db:46:95:4c:af:0c:9d:fe:58:19:b7:99:d5:f9:c3:
40:d4:b6:e0:5a:55:6b:1b:2b:50:88:72:10:f8:1f:
d5:56:2d:7d:7c:a6:a7:54:b0:64:3a:40:17:57:d4:
84:c5:87:a8:f6:d2:bf:42:10:14:5a:98:40:aa:36:
82:00:bf:eb:28:a0:cd:66:d8:42:af:98:f8:f0:99:
e6:21:22:6d:79:13:9e:bf:d7:bf:8d:f2:d3:2a:d7:
2d:29:bb:b5:68:ac:a8:bb:1e:62:5b:e3:20:6a:08:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:65:23:E5:E6:DB:3D:A5:2D:40:5E:C4:7D:3C:67:57:DC:E6:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5jBlI-Xm2z2lLUBexH08Z1fc5gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:7f:37:10:9e:b3:5c:a6:a7:66:2c:fe:a2:e0:1d:a7:2e:d7:
ce:bd:b2:c3:6f:67:07:89:76:bd:96:f3:ae:3d:64:13:92:3b:
f0:03:5d:86:05:5c:d6:7a:7e:55:da:c2:04:f3:5c:b0:ec:96:
46:34:d3:ee:dc:ae:02:f5:d8:d1:2a:a8:12:9c:ea:34:3e:f0:
73:e9:27:7a:0e:df:56:33:2e:23:c7:cc:b8:b1:00:d9:03:08:
ca:ac:cb:a0:25:14:7f:9f:25:83:e1:3b:af:9c:2e:3a:bf:b6:
1b:60:3f:a9:6f:57:a5:c4:b6:f4:97:f1:05:2e:73:e4:92:cf:
72:46:6b:80:aa:c3:84:15:af:f6:d5:0b:82:98:fc:f8:93:f1:
d3:97:8a:2e:55:bc:c6:e1:a2:48:e3:d0:2c:35:6a:5a:84:c2:
70:f9:47:ff:99:d6:4e:17:ae:99:e4:df:49:24:00:ef:1b:15:
41:65:3f:fe:bd:46:66:eb:34:61:f8:78:d6:ec:bc:39:4c:3f:
92:d7:fd:94:f4:9f:f8:7c:32:a5:df:4d:83:05:04:93:ba:08:
98:3c:14:44:e7:b3:eb:1e:64:71:5c:dd:9e:f6:fb:1b:ea:c0:
d4:4a:a3:5b:c2:85:26:db:3a:48:7e:76:35:73:79:73:ff:5a:
84:59:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:10:52 2025 by rpki-client