Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vIsuzfq3Yevq87fd4uqk5crz9o.roa
File: 5vIsuzfq3Yevq87fd4uqk5crz9o.roa (raw, json)
Hash identifier: geqjlLQxOKsYpJZ586jUFcpBfRAcQ7ZtfhyHiFpjnEk=
Subject key identifier: E6:F2:2C:BB:37:EA:DD:87:AF:AB:CE:DF:77:8B:AA:93:97:2B:CF:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876430090A907AECA39B0CE92DDEADC817
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vIsuzfq3Yevq87fd4uqk5crz9o.roa
Signing time: Sun 09 Apr 2023 04:04:42 +0000
ROA not before: Sun 09 Apr 2023 04:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:642f:efaf/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:64:30:09:0a:90:7a:ec:a3:9b:0c:e9:2d:de:ad:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 04:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f22cbb37eadd87afabcedf778baa93972bcfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:38:be:2c:3d:94:a8:d8:b5:17:28:30:49:
cc:41:da:e7:d8:83:d8:7b:ac:17:dc:29:17:55:b0:
c2:c7:0d:4d:52:f2:3e:26:9e:67:42:cd:7e:4a:e9:
d0:c6:f8:d3:b2:8a:16:75:2b:e2:13:b7:38:a1:67:
f1:40:2e:0f:6a:2e:ce:68:a2:f3:a8:d2:1e:a3:9b:
18:b2:e8:3c:f2:e0:10:74:b9:ca:f3:5f:f8:76:3f:
8c:ae:27:a6:c0:40:f2:a5:62:ab:58:cf:9e:94:c9:
2e:c1:0e:2a:8f:fb:e2:70:42:7e:82:f5:dd:90:b5:
e0:95:70:94:df:55:71:8b:e8:04:42:a4:d9:23:40:
58:d7:7b:6d:a8:ba:74:71:8a:51:b0:4f:88:23:30:
1d:cf:82:fc:d0:62:f6:19:ed:30:e5:a3:3a:f8:59:
0d:05:c6:34:35:11:23:a6:83:14:1a:27:3a:da:19:
36:34:cd:0b:1d:ff:56:35:ea:9f:3c:e5:f0:8e:fb:
d4:9c:25:57:32:35:41:dd:77:d7:37:18:29:e3:72:
a1:5e:cd:15:c9:08:f6:6b:8d:64:c3:13:89:88:45:
71:e7:56:fc:96:d6:a0:d4:9b:7a:40:23:46:05:22:
93:dd:63:2d:39:47:f1:e5:bb:a5:5f:dc:42:ac:4d:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:2C:BB:37:EA:DD:87:AF:AB:CE:DF:77:8B:AA:93:97:2B:CF:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vIsuzfq3Yevq87fd4uqk5crz9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:de:ce:90:3c:d5:ba:40:d8:79:ba:e2:68:6e:84:54:7e:66:
fe:35:32:57:6a:45:95:15:d2:52:cd:ba:51:a3:1b:10:8d:a3:
3f:fd:2c:dd:d6:b6:84:bd:bc:f9:d0:e3:70:79:59:be:6d:38:
f4:ee:42:3d:73:85:52:28:eb:3c:08:57:e3:d4:80:6b:50:7f:
18:6f:fe:fe:66:d4:92:d3:a5:07:55:2c:dc:09:93:e7:69:8b:
01:27:33:6d:b1:d6:05:14:e8:c0:de:d8:25:25:d5:f3:d5:c1:
03:6b:98:4f:e3:6e:68:56:51:fd:08:d3:b6:24:e3:68:3c:cd:
a4:25:17:79:19:41:ca:35:03:98:72:7d:cb:03:ed:c8:6d:43:
e6:0a:25:2f:1c:c9:b0:54:01:70:a1:6c:41:55:f8:38:bb:55:
01:a5:1c:85:8e:fe:b2:e5:c4:1f:fe:43:24:9a:7b:b7:32:79:
fd:24:fa:36:01:1e:9a:f5:6b:a0:ab:3a:18:00:b4:65:72:b6:
80:4c:c9:19:b3:28:63:9f:61:e4:08:9f:43:1b:fe:e8:bb:a2:
55:6c:1a:fa:e7:96:df:d9:b3:0f:77:98:57:46:fa:14:d9:0b:
3f:1b:a5:30:db:6b:f3:27:c8:df:05:8b:b5:6a:96:9b:dd:4c:
7c:e8:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:08:23 2025 by rpki-client