Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5mykTKFw3XTYGMfoGwp0p_ZKUEc.roa
File: 5mykTKFw3XTYGMfoGwp0p_ZKUEc.roa (raw, json)
Hash identifier: H9eq4yLEWykNGAu3YpW//5JNA9tP5KuZZVav7/kEy0s=
Subject key identifier: E6:6C:A4:4C:A1:70:DD:74:D8:18:C7:E8:1B:0A:74:A7:F6:4A:50:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018977B7E2D737147CB460F7FCC8120C3923
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5mykTKFw3XTYGMfoGwp0p_ZKUEc.roa
Signing time: Fri 21 Jul 2023 09:11:27 +0000
ROA not before: Fri 21 Jul 2023 09:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:b7:e2:d7:37:14:7c:b4:60:f7:fc:c8:12:0c:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 09:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e66ca44ca170dd74d818c7e81b0a74a7f64a5047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:cb:c8:f8:0c:73:8f:5a:d8:5b:e8:10:4b:
da:b4:46:3c:19:4a:da:a5:c5:ce:b3:8b:f6:6a:a3:
41:27:10:6c:d3:4f:27:e4:70:6c:71:68:55:c6:a2:
80:58:7d:b1:1c:9d:31:54:d5:16:ce:f1:30:9f:4b:
a9:d4:d4:df:e4:7a:6b:40:ec:f7:b0:5f:da:2e:9d:
44:44:50:81:0b:8d:e8:3a:b5:86:6f:80:ca:1d:2a:
8f:2d:03:b8:00:b8:92:ec:6a:fc:de:3f:b6:3a:f2:
fa:f1:61:6f:ec:ee:8e:99:56:3d:93:5f:72:67:3f:
9d:0e:15:f6:03:0e:57:c2:cd:df:06:4c:cd:9d:05:
be:c2:3a:19:cb:22:69:17:0c:f8:08:65:e7:99:c0:
1b:56:85:1b:a5:70:d4:84:4a:b8:98:a1:2d:e7:2d:
c4:6b:23:50:ba:9d:65:7f:23:98:d2:df:61:83:93:
30:6a:70:e2:79:36:3b:25:a6:1a:67:24:93:29:63:
59:c6:97:35:b5:85:7f:e5:94:7e:be:6b:fa:d4:23:
bc:6f:7c:ac:f4:2c:1c:66:e5:7f:d9:ef:d1:fa:ee:
90:02:42:fa:d4:97:66:03:bf:41:22:f7:80:7c:c0:
f6:8f:05:3e:9d:ab:80:a8:67:60:9c:15:93:67:75:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:A4:4C:A1:70:DD:74:D8:18:C7:E8:1B:0A:74:A7:F6:4A:50:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5mykTKFw3XTYGMfoGwp0p_ZKUEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:80:fa:a7:5a:ce:0d:e7:69:7d:16:a7:bc:a6:1a:16:3f:76:
e3:73:78:86:65:2c:59:7e:9f:8c:a5:b2:9b:b6:57:3e:94:89:
4d:00:04:05:98:45:01:4f:0e:0c:ac:6d:d1:ba:b4:06:74:50:
c1:47:e2:94:4a:d7:8a:10:5e:19:b8:45:e0:8c:51:ff:d8:83:
ef:ba:15:b8:64:a7:a8:a8:37:bf:e9:c9:89:59:af:9c:ee:db:
87:d7:e4:91:2a:86:6a:59:13:7e:e4:ba:a7:e0:e8:19:07:e7:
c1:c0:60:4a:2a:64:a6:2f:5b:ba:e0:6e:7d:d5:3b:a8:1f:65:
ae:9a:39:b5:8f:2e:65:10:ab:5a:26:0c:fa:34:1c:e6:a2:89:
53:de:5e:11:17:4d:bf:e2:a0:e6:95:e4:6c:47:80:53:c6:58:
0e:91:44:bc:b0:8d:4f:b7:1d:23:b7:2f:e7:53:a4:b6:e0:b4:
0d:7c:a1:0e:a3:35:68:29:c5:20:58:ee:ed:7d:75:1e:f9:b3:
fa:42:66:3a:0d:36:9b:58:f8:f4:d1:3e:0a:47:1f:ca:4a:a5:
21:2a:09:86:f4:8e:fa:6d:f2:c2:ec:7d:8c:f7:03:39:93:ef:
ee:0c:ec:1e:d6:2b:4b:97:ae:4e:40:4e:80:e0:74:e9:32:25:
0f:6f:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:39:09 2025 by rpki-client