Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qbKud13ThR0CK4tODqf5PFQf1o.roa
File: 5qbKud13ThR0CK4tODqf5PFQf1o.roa (raw, json)
Hash identifier: zQdfUq36hG5NAJIB6ADExcmpmBs/kWMCOKt8vXvDY8o=
Subject key identifier: E6:A6:CA:B9:DD:77:4E:14:74:08:AE:2D:38:3A:9F:E4:F1:50:7F:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CA29A962BEC728A5F1DA4CCCB10D1864
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qbKud13ThR0CK4tODqf5PFQf1o.roa
Signing time: Fri 10 Mar 2023 06:16:13 +0000
ROA not before: Fri 10 Mar 2023 06:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:29:a9:62:be:c7:28:a5:f1:da:4c:cc:b1:0d:18:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 06:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6a6cab9dd774e147408ae2d383a9fe4f1507f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:1f:ab:16:3d:e9:34:df:09:6c:34:90:0f:
6a:0f:ac:db:bc:8e:01:0f:e3:e1:3d:40:39:bb:67:
b0:fb:95:a3:2b:1d:c6:60:6e:02:17:74:35:5c:4f:
fd:e6:94:25:fa:35:cd:63:3d:0e:e2:70:89:8e:65:
05:8e:be:13:82:a3:14:dd:3e:75:7e:0a:bf:dd:04:
6f:42:87:96:91:69:7e:24:51:05:64:7c:0b:c4:09:
d4:74:07:92:70:fd:35:b7:9e:a8:99:e5:11:d5:14:
dc:f1:f9:87:fa:ec:29:1d:de:48:a7:56:23:fb:b8:
6a:7b:42:a3:73:81:d8:68:a2:f7:0f:62:d0:dc:38:
a2:ff:1a:82:48:11:89:08:9b:5a:83:a7:9a:65:01:
02:0f:98:17:7e:fe:56:14:54:6b:6b:5c:89:78:b0:
03:0b:1b:53:68:58:88:92:49:98:cc:c3:ce:5d:39:
a4:a7:a8:95:69:f4:bb:4f:5e:bb:7a:c8:4e:91:61:
31:90:a9:7a:b3:95:28:1f:90:40:f3:6e:95:c0:4f:
d6:95:a1:0e:fc:87:5b:e8:2b:c9:0a:8f:c1:38:4e:
32:45:26:07:78:53:34:28:62:02:93:33:61:95:65:
eb:37:88:94:87:ec:0f:57:d0:c4:03:72:a4:ea:89:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:CA:B9:DD:77:4E:14:74:08:AE:2D:38:3A:9F:E4:F1:50:7F:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qbKud13ThR0CK4tODqf5PFQf1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:9b:bf:17:53:0b:97:3f:ef:b1:8a:be:4e:ed:b4:c3:e5:ad:
e0:74:72:b8:d4:7b:e4:4d:fb:42:ac:e3:cc:e0:b0:3a:47:38:
b0:22:0e:a4:07:27:39:0a:26:65:b6:38:90:93:42:03:b1:08:
2e:fe:66:a5:04:7c:f6:96:4f:eb:78:43:bd:e4:4a:61:e1:f7:
18:11:6b:b4:3d:1a:53:3c:02:1e:f8:18:8a:04:63:f9:8b:0f:
31:b8:3a:63:51:7d:82:6d:ce:63:bb:8d:8a:ee:4e:3f:b1:79:
11:81:5f:b9:83:ab:a5:0d:0a:de:49:ad:09:63:7e:06:78:ad:
a6:eb:57:fc:b7:48:50:27:0e:1a:13:01:63:f9:d9:44:bc:b7:
9c:3f:11:ef:42:27:74:97:5c:8d:be:4d:e8:25:f8:e7:ef:d6:
ac:c1:95:0c:a2:8d:14:a4:b4:d9:4f:51:8f:43:b9:94:51:3f:
e1:b2:82:f6:e9:e5:40:50:4d:f1:0a:16:fb:81:0c:af:17:d3:
73:dc:03:d6:96:e4:16:42:02:50:ab:bb:a7:6e:a5:15:67:58:
cf:de:dd:6a:db:ce:9f:52:dc:56:a0:cc:5c:06:4b:d5:1d:81:
8c:f9:d2:32:43:66:35:22:e0:b8:39:5a:f0:f7:28:df:f4:e4:
d0:15:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:01:11 2025 by rpki-client