Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ue5KWygMnwYkFrSpe2aM1edh5Q.roa
File: 5ue5KWygMnwYkFrSpe2aM1edh5Q.roa (raw, json)
Hash identifier: GjRgGJ/blUKovhIRioe2o5jBMscDDAXhUokvnYm0aL4=
Subject key identifier: E6:E7:B9:29:6C:A0:32:7C:18:90:5A:D2:A5:ED:9A:33:57:9D:87:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896160F79BDB2954547506410506046D40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ue5KWygMnwYkFrSpe2aM1edh5Q.roa
Signing time: Mon 17 Jul 2023 01:04:51 +0000
ROA not before: Mon 17 Jul 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:6160:beab/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:61:60:f7:9b:db:29:54:54:75:06:41:05:06:04:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e7b9296ca0327c18905ad2a5ed9a33579d8794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:78:fe:08:30:a5:61:f5:18:2d:e1:3a:21:
d7:8a:d4:0c:4a:96:2f:01:91:97:65:bb:0f:96:5f:
f8:80:35:93:ca:52:13:25:a5:72:b4:8d:b5:ad:14:
ee:b7:a8:71:cb:0c:25:7d:d9:fd:1c:92:8a:ee:17:
ca:ae:08:c7:64:8b:db:5f:9e:8b:eb:ad:71:21:ed:
03:79:5d:58:9b:f6:fd:71:af:14:e8:79:36:d7:20:
37:2c:c9:05:3d:95:ff:ac:c0:8e:c1:21:ba:60:9f:
19:b1:72:d4:67:df:8c:2e:f1:cb:e4:81:5e:6b:f9:
b6:ef:8f:b6:ee:6a:77:1f:21:d1:c4:c2:5d:58:48:
2d:40:32:a4:cc:27:92:94:f9:4e:5b:58:e4:94:c8:
69:b8:ee:2a:c2:5b:81:fe:07:20:7c:35:56:8d:5b:
98:68:88:44:3f:42:cc:a4:59:68:7e:27:5b:1e:55:
78:45:e4:30:6e:71:72:e9:5a:ef:21:48:f3:36:5a:
2e:cd:11:75:ce:b1:5d:d3:52:78:c2:cf:55:7f:d1:
98:08:9d:99:a6:e0:8b:63:a2:23:29:7a:66:54:18:
69:33:e6:2e:31:6d:b2:87:66:c1:f3:c8:20:27:26:
b5:8a:d9:35:70:9d:52:bc:a9:85:cf:8a:fe:dc:30:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:B9:29:6C:A0:32:7C:18:90:5A:D2:A5:ED:9A:33:57:9D:87:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5ue5KWygMnwYkFrSpe2aM1edh5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:79:1b:ab:ba:22:ba:63:14:ae:88:5b:b6:0c:0c:93:d8:d7:
f6:ae:79:77:82:13:66:26:88:c2:a7:f7:22:fa:58:73:b5:32:
10:04:f0:0e:4c:d6:bb:72:1a:dc:1d:c5:41:d9:9f:73:19:c4:
b1:f2:22:47:43:29:9a:28:d7:38:a8:b4:88:33:df:cc:98:17:
9a:8e:c1:43:5e:44:4d:f8:c1:a2:76:e8:ea:71:b8:26:dc:46:
62:83:c4:70:01:7b:11:b1:9e:a5:70:ed:1c:93:de:22:1a:cb:
12:97:9f:f5:d3:7f:0e:9a:ad:0a:14:c6:9b:59:08:bc:87:85:
10:e2:ff:5d:0d:13:07:c2:a6:5d:27:29:11:1a:67:da:e9:a4:
1e:08:85:5e:8a:6f:85:a4:aa:93:50:f8:17:cc:c2:16:35:1b:
1d:bf:2f:b5:6d:81:8b:fa:03:28:89:01:7a:e4:7b:5a:24:cc:
ff:ac:7a:51:f0:1c:48:97:ab:50:e0:1e:67:7d:57:7a:61:f8:
e7:91:95:b9:31:26:72:29:73:05:bc:3d:77:27:8e:3c:01:54:
45:c1:97:78:e4:85:a9:63:4b:95:c0:9f:33:05:a4:a0:6e:cb:
dc:ea:8f:2a:c7:ff:c2:ad:35:6d:0b:1b:df:4c:33:59:8e:3d:
2d:24:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:22:50 2025 by rpki-client