Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5kuvRHjSJpMqMqizdfWUKYy87oo.roa
File: 5kuvRHjSJpMqMqizdfWUKYy87oo.roa (raw, json)
Hash identifier: padL+q2hebyxmZ4h35vULJZbW/8LeGRRQaWC96pPdNk=
Subject key identifier: E6:4B:AF:44:78:D2:26:93:2A:32:A8:B3:75:F5:94:29:8C:BC:EE:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82A7AA3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5kuvRHjSJpMqMqizdfWUKYy87oo.roa
Signing time: Tue 10 May 2022 02:10:28 +0000
ROA not before: Tue 10 May 2022 02:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192026172 (0x82a7aa3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 02:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e64baf4478d226932a32a8b375f594298cbcee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:4b:37:35:b5:56:0a:9b:ea:c8:04:df:69:
a9:37:19:9a:da:6f:e6:25:8a:15:66:cf:92:56:6d:
5f:67:bd:69:e2:26:24:6d:c6:df:cc:b8:ac:b6:9c:
26:20:8a:09:a6:d0:f6:12:a0:e9:5b:cc:c0:94:65:
4c:2f:4b:1d:90:81:61:82:05:55:21:b5:be:b1:b6:
98:fe:b0:35:ec:75:67:56:e5:30:f3:8e:8c:2c:9d:
a5:db:aa:a0:be:9d:b8:b7:60:01:c8:82:8a:aa:a1:
09:14:24:b7:22:52:69:3a:b3:51:22:86:b7:55:35:
57:3e:60:a9:c7:3c:8f:66:50:52:73:b8:74:7b:83:
32:de:64:a9:3e:ad:66:d4:c4:68:33:92:13:3c:7e:
9a:19:a1:11:cd:71:0a:46:c1:91:ad:5e:e4:19:e3:
da:b0:0e:d9:ee:64:f8:e9:3b:ad:55:e1:59:ea:ad:
03:4d:82:27:b3:16:bd:a2:8e:53:c5:78:52:d4:fa:
ef:d8:6b:e7:0a:75:ae:96:d6:76:ff:52:d0:9a:9b:
4c:cb:e1:60:73:7a:fa:33:fc:02:f6:da:5e:84:4a:
e5:f9:86:73:b9:3a:22:c6:da:ee:05:97:b2:65:c8:
dd:a4:4f:99:80:f7:14:4d:47:eb:34:1f:4f:8e:f7:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:AF:44:78:D2:26:93:2A:32:A8:B3:75:F5:94:29:8C:BC:EE:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5kuvRHjSJpMqMqizdfWUKYy87oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b8:f8:d0:0c:89:48:37:04:2c:2b:31:b7:7a:44:61:80:a9:
09:17:48:a0:76:48:cc:4e:98:3e:bd:e8:c5:5d:d9:ab:96:7b:
81:09:b6:66:18:43:e1:f6:1c:86:92:b7:9c:79:8e:6d:fb:6c:
ba:7b:90:2f:f0:71:ca:43:de:b5:ff:f4:aa:e4:0c:82:23:56:
52:b3:e7:d2:fd:c5:9e:b9:7f:05:a7:00:a9:9b:61:7d:c3:e9:
99:03:96:d0:ae:6c:72:9f:b9:76:4c:95:55:92:09:a8:fa:fb:
21:d3:27:f0:d7:c8:d3:5b:0d:ff:da:59:c3:42:93:7f:f4:1e:
f0:ee:95:a4:b9:3c:ee:a4:02:dc:da:a4:e6:41:8a:f0:45:94:
53:67:c8:75:cd:e4:b6:30:b9:01:ab:eb:52:b3:65:d0:7b:22:
98:d1:77:f0:04:d7:a9:6f:47:b4:7e:81:95:62:b0:f2:5e:9e:
44:a0:4e:73:4d:25:08:f8:95:53:35:94:9f:77:89:20:9b:89:
04:e8:6f:76:1f:c2:a7:81:c8:ba:aa:2a:a1:53:ad:73:88:b1:
73:9d:b2:42:00:aa:19:f1:45:5f:bd:59:18:b8:5a:d1:43:6c:
ef:4b:9b:a3:94:40:0d:af:f7:bf:92:11:46:b9:e9:ec:ec:f9:
86:c7:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:14:50 2025 by rpki-client