Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ls2hMMS0nA9cKRe8oxrTRradKY.roa
File: 5ls2hMMS0nA9cKRe8oxrTRradKY.roa (raw, json)
Hash identifier: T7K8DQA3K4YA8KzLrkSHuOldbtOckCMqCG+UUR2pNBI=
Subject key identifier: E6:5B:36:84:C3:12:D2:70:3D:70:A4:5E:F2:8C:6B:4D:1A:DA:74:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885AF7BC11A58F067E26B6C64A449DFB7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ls2hMMS0nA9cKRe8oxrTRradKY.roa
Signing time: Sat 27 May 2023 02:09:24 +0000
ROA not before: Sat 27 May 2023 02:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5a:f7:bc:11:a5:8f:06:7e:26:b6:c6:4a:44:9d:fb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 02:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e65b3684c312d2703d70a45ef28c6b4d1ada74a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:c3:08:1e:c4:a8:20:7d:32:0b:9c:03:a8:
b5:0d:43:28:a8:9c:87:10:b6:f9:95:ad:5d:41:d1:
6f:55:66:b4:30:a8:2b:27:a2:c4:6b:07:86:4c:d5:
ec:fc:d1:8d:63:c6:06:b4:b5:2b:43:42:ec:a7:c3:
ec:06:c6:49:d6:61:dc:0b:67:3a:aa:fc:5c:3a:7f:
91:b8:2e:26:c4:ae:b6:39:22:e7:1f:c2:d5:f7:db:
ff:0f:ed:a1:5b:93:83:8f:d6:37:3b:8f:95:a2:1b:
25:25:5f:4a:1a:65:3c:4f:8d:6d:14:54:3e:77:6f:
92:a4:ea:8f:9c:0a:fa:41:a4:6c:ba:18:4e:b2:4d:
93:ef:8c:17:ab:fb:77:c2:c6:1c:2f:1f:07:38:6f:
12:43:f8:30:07:08:7f:6e:bf:b4:ed:5e:1f:4d:a6:
5d:96:31:98:06:88:2c:30:13:04:0e:cc:58:88:91:
68:ac:2e:54:11:fa:e1:e0:ce:87:7e:22:4c:2b:9e:
e0:05:6e:69:5c:b9:f5:aa:1d:aa:86:6b:4b:5f:2d:
c8:ab:53:bb:c4:65:c1:ac:87:c9:cf:76:2f:05:8d:
e4:44:fb:ef:61:2c:e9:16:59:fd:eb:ca:e1:08:f5:
c5:c2:aa:f8:22:79:4b:4e:d5:a9:0a:e5:0f:f4:2e:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:36:84:C3:12:D2:70:3D:70:A4:5E:F2:8C:6B:4D:1A:DA:74:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ls2hMMS0nA9cKRe8oxrTRradKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:35:66:c2:43:83:02:42:6a:94:28:9c:bd:c9:4d:87:a6:00:
86:b2:c0:f3:e9:cf:0a:19:49:4b:19:cd:5c:8e:16:00:43:8b:
58:59:47:cc:fe:5f:d6:b1:a8:79:ed:17:e5:2e:b7:e5:45:5b:
b7:e1:26:40:21:2c:bb:ad:27:f3:a6:e0:7b:6a:8f:ee:11:3a:
f8:3e:53:f2:21:d5:c4:2c:0c:73:fe:a2:bf:2e:7c:fe:84:e9:
c6:a2:0a:f0:45:55:65:aa:72:25:ed:d1:71:87:fd:e0:9b:c0:
eb:5f:28:c7:00:67:b1:c7:d1:92:d4:b4:1b:87:20:ca:8a:df:
e0:32:e9:7a:8c:7b:0c:7f:42:68:c6:8d:3e:45:7c:c6:56:17:
a0:31:d1:f2:de:d2:98:41:60:b8:fd:25:f9:c5:f6:78:f9:6f:
0c:b4:a0:2d:07:10:25:01:ae:f3:6c:44:ed:20:1c:fb:2c:c7:
5c:d7:c5:9f:2d:e4:21:69:a9:5f:c4:6d:f4:09:44:77:7c:51:
e7:48:60:f5:89:7f:2a:26:f9:7b:39:ae:69:91:b7:63:30:d3:
52:b0:3e:71:f7:68:15:ad:07:35:88:32:d4:0e:e9:2c:33:c5:
6d:13:73:32:96:e7:8f:4d:1c:f4:ed:e2:f8:27:5e:b4:51:84:
a8:27:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:26 2025 by rpki-client