Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qelVk5bxCStlB3JPgJhPVKnV4E.roa
File: 5qelVk5bxCStlB3JPgJhPVKnV4E.roa (raw, json)
Hash identifier: wE1G6UjOj82VrkJ/terigVEvzJIvnIylfpfxR3ILt7A=
Subject key identifier: E6:A7:A5:56:4E:5B:C4:24:AD:94:1D:C9:3E:02:61:3D:52:A7:57:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A0EB11A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qelVk5bxCStlB3JPgJhPVKnV4E.roa
Signing time: Sat 12 Feb 2022 21:08:33 +0000
ROA not before: Sat 12 Feb 2022 21:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779347738 (0x6a0eb11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 21:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6a7a5564e5bc424ad941dc93e02613d52a75781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:4f:c7:1e:42:bd:e8:a9:eb:20:8b:5c:3a:
9b:44:f9:30:6b:28:e0:f3:c6:de:6c:5a:01:4b:9f:
0e:bc:90:5f:ad:22:4f:0c:43:fd:30:f6:18:b5:65:
3d:ca:08:1d:81:09:f5:d7:6a:3e:7b:aa:b5:9b:ec:
f9:e4:ea:82:d5:02:65:a1:06:db:98:2b:dd:7d:ab:
11:ad:b6:05:63:fa:46:30:72:f2:c5:e6:e8:7f:c4:
f0:ee:44:7b:26:c5:64:f2:99:f0:64:cd:b3:94:78:
38:e2:f9:5c:73:37:f1:cd:1c:be:fe:d9:7a:2e:81:
b7:32:84:29:84:36:15:e4:0c:31:7e:a2:29:06:61:
8b:2b:ec:ae:7e:26:de:54:33:de:c8:92:11:cf:91:
4b:be:9d:41:22:f5:4f:c8:96:b1:29:25:a1:7f:18:
3e:d2:58:04:65:1a:98:12:ee:82:a3:53:36:f7:71:
21:aa:5b:5c:b7:fb:70:12:74:54:55:f9:b9:6a:3d:
4a:1b:a0:81:71:3a:c3:53:82:99:4f:53:da:49:f6:
22:29:55:e9:a8:40:fd:ee:d8:b8:6f:e0:86:e5:c0:
22:ed:af:07:5c:ab:06:05:39:8a:b2:89:60:07:7b:
4d:a6:e5:f5:fc:9a:eb:87:0c:9c:5f:aa:1f:87:1d:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:A5:56:4E:5B:C4:24:AD:94:1D:C9:3E:02:61:3D:52:A7:57:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qelVk5bxCStlB3JPgJhPVKnV4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:32:ea:3b:a2:cf:b2:10:78:62:18:05:60:a8:fc:34:eb:8b:
fe:87:03:4d:d1:99:4f:c0:f5:20:90:12:4f:39:df:b0:79:5c:
3e:9d:a0:56:d3:39:5a:0f:e7:7d:a4:6a:13:04:40:f3:4a:43:
bf:34:cc:5c:0b:5d:1d:3d:37:d5:ad:31:a6:36:62:5f:5a:24:
67:fb:17:6a:9a:62:c3:d9:e6:76:56:2a:02:a3:23:a6:79:61:
ad:12:51:cd:8f:be:89:69:03:a9:9f:d5:71:b9:62:a4:98:1c:
fe:46:5f:9b:0c:51:0f:5f:87:55:4e:67:47:42:23:72:86:67:
11:92:a2:33:9c:09:54:cb:35:5f:e1:98:b1:84:28:bd:be:1e:
59:1c:c9:89:a3:a9:25:4a:a6:fb:1d:e9:57:44:0e:d9:96:03:
97:44:f3:17:8e:b2:b5:2d:d0:08:57:fb:93:57:fb:40:29:e1:
6f:0f:8c:4b:ff:98:43:d3:ce:db:2a:8b:eb:d4:8e:c8:72:9e:
63:9c:71:fc:c8:dd:50:9c:fc:e0:f1:8a:da:2a:7f:3b:09:ec:
06:0f:2c:64:dd:30:ec:0f:bc:48:c1:5d:a2:64:0c:a3:05:99:
03:35:9c:2c:a9:1c:bf:db:59:20:4a:25:05:1b:a2:a8:66:77:
c2:bc:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:53:10 2025 by rpki-client