Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5J6VFhLpmgd1xZOuFW4BL3SpVY.roa
File: C5J6VFhLpmgd1xZOuFW4BL3SpVY.roa (raw, json)
Hash identifier: CxDgRa1tQzvzx0UzALomTdbJpuK6o36dHwxmPQPIisg=
Subject key identifier: 0B:92:7A:54:58:4B:A6:68:1D:D7:16:4E:B8:55:B8:04:BD:D2:A5:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895677B05FADB77D4432A1195EC6025F9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5J6VFhLpmgd1xZOuFW4BL3SpVY.roa
Signing time: Fri 14 Jul 2023 22:13:51 +0000
ROA not before: Fri 14 Jul 2023 22:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:77:b0:5f:ad:b7:7d:44:32:a1:19:5e:c6:02:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 22:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b927a54584ba6681dd7164eb855b804bdd2a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:3d:65:2d:c9:db:bc:f6:0c:14:55:8d:d5:
f2:dd:51:91:4c:e1:8a:ac:86:59:58:8b:e0:3a:37:
9f:ab:1c:61:3b:04:47:76:67:af:27:8c:f0:1b:5f:
b1:92:04:5b:c9:17:e0:46:29:4b:3f:5f:ca:b9:59:
bc:f8:14:f1:b9:e3:6c:78:69:24:a3:a8:76:8a:5f:
98:a1:f2:cf:96:62:d3:5c:d5:07:9e:33:e0:f8:d8:
c2:a1:d3:7c:af:dc:14:c3:b1:51:2f:d2:8a:ab:c5:
dc:fd:4d:fe:bf:9e:e9:8d:8f:6d:4c:bc:84:b8:5e:
d9:aa:da:ce:a8:1f:cc:00:a6:a9:7b:14:78:61:cf:
94:7e:e9:ed:4c:0b:98:9c:b3:2f:6b:01:8c:ea:30:
b1:c8:73:42:93:52:bd:47:bb:20:09:7a:e0:a3:b5:
4c:4f:c1:af:61:91:bd:59:3c:76:7d:d4:5f:bb:7c:
39:82:38:77:4d:0a:b9:e8:37:c5:b8:3d:58:f6:c8:
ea:0f:33:33:9d:4e:ec:38:b5:53:e3:52:15:10:83:
4a:e1:1e:0a:ed:f0:9f:fd:ee:ec:a9:37:a8:6f:d2:
44:dd:60:c4:d9:49:a7:37:9c:ec:f9:4f:fe:13:3b:
de:b7:b8:88:39:37:fd:bf:11:cc:ad:8d:58:7d:b8:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:92:7A:54:58:4B:A6:68:1D:D7:16:4E:B8:55:B8:04:BD:D2:A5:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5J6VFhLpmgd1xZOuFW4BL3SpVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:28:0e:22:eb:6f:9f:19:4d:0c:1a:96:7c:c7:1e:ef:13:78:
de:82:d6:4e:5a:9a:77:6a:90:33:fa:5a:8c:ed:f6:d0:ef:15:
5a:65:9f:79:87:11:0c:6d:ff:0f:92:de:38:b9:3c:ab:33:94:
25:da:4e:d8:a9:0d:d7:2b:ac:ef:86:4c:77:cd:f1:68:1c:29:
4e:c7:09:67:d7:64:f9:22:e9:84:98:03:f5:83:8f:54:53:47:
82:91:60:66:02:d1:18:6b:3f:17:b0:b5:b7:41:34:83:f6:e4:
68:1a:ac:6b:8f:4e:5e:98:cd:8a:ab:83:50:99:4a:3b:c3:d5:
dd:1a:72:36:3f:b3:35:ec:8d:38:eb:30:82:98:15:2b:05:25:
34:99:45:a6:37:0e:c0:d0:5c:f1:f3:f6:3d:a8:71:06:bd:df:
b5:3c:16:90:c8:19:c7:2e:56:6e:34:15:2b:07:2f:dd:99:02:
75:24:4a:7b:7a:08:73:28:c0:ad:cb:92:24:83:93:4e:ec:3e:
b2:e2:a4:34:53:bf:32:42:87:07:97:69:d6:16:17:bd:47:a5:
29:15:87:27:cd:e6:a6:f3:e1:6f:03:ee:ec:2e:6a:11:83:77:
f1:f8:3b:60:34:f3:43:45:a8:ae:d3:36:87:da:c3:8b:29:30:
74:13:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:46:18 2025 by rpki-client