Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5qR7xZV3UjgNMBaZnVdSvvmmR0.roa
File: B5qR7xZV3UjgNMBaZnVdSvvmmR0.roa (raw, json)
Hash identifier: 5EODHYXNGkr6oNjCgzS21OIkD1PrKE4HtuIYRruu2Ys=
Subject key identifier: 07:9A:91:EF:16:55:DD:48:E0:34:C0:5A:66:75:5D:4A:FB:E6:99:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865CB658A5A330D33C1A6AF2DC367C7DA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5qR7xZV3UjgNMBaZnVdSvvmmR0.roa
Signing time: Fri 17 Feb 2023 00:11:39 +0000
ROA not before: Fri 17 Feb 2023 00:11:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:b6:58:a5:a3:30:d3:3c:1a:6a:f2:dc:36:7c:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 00:11:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=079a91ef1655dd48e034c05a66755d4afbe6991d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:9a:48:ec:7c:5b:b9:cd:b2:f4:b9:6b:64:
21:0b:67:a4:26:4b:c0:06:6b:eb:b8:79:e6:4f:b4:
70:8b:a6:85:36:dc:3e:f4:16:cc:4a:dd:a5:c6:af:
78:e4:37:64:99:32:a8:e1:49:fa:a3:96:70:74:52:
94:87:20:9c:2e:6a:a1:cd:8e:90:47:fa:07:2c:bc:
73:49:9b:47:0b:33:af:45:9f:a4:b3:13:c3:df:02:
a7:a4:66:d7:3d:7d:8f:57:da:30:76:d3:e3:6f:8d:
21:ac:5d:61:0c:12:5c:17:86:73:a6:42:98:c8:89:
3b:45:1a:82:73:bd:de:78:20:bd:8c:10:63:32:a1:
c8:b3:f9:5a:91:14:7a:f2:4f:24:15:f5:f9:ba:14:
30:19:ce:4a:c4:cb:fb:59:f2:96:2d:2d:c6:c7:fb:
06:0c:9d:96:86:19:ee:fb:29:b8:d4:19:5f:8a:1a:
8c:ea:70:1d:fa:6b:38:5d:7f:43:c9:20:f2:40:1b:
a1:32:bb:83:b4:f4:7f:e3:1c:8b:89:73:0b:a5:dc:
98:bc:35:88:29:ba:e0:da:10:52:59:73:3c:98:03:
95:c2:58:e9:a9:6c:df:9f:0c:d4:79:65:12:61:63:
96:e9:7e:44:f0:62:a0:46:7d:3f:0a:e7:5e:e4:45:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:91:EF:16:55:DD:48:E0:34:C0:5A:66:75:5D:4A:FB:E6:99:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5qR7xZV3UjgNMBaZnVdSvvmmR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:24:35:39:f8:f2:c3:31:3c:6e:1d:98:17:dc:2a:d2:71:15:
ec:fd:ea:3c:cc:bb:aa:4a:f8:5b:99:96:89:98:20:c4:e9:39:
c7:2c:fb:ee:0a:60:96:ad:bc:4b:26:00:62:08:ec:81:12:05:
e4:19:9b:65:38:fd:ca:4c:48:43:15:82:de:3a:fd:8d:b0:c0:
47:26:4c:67:b9:22:61:0f:c2:74:47:62:78:d0:02:df:d3:66:
21:a3:72:6a:38:e3:68:71:92:d5:22:39:bf:88:40:87:5d:02:
d6:bd:1d:10:f0:f3:55:c9:be:0c:50:db:37:57:2a:5e:ad:8f:
1f:e1:87:e6:25:71:28:7e:19:b5:31:a2:e4:6a:bc:db:7b:24:
6b:17:60:d5:02:1a:a4:76:9c:bb:3c:a3:2e:b9:1f:a6:13:ee:
d6:c6:da:8e:b4:47:1d:f8:69:67:5e:6e:a1:24:6b:71:41:de:
4a:19:ab:df:55:b0:6e:92:26:00:09:d9:ba:04:f0:43:d4:52:
84:3b:f1:21:5f:6c:b4:5d:cf:bd:fb:06:8e:07:d2:10:79:fd:
82:35:df:17:54:57:01:99:e4:aa:35:4d:d2:8c:3d:85:1d:18:
5d:49:8a:b0:ce:92:8f:14:a5:4c:43:8f:09:52:5a:7a:9b:f7:
86:4a:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:19:19 2025 by rpki-client