Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vW430ND23kUzIRA90PXjMqtU1c.roa
File: 5vW430ND23kUzIRA90PXjMqtU1c.roa (raw, json)
Hash identifier: qKY0TmXbOrtmkKQAIpHeVAK4YweB3kfVdgDVXwmywZI=
Subject key identifier: E6:F5:B8:DF:43:43:DB:79:14:CC:84:40:F7:43:D7:8C:CA:AD:53:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822941A1B75BFB8E24FA6C9B770E0EA220
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vW430ND23kUzIRA90PXjMqtU1c.roa
Signing time: Sat 23 Jul 2022 04:12:23 +0000
ROA not before: Sat 23 Jul 2022 04:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:29:41:a1:b7:5b:fb:8e:24:fa:6c:9b:77:0e:0e:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 04:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6f5b8df4343db7914cc8440f743d78ccaad5357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:9e:95:cd:45:27:bf:9a:fd:ea:24:60:9c:
a1:06:54:f0:62:2e:90:ce:3a:e3:87:94:9b:50:22:
43:e4:fb:5f:f9:f0:70:94:5a:36:23:07:f7:13:64:
d2:44:4d:7a:24:bd:92:11:7d:21:ac:12:ce:71:8a:
ff:61:30:75:2f:c4:18:29:52:63:e9:16:d4:c1:b0:
5b:13:49:84:b7:e3:5f:ae:3c:b8:fb:50:f7:da:f9:
d6:c8:bc:23:54:71:c4:59:50:bd:35:e1:7c:48:5d:
72:bb:b0:2c:4d:42:90:d9:92:50:17:fb:7a:a8:b6:
f2:ad:12:f0:7a:28:d9:e4:a0:3f:f9:18:57:ee:b4:
72:36:0e:c9:2e:4d:86:b4:66:f4:87:8b:71:7d:5e:
68:1b:06:a8:b4:96:df:ea:ee:0b:5c:65:c3:e9:13:
67:b5:78:2f:cd:8b:2a:d2:3d:0f:bc:ae:17:8e:95:
5c:13:66:7c:34:74:04:d1:cd:cb:99:3a:13:6a:f8:
db:5f:4c:32:4a:e3:b2:1c:8d:1c:34:5e:1e:c1:91:
8a:e6:7c:40:25:11:2f:2c:a6:b8:05:e1:ae:9e:9e:
cd:57:8a:6c:ab:1e:e4:c6:65:71:06:43:d6:8f:aa:
53:ce:25:37:c6:be:ba:d6:aa:57:6e:72:3b:1d:56:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:B8:DF:43:43:DB:79:14:CC:84:40:F7:43:D7:8C:CA:AD:53:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vW430ND23kUzIRA90PXjMqtU1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:37:15:6c:8c:9f:9f:5d:77:f8:b8:b9:dc:cc:71:20:62:44:
c0:5d:d8:c1:91:ac:6a:ca:c6:54:24:a5:f4:5b:ee:04:51:f6:
d0:ac:53:dc:64:be:5d:a2:d6:43:63:01:ac:73:6d:3b:ec:8f:
ae:2e:2d:bb:f6:c9:f8:6a:d3:4d:d4:85:ee:11:16:5c:76:69:
60:de:0e:02:38:f1:e7:db:1c:35:4b:e8:e4:7c:e6:84:e9:46:
4c:c1:e9:7f:4c:2c:81:66:55:28:2e:4c:d1:8d:aa:fe:a7:5e:
9a:c9:c5:da:1f:25:72:e4:b1:3e:5f:3a:55:03:d5:f1:e4:60:
b7:6f:85:a1:e7:b8:b0:95:65:03:a0:c5:e9:59:11:8f:57:a4:
2d:eb:43:8d:4e:86:62:68:60:a7:ff:aa:e1:13:d3:98:e3:26:
a5:aa:df:d6:ed:3a:71:19:f4:fe:30:5f:95:52:4e:67:99:9d:
4a:5a:85:e7:59:ad:4c:28:3b:95:e8:59:99:d9:ad:70:d5:b7:
36:b9:ec:61:77:03:98:f2:85:9e:6a:61:d8:aa:29:6f:3f:9c:
d5:42:0a:a6:c6:dd:ee:3f:35:56:9b:7e:ed:90:f0:ff:4d:5c:
ba:5a:c2:29:93:9b:61:6c:96:72:84:3b:b7:e7:18:61:58:d7:
a4:73:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:20:19 2025 by rpki-client