Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pBnqil-TI0Ani_9qAxmFNwEepk.roa
File: 5pBnqil-TI0Ani_9qAxmFNwEepk.roa (raw, json)
Hash identifier: ze5kWMny6RBdfMmNEhGqlhfZgOEbU6VLXTZVdoiRQBc=
Subject key identifier: E6:90:67:AA:29:7E:4C:8D:00:9E:2F:FD:A8:0C:66:14:DC:04:7A:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A02FF110AB6BB29EB3FE28E6EAEB81AB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pBnqil-TI0Ani_9qAxmFNwEepk.roa
Signing time: Thu 17 Aug 2023 10:16:25 +0000
ROA not before: Thu 17 Aug 2023 10:16:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:ff:11:0a:b6:bb:29:eb:3f:e2:8e:6e:ae:b8:1a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 10:16:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e69067aa297e4c8d009e2ffda80c6614dc047a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:92:35:39:8f:a0:e6:5c:98:b7:8d:bc:4a:
46:b4:bc:d9:3c:b3:95:ee:53:6f:42:96:0d:12:7c:
03:19:40:bb:44:42:b3:74:26:71:d7:24:80:a0:3c:
46:a7:49:ce:a8:00:78:94:e8:23:5b:38:26:57:72:
b6:62:e5:aa:46:94:2e:9c:bb:c7:18:4a:a6:68:4d:
6a:b7:fc:fc:fb:28:1b:45:f1:65:45:b4:de:70:6b:
92:0e:4e:1d:6c:10:7d:67:c2:4a:1d:29:e6:26:6a:
0d:1c:3c:49:52:aa:58:ee:e0:f7:34:58:3c:2e:ff:
76:83:aa:59:9b:dc:e0:cb:48:a8:f2:e3:df:10:2f:
bf:65:68:5a:22:df:b2:1c:23:e0:be:bf:4d:75:b5:
57:e3:a9:3e:bf:2b:66:e8:15:cb:68:6d:ba:e6:42:
eb:d2:8c:7e:02:8c:1c:b8:0f:bb:7e:ee:f4:1d:45:
fa:a3:49:bf:ca:b9:36:4c:30:28:46:3f:30:8e:c8:
04:1c:7b:bf:92:7e:ca:ed:cb:6e:38:f9:c4:1a:e0:
c6:5c:eb:49:5f:f3:a1:ab:7d:75:08:9b:46:93:8a:
cc:bc:2f:ce:46:3c:7c:f0:67:95:7e:3d:4d:f1:64:
5d:90:c2:4d:70:3c:79:e2:c0:75:1c:0e:09:fa:a6:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:67:AA:29:7E:4C:8D:00:9E:2F:FD:A8:0C:66:14:DC:04:7A:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pBnqil-TI0Ani_9qAxmFNwEepk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:f0:7e:04:4c:e9:00:3d:88:e6:5f:2a:9b:0e:0b:19:a2:51:
85:58:79:fc:d4:da:3f:77:6b:b1:95:c4:53:23:b4:0c:ae:2f:
67:66:02:c4:26:d7:a2:d1:01:69:c0:d9:bb:90:2e:c4:88:c6:
f3:e3:77:51:af:bb:e2:26:17:be:2a:78:76:58:05:33:de:68:
b9:ee:bd:c4:0a:e1:03:45:ae:60:64:0b:04:54:cb:ac:c1:29:
fa:19:b1:9a:f8:27:14:16:f0:64:4f:ff:f4:4e:3a:9e:a3:5e:
f8:17:4f:16:48:ba:4e:66:d6:67:33:e0:bb:ec:62:c0:f3:48:
9f:41:ef:8e:61:11:e6:b5:f1:a1:5e:6e:ba:d1:73:2b:39:5b:
31:e8:37:72:6d:32:0b:c8:72:9d:6a:98:b2:f6:f0:c2:f1:51:
ae:4d:f5:db:d6:fd:62:d1:ba:9f:65:d4:cd:a6:10:e8:5d:dd:
a9:b9:0c:4a:83:ea:54:39:24:78:ac:03:83:46:e0:28:62:13:
13:53:48:fd:b6:28:fb:c4:c0:6a:1f:4a:47:6d:eb:32:20:9d:
63:b4:f4:a8:8a:b9:7b:0c:e8:03:7a:1b:61:6c:d1:40:f8:92:
bf:03:eb:a1:6f:b3:9f:5c:79:0e:7b:a0:07:e4:06:a7:ff:7b:
86:a6:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:02:25 2025 by rpki-client