Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5u6rpG-fi9DZxK3j8CjXI8uPPHM.roa
File: 5u6rpG-fi9DZxK3j8CjXI8uPPHM.roa (raw, json)
Hash identifier: ExeNaETmH+erPTyza8BnRvZA0jW0mpF3+Az1qa/gvfw=
Subject key identifier: E6:EE:AB:A4:6F:9F:8B:D0:D9:C4:AD:E3:F0:28:D7:23:CB:8F:3C:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844971840A013D775C7E3400707F5382E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5u6rpG-fi9DZxK3j8CjXI8uPPHM.roa
Signing time: Sat 05 Nov 2022 20:18:06 +0000
ROA not before: Sat 05 Nov 2022 20:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:71:84:0a:01:3d:77:5c:7e:34:00:70:7f:53:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 20:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6eeaba46f9f8bd0d9c4ade3f028d723cb8f3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:1a:e1:22:95:d1:f3:da:68:2e:14:22:0f:
2e:cd:77:1a:a4:ec:24:84:d5:05:16:01:b0:0b:30:
c7:52:ff:1d:6a:5a:a4:f0:ca:f3:a8:6e:e7:51:26:
04:3e:71:e1:46:b9:ee:19:cf:b0:92:bf:36:cf:6d:
8d:5a:09:ba:4f:ae:c2:c5:5b:cd:4d:11:03:31:cd:
46:6b:08:c4:46:92:2f:d6:f9:9e:43:d6:07:14:95:
c9:da:bb:7d:3e:d6:eb:02:04:07:a9:53:9c:b6:31:
08:14:1c:8b:02:08:c7:5b:ec:74:42:8c:22:92:a2:
0b:aa:31:89:dc:43:2d:a5:8a:bc:3d:df:39:fd:a2:
1e:e4:2f:b9:6a:b4:27:b2:fc:68:ca:51:21:75:4d:
ea:fb:fa:6e:ef:10:b0:cb:fb:9a:f2:ee:d3:71:80:
f5:be:2d:93:d3:39:5c:91:52:20:24:fa:a4:49:79:
0a:d1:7c:ed:77:5b:f3:d0:f4:16:22:80:34:ec:38:
a7:15:75:62:19:ed:fd:e6:98:7d:5c:db:af:bb:37:
84:31:7c:a2:05:8a:21:dd:bd:80:be:68:e0:f0:6c:
b6:ad:ee:5a:81:5f:ee:1b:21:f5:59:c5:0a:7d:94:
e6:f7:fd:63:6b:7f:00:ce:a8:b7:38:93:e1:c9:ed:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EE:AB:A4:6F:9F:8B:D0:D9:C4:AD:E3:F0:28:D7:23:CB:8F:3C:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5u6rpG-fi9DZxK3j8CjXI8uPPHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:e3:e8:ea:b7:ba:b7:a9:de:3d:da:5b:2c:04:7e:96:23:a0:
c0:9f:bb:0d:f5:eb:ed:da:6e:5b:64:c1:de:57:13:e5:5c:2e:
da:8c:31:30:8e:a3:ed:a1:a9:26:5f:73:ec:91:3a:f0:fc:20:
57:06:07:1c:23:f3:27:c4:52:ad:fb:2f:ba:f1:5b:ea:5f:ca:
03:f2:f0:a0:a5:ee:e8:b8:4e:1e:10:28:5e:aa:fa:87:8e:0a:
f6:0d:f6:d6:6b:db:41:76:15:df:08:f8:1d:71:34:91:e3:d9:
a3:33:71:2c:49:4c:5c:d4:26:d0:bb:6e:bf:d6:a0:2e:cd:9b:
c4:6b:72:06:64:22:75:69:a1:cd:3e:b7:be:90:06:96:33:9a:
c2:77:c3:99:bf:c4:f3:f2:38:df:0d:6b:03:e2:67:cc:e9:5c:
9b:1e:ee:0d:bb:d1:9d:77:75:6c:d5:f2:ad:10:4d:d6:d1:2c:
af:05:9d:5a:46:8b:6a:ab:35:ce:02:1b:c0:87:24:f0:2d:8e:
55:70:67:65:cd:49:24:f3:ef:8b:f0:8b:ec:ce:1b:b4:ab:57:
40:77:92:cf:1d:ee:42:a7:4e:0d:67:52:98:c5:1c:c6:39:94:
40:94:64:fc:ce:04:25:84:91:c7:f2:62:b2:94:03:86:5c:0e:
9a:4d:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:51:23 2025 by rpki-client