Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pm1CrxCLyXKxhFulHDtN1E-zLg.roa
File: 5pm1CrxCLyXKxhFulHDtN1E-zLg.roa (raw, json)
Hash identifier: twhAR87LaP6BVaQR5RQ4PHSlzmLVex+fJxfBkxtwobg=
Subject key identifier: E6:99:B5:0A:BC:42:2F:25:CA:C6:11:6E:94:70:ED:37:51:3E:CC:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FC271CC7261F8B190BA75CE4FDC69A65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pm1CrxCLyXKxhFulHDtN1E-zLg.roa
Signing time: Sun 19 Mar 2023 23:14:27 +0000
ROA not before: Sun 19 Mar 2023 23:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fc:27:1c:c7:26:1f:8b:19:0b:a7:5c:e4:fd:c6:9a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 23:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e699b50abc422f25cac6116e9470ed37513eccb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:29:71:7c:2b:53:b1:57:df:4c:79:ef:75:
e0:d9:56:70:bb:c3:8a:c8:4e:a6:e6:1c:ff:53:d2:
f9:fc:31:03:73:8d:3b:4b:e8:a9:c1:1f:0d:3b:25:
88:cf:66:8f:91:0b:b3:65:5c:7b:77:d4:f7:6a:37:
d7:94:84:9d:96:2d:f3:0d:1f:a4:47:18:d7:5f:dc:
f2:88:bd:c8:7a:7f:b1:95:f0:78:9d:38:9f:bb:3a:
42:c3:fc:12:92:9a:d8:5f:5e:d8:77:74:f9:59:bb:
cf:9e:46:b5:78:2c:ab:ae:bd:5c:fe:96:a9:32:cb:
91:72:47:40:22:c6:e6:26:75:8d:57:ed:54:f4:37:
e7:fd:41:3c:18:2a:4f:78:65:1f:72:b2:81:b8:54:
c5:ea:b8:66:7f:5a:e6:46:7b:ce:65:8a:eb:9d:0b:
82:00:a4:87:7a:22:79:5a:67:e6:af:7b:b4:b1:67:
aa:ac:a5:8b:c8:01:be:8a:fc:58:45:a4:de:5c:3e:
6d:c9:12:17:d0:ca:90:9b:75:99:70:85:13:ec:f5:
14:1e:3a:54:aa:d9:be:ee:b5:dd:d9:f5:03:b0:06:
9c:74:d1:ae:22:c3:89:c9:aa:ac:a5:40:da:6c:69:
5e:48:48:74:f7:00:e1:1f:d8:5c:a8:fe:a3:92:97:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:B5:0A:BC:42:2F:25:CA:C6:11:6E:94:70:ED:37:51:3E:CC:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pm1CrxCLyXKxhFulHDtN1E-zLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:6f:f5:e7:4c:15:54:8d:2f:ef:a9:3f:15:60:6b:02:54:2b:
d9:98:d5:3f:f0:85:cd:a7:88:45:64:f8:82:17:b8:0a:df:6d:
1d:c2:83:d3:b5:30:a8:f8:88:3a:9e:06:35:6b:c3:63:74:b9:
8f:90:c8:f9:71:e3:e5:e8:c6:82:3c:fa:59:17:aa:b2:1f:fa:
b5:f1:50:14:9c:bc:3c:9a:6e:55:de:3e:8e:1e:92:ba:47:9d:
5d:00:65:22:0f:53:2f:04:8d:1b:54:49:1b:14:22:7a:a7:64:
54:16:98:6e:ac:df:ff:69:f5:28:d9:8e:c2:56:b3:bc:97:7c:
a9:40:b5:ae:21:75:32:02:87:32:e2:2e:24:8e:a6:d7:37:fe:
8d:5d:ba:02:36:10:de:cb:ca:1f:ae:13:91:da:f0:c2:34:2f:
b1:34:40:e3:ea:09:46:c6:d9:89:2e:37:98:50:6e:84:58:d3:
b8:d0:6b:06:6e:32:e6:e6:31:bf:fe:2f:5b:24:6b:d3:20:dc:
18:f4:cf:3a:05:3e:a4:16:9c:94:68:41:71:5f:b7:ad:a3:b2:
ea:36:b9:d8:05:c6:cf:30:8a:d6:5a:10:94:5e:12:d0:59:a7:
93:a5:f8:b5:6c:3f:b8:0d:63:3f:4a:d5:d6:74:5f:3a:c5:db:
cb:04:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:41:41 2025 by rpki-client