Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5tt-qFD4KgVUWAP3Pi0KY4VsTMQ.roa
File: 5tt-qFD4KgVUWAP3Pi0KY4VsTMQ.roa (raw, json)
Hash identifier: xHL69akNu8ygqckh2Luku9j4DLIATvZI7CkNxWoYoH4=
Subject key identifier: E6:DB:7E:A8:50:F8:2A:05:54:58:03:F7:3E:2D:0A:63:85:6C:4C:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BDACECA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5tt-qFD4KgVUWAP3Pi0KY4VsTMQ.roa
Signing time: Sat 19 Feb 2022 04:12:35 +0000
ROA not before: Sat 19 Feb 2022 04:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809501898 (0x6bdaceca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 04:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6db7ea850f82a05545803f73e2d0a63856c4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:ef:ae:15:fe:94:ad:74:84:0f:a4:b8:95:
cf:ec:f6:c1:57:17:9c:30:8f:fa:e8:8c:2b:b1:50:
88:3a:bc:0c:05:01:9d:cc:f5:17:e6:07:d4:ed:26:
67:da:a9:21:06:72:6c:6e:da:b0:e2:0b:d2:50:1d:
d5:00:83:f4:7f:5e:06:b0:be:dd:24:a0:97:21:22:
46:a8:e0:d2:e0:19:dd:2c:b3:b4:b2:69:60:53:f8:
a5:07:37:4f:50:f7:44:89:8d:28:ff:8b:7e:38:31:
0d:6f:5a:1d:d7:18:fb:4c:db:15:a2:cf:07:6f:36:
49:25:31:2d:75:69:76:c9:a5:94:d8:f6:c3:38:95:
b0:bf:8f:a6:ef:7f:38:b6:16:d7:d0:93:23:16:9d:
46:6b:c3:da:59:f2:20:05:69:e6:d8:02:75:33:43:
e7:a8:78:b3:36:5e:5a:44:37:42:a2:3c:af:3e:9d:
be:b3:a1:af:67:63:3c:0c:57:e2:ec:f6:40:25:0b:
e4:bd:e6:78:21:1f:27:c7:70:a0:c9:d1:de:2f:c6:
56:ad:6e:8a:ff:8b:60:97:54:72:85:1e:89:17:c0:
1d:91:f5:68:83:a9:04:4b:15:72:fb:c7:ab:f6:fc:
87:72:0f:72:a1:8b:5c:28:b1:37:89:77:b6:0f:3b:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:7E:A8:50:F8:2A:05:54:58:03:F7:3E:2D:0A:63:85:6C:4C:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5tt-qFD4KgVUWAP3Pi0KY4VsTMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:97:0c:63:29:72:c5:66:99:8d:93:bb:55:67:5c:6f:c8:aa:
f8:b2:5c:3a:f3:12:0c:26:32:ec:e8:9b:ad:11:ba:ba:42:01:
c2:eb:ca:74:f1:58:e7:dc:99:8f:c2:78:e5:9a:4f:42:db:76:
93:79:ab:7d:e9:df:a1:e9:b6:99:8b:77:15:76:4c:c8:4e:9b:
bd:fc:b9:a8:e3:c1:d6:c6:ec:74:92:0a:60:5b:e0:f3:59:be:
98:22:35:92:a7:75:47:0e:85:d9:31:da:77:0b:0f:42:d5:56:
b7:2d:48:97:24:1b:46:6c:32:29:51:36:66:4c:09:75:74:00:
24:08:f2:86:ce:c5:f9:b1:32:2e:4b:5b:dd:84:a8:65:48:66:
54:bc:07:e1:75:d9:be:5c:fe:66:5a:f5:29:d7:a3:39:0e:24:
20:b5:a3:80:7e:cf:c1:38:16:2f:4b:b3:b2:f1:ae:b2:6b:8a:
c3:bd:5c:7f:c2:4b:2b:c3:a9:98:d7:c7:f1:eb:5b:87:88:32:
5a:79:0f:5a:31:cf:53:eb:ef:94:7c:ce:93:97:f8:ec:2b:78:
7d:fa:53:bc:38:cb:04:80:7c:fd:8a:e7:45:8e:ce:81:62:13:
bd:dc:c9:f1:cd:34:13:7d:13:d7:cf:1a:2f:87:12:bf:38:01:
93:9c:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:09 2025 by rpki-client