Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qH-2gSe4lg2DuMDGWrj1rCPymI.roa
File: 5qH-2gSe4lg2DuMDGWrj1rCPymI.roa (raw, json)
Hash identifier: y0na+5rAmCT63qsOkYPW8bmSlcmbbYFgxess8fP0RVA=
Subject key identifier: E6:A1:FE:DA:04:9E:E2:58:36:0E:E3:03:19:6A:E3:D6:B0:8F:CA:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182346A179F40DCB9FC718D7929DAE90E75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qH-2gSe4lg2DuMDGWrj1rCPymI.roa
Signing time: Mon 25 Jul 2022 08:12:24 +0000
ROA not before: Mon 25 Jul 2022 08:12:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:6a:17:9f:40:dc:b9:fc:71:8d:79:29:da:e9:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 08:12:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6a1feda049ee258360ee303196ae3d6b08fca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:a4:bf:44:d5:db:7a:0a:3d:68:c6:27:54:
60:6f:3d:f7:13:88:99:26:62:33:40:8e:58:77:7a:
43:e3:6b:f0:98:b4:a8:0c:fe:df:22:0e:ec:11:58:
8e:73:7c:19:aa:35:0b:d2:82:2c:68:a4:79:f4:4d:
f7:7d:bb:53:8f:5d:87:3d:6f:8a:da:d6:65:9c:51:
25:f6:8f:62:e8:b9:af:1c:c1:0f:ca:73:9f:04:61:
59:6d:8b:a3:ab:39:c5:94:fb:23:8e:7d:9f:be:e1:
9b:63:29:9d:92:32:f1:81:25:a2:2f:35:13:20:53:
bf:90:ec:d6:2c:6f:11:e3:02:98:eb:c2:41:79:df:
09:2a:1a:23:b2:e9:01:d5:bb:e9:b5:c7:cb:32:0d:
9b:cc:2c:ca:0c:3b:bb:2e:b1:26:ec:b3:8a:31:a3:
42:26:28:db:0b:6c:c2:b3:bb:1c:31:f7:2f:e0:67:
2e:be:44:a3:ab:fe:63:8d:a5:f6:8b:00:b5:c7:45:
01:58:2b:bd:bd:ec:cf:6f:22:20:99:5a:3d:98:43:
19:a3:4f:74:a0:fd:c1:cc:ac:d6:8c:0c:9b:79:f4:
b2:6d:05:12:5b:94:80:52:57:5a:87:a6:28:d9:c4:
ee:13:ef:67:d7:29:a6:3d:ef:c1:f4:e1:15:5e:9c:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A1:FE:DA:04:9E:E2:58:36:0E:E3:03:19:6A:E3:D6:B0:8F:CA:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qH-2gSe4lg2DuMDGWrj1rCPymI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:6f:d9:de:fd:5e:fd:23:02:3f:61:e4:c9:6b:17:4e:d6:21:
28:18:cc:fc:7e:dc:cf:a7:15:79:25:2b:45:0f:2d:81:0f:e1:
cc:25:e6:20:c2:6c:af:2e:96:b6:47:14:18:45:90:93:2f:9d:
47:1b:9f:53:5a:42:59:68:0a:b3:e1:1b:59:37:1c:cf:b6:01:
6e:36:45:be:37:a7:90:1b:28:01:01:d8:55:b3:a3:ad:aa:04:
17:39:f5:fd:45:b1:a2:1b:fc:e9:52:b1:de:55:db:f1:8b:ad:
9c:37:ec:6a:65:fd:c2:2e:c8:e9:59:4c:79:eb:0d:ac:0e:3d:
93:86:fa:f6:c9:28:aa:bf:d0:c5:13:33:25:00:70:74:80:3b:
9a:23:c9:18:38:e8:d1:00:e8:41:c0:4f:9d:a5:9b:bc:26:a5:
ce:37:7c:ae:f8:0d:8d:32:c3:8c:4c:8e:f6:d1:b8:65:fd:ee:
b9:62:33:10:c7:a6:9a:d2:16:1f:33:5b:43:e8:6f:67:18:37:
08:3c:51:a9:a8:8d:41:5d:ce:f0:ee:1a:b2:f3:78:c5:d2:4f:
ab:f3:bc:00:b7:61:76:96:d3:bf:04:fa:96:7b:3a:59:0f:2d:
51:4e:d2:f3:72:ac:a6:17:43:02:2f:6b:12:5d:dc:1a:8c:ee:
b2:d0:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:43 2025 by rpki-client