Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5xnCMEVcb6lnrNUTGtqFLlG6f9Y.roa
File: 5xnCMEVcb6lnrNUTGtqFLlG6f9Y.roa (raw, json)
Hash identifier: RQPXmDMMONFE+j2N0IPTI4/ft2nPHEgC0JeeRIjQuUw=
Subject key identifier: E7:19:C2:30:45:5C:6F:A9:67:AC:D5:13:1A:DA:85:2E:51:BA:7F:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D8BB5D082D606987F6E3583F712FA4EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5xnCMEVcb6lnrNUTGtqFLlG6f9Y.roa
Signing time: Sat 03 Dec 2022 16:04:28 +0000
ROA not before: Sat 03 Dec 2022 16:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:d8bb:3539/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:bb:5d:08:2d:60:69:87:f6:e3:58:3f:71:2f:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 16:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e719c230455c6fa967acd5131ada852e51ba7fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:81:fc:44:78:a2:67:d7:d8:89:c7:68:5c:
48:09:c4:5e:33:b3:a7:63:f3:b8:e4:ba:6e:e7:ee:
c0:70:30:82:31:66:5e:b1:eb:27:77:d8:8a:8e:fc:
12:81:54:b9:d3:61:cb:3c:03:67:7c:56:49:02:ed:
27:c5:11:81:04:4c:f9:96:84:91:21:fc:3e:4a:e4:
6c:cd:69:92:d3:5e:83:de:45:cc:16:83:b0:a3:ee:
9b:e9:cd:ba:a2:34:ec:5c:bb:a2:4c:a2:65:43:11:
24:60:7e:76:c3:03:c3:4c:35:e8:b1:b9:32:d8:44:
45:90:14:c5:a4:e2:0b:89:e7:8f:3c:b9:a7:7e:65:
fc:bc:f8:87:ef:10:4a:c2:9d:0f:2e:33:09:66:aa:
43:0b:26:0a:aa:91:b6:44:c0:89:33:74:94:91:5b:
95:01:42:79:4a:d9:34:22:5e:02:19:5f:cf:a8:3a:
8f:7e:3f:b1:5f:46:cd:ec:be:45:c4:3d:9e:47:1e:
9a:64:e1:3a:dc:7d:4b:f4:5f:2e:18:1f:bc:c3:15:
d3:44:a8:04:86:38:bc:c5:83:d0:f2:1b:96:4c:b1:
fc:71:c1:28:8f:c6:8e:78:b7:4c:ea:e5:fd:f3:12:
ef:a9:8f:b6:26:73:ab:d6:6f:2c:8f:74:69:d5:2d:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:C2:30:45:5C:6F:A9:67:AC:D5:13:1A:DA:85:2E:51:BA:7F:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5xnCMEVcb6lnrNUTGtqFLlG6f9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:04:cd:df:f8:d8:1c:d2:43:e4:78:f8:a3:b3:55:20:4c:0c:
4d:35:ec:a1:44:05:0b:18:5a:68:ad:19:24:40:06:7d:64:7f:
6b:0b:fa:a1:88:ca:b1:c0:be:b9:49:69:a9:cf:d0:93:1b:76:
56:75:f9:c3:f6:72:e5:3b:5e:a4:46:5c:ad:90:94:78:4e:bf:
58:75:7b:a0:2e:2c:e4:ca:7d:50:ae:b7:55:9a:8c:e8:32:5b:
e3:09:80:b1:57:28:d9:6d:81:ff:dc:f7:53:90:f6:5f:44:d9:
5d:99:7a:17:fd:b2:0f:41:3d:47:18:e1:9f:0d:c9:e2:72:b9:
5c:5d:bf:aa:89:e8:9c:0f:60:42:af:23:eb:c5:a4:97:4a:83:
d0:74:bd:52:0b:cc:57:1c:04:56:25:ed:b2:73:3e:73:a1:35:
f4:8e:5b:0e:12:49:44:cd:86:75:c3:24:f8:cd:4c:3b:98:74:
35:30:30:81:35:39:3b:13:2e:82:4a:2b:f5:0d:28:42:c8:53:
e8:2e:9c:f3:9d:19:3b:be:cf:6b:c1:52:5e:a9:2f:35:e6:be:
19:d8:c9:f0:00:db:0b:71:8b:f6:44:00:94:27:8d:fa:02:1a:
98:6a:66:2f:d4:6b:d4:c5:3b:8d:b9:e0:6f:b6:28:95:47:ce:
48:0d:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:18:06 2025 by rpki-client