Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5xurphq_dGTPQ6g3bSPqQt6Fc6U.roa
File: 5xurphq_dGTPQ6g3bSPqQt6Fc6U.roa (raw, json)
Hash identifier: lqhl9ZRUiLQqj2pPfQcxigHWbBYryFE3RudpbJ8In04=
Subject key identifier: E7:1B:AB:A6:1A:BF:74:64:CF:43:A8:37:6D:23:EA:42:DE:85:73:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864C2F8FC60D70192FDC2169F9DB6BA277
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5xurphq_dGTPQ6g3bSPqQt6Fc6U.roa
Signing time: Mon 13 Feb 2023 19:10:30 +0000
ROA not before: Mon 13 Feb 2023 19:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:2f:8f:c6:0d:70:19:2f:dc:21:69:f9:db:6b:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 19:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e71baba61abf7464cf43a8376d23ea42de8573a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:3e:c8:8e:61:cd:47:46:3b:22:5d:f1:4a:
b3:b7:e8:11:dc:71:74:f7:f9:60:ae:33:00:4c:37:
07:bd:89:a1:9f:d9:ed:7d:4e:c0:e1:6c:9b:73:8f:
56:df:61:5f:dc:93:0b:4f:30:e8:73:4d:4d:8a:b8:
ff:0d:27:c2:b3:88:39:77:87:49:98:46:c9:0a:23:
fb:33:21:9a:c6:ee:a9:36:2d:88:49:c9:77:eb:74:
b3:f1:68:a4:41:ca:ab:2b:92:f5:ad:b3:c3:e9:e3:
a8:4c:76:83:89:1e:de:3c:ef:aa:ff:0a:3f:e3:fc:
84:83:7d:ca:74:a9:68:fd:d2:68:69:45:5a:01:eb:
dc:84:0c:04:ba:04:7d:01:f4:c9:6d:94:b0:b1:53:
30:ba:81:6b:38:9c:d1:f8:f0:98:d7:14:47:93:7a:
e9:fb:56:ab:08:e1:18:a9:bf:61:02:35:00:62:b5:
1c:22:3b:4b:7f:c9:a8:88:d2:6d:a9:b2:3e:c6:31:
9a:c1:0a:ba:9c:ed:03:8c:07:71:64:81:6a:29:5f:
aa:c8:cb:eb:b5:4e:84:04:e4:1f:a4:6b:17:b1:00:
89:c7:09:b3:c5:ad:6c:a2:dc:48:d6:d8:18:ca:66:
59:67:79:3a:7e:72:3a:cb:fb:f3:bc:ab:be:2c:d9:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:AB:A6:1A:BF:74:64:CF:43:A8:37:6D:23:EA:42:DE:85:73:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5xurphq_dGTPQ6g3bSPqQt6Fc6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:05:17:0b:8f:8f:4d:04:98:92:b7:fd:2a:86:90:43:56:87:
1a:78:51:8d:e4:48:57:ee:2c:1c:15:d9:1c:6a:9e:0d:21:db:
b8:ad:aa:d3:a3:a7:94:99:db:a0:c9:65:aa:be:c1:fc:cf:2e:
b2:ee:5e:7c:fe:10:c8:09:8d:60:4c:9e:91:fc:c3:8d:e5:67:
21:00:f6:79:16:5d:60:c7:1b:e0:4f:98:dd:70:ad:6e:b7:e7:
d1:f1:5f:3a:2b:99:15:9c:c5:4b:3e:ba:8e:2e:15:ef:28:4d:
01:49:e6:b9:11:ef:d6:3e:42:77:97:1a:75:d5:b6:4a:b9:93:
01:25:83:2b:6d:21:22:b1:c5:a4:30:01:77:f4:0a:d1:54:5f:
a7:9e:ef:aa:a8:f5:d1:17:0b:41:00:43:a9:f4:9c:bd:70:80:
ab:bb:90:4e:ef:56:43:ef:c7:5f:e7:f9:d9:a5:b4:9e:f2:15:
8a:e2:d6:51:23:18:1a:c0:de:b7:7c:43:c1:76:ac:32:9a:33:
1b:6e:c4:1a:33:a9:c7:f1:37:a4:f6:94:27:cd:94:a6:a1:6e:
04:46:27:36:79:d6:39:5e:a9:7b:47:16:cb:5b:4c:c4:7f:80:
dd:ea:3e:40:b1:78:f0:78:6c:8c:c6:b2:fc:8e:cd:e9:5e:3f:
6f:96:c4:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZML4/GDXAZL9whafnba6J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEzMTkxMDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzFiYWJhNjFhYmY3NDY0Y2Y0M2E4Mzc2ZDIzZWE0MmRlODU3M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nc+yI5hzUdGOyJd8Uqzt+gR3HF0
9/lgrjMATDcHvYmhn9ntfU7A4Wybc49W32Ff3JMLTzDoc01Nirj/DSfCs4g5d4dJ
mEbJCiP7MyGaxu6pNi2IScl363Sz8WikQcqrK5L1rbPD6eOoTHaDiR7ePO+q/wo/
4/yEg33KdKlo/dJoaUVaAevchAwEugR9AfTJbZSwsVMwuoFrOJzR+PCY1xRHk3rp
+1arCOEYqb9hAjUAYrUcIjtLf8moiNJtqbI+xjGawQq6nO0DjAdxZIFqKV+qyMvr
tU6EBOQfpGsXsQCJxwmzxa1sotxI1tgYymZZZ3k6fnI6y/vzvKu+LNl5jwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOcbq6Yav3Rkz0OoN20j6kLehXOlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNXh1cnBocV9kR1RQUTZnM2JTUHFRdDZGYzZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIMFFwuPj00EmJK3/SqG
kENWhxp4UY3kSFfuLBwV2Rxqng0h27itqtOjp5SZ26DJZaq+wfzPLrLuXnz+EMgJ
jWBMnpH8w43lZyEA9nkWXWDHG+BPmN1wrW6359HxXzormRWcxUs+uo4uFe8oTQFJ
5rkR79Y+QneXGnXVtkq5kwElgyttISKxxaQwAXf0CtFUX6ee76qo9dEXC0EAQ6n0
nL1wgKu7kE7vVkPvx1/n+dmltJ7yFYri1lEjGBrA3rd8Q8F2rDKaMxtuxBozqcfx
N6T2lCfNlKahbgRGJzZ51jleqXtHFstbTMR/gN3qPkCxePB4bIzGsvyOzeleP2+W
xMA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:41 2025 by rpki-client