Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E51lmnnrzgjdHKS-q_LuDZLXXOI.roa
File: E51lmnnrzgjdHKS-q_LuDZLXXOI.roa (raw, json)
Hash identifier: lK69FgUcEqNNcyZvH+sSKORN7bWQD0eaQu2AHvpBZvg=
Subject key identifier: 13:9D:65:9A:79:EB:CE:08:DD:1C:A4:BE:AB:F2:EE:0D:92:D7:5C:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894F9AC9750F4D0AFA2251A935D376B30A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E51lmnnrzgjdHKS-q_LuDZLXXOI.roa
Signing time: Thu 13 Jul 2023 14:14:51 +0000
ROA not before: Thu 13 Jul 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:9a:c9:75:0f:4d:0a:fa:22:51:a9:35:d3:76:b3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=139d659a79ebce08dd1ca4beabf2ee0d92d75ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:2d:48:b8:cf:ed:97:a3:e3:30:c4:dd:d0:
a4:6f:d1:78:18:45:64:21:fc:43:9e:31:2d:57:84:
16:d3:dc:e5:59:17:2f:c5:a6:de:7c:78:f9:7e:d9:
38:65:fe:2e:a2:ef:48:bf:9e:d6:64:4f:c7:b8:73:
74:18:66:06:af:59:18:65:05:52:f8:fe:4e:b7:b8:
31:66:76:46:7b:e3:55:9f:e6:99:7f:a4:eb:b6:6b:
4c:f0:cf:85:66:6c:ee:3a:fc:32:5a:10:8b:6c:49:
f3:a3:2d:8f:49:45:76:ca:78:92:1f:46:e7:4d:30:
24:a1:89:62:4d:55:5b:5f:ee:1b:36:de:70:9a:9e:
09:a9:32:4e:03:2c:87:f1:30:5a:1b:11:4f:4d:aa:
5c:e9:7e:37:ae:88:4a:66:d7:e3:55:5c:0d:36:cd:
02:69:35:f4:03:db:e9:9f:8c:01:ba:07:3f:3b:e6:
72:62:bb:66:67:3f:c5:06:c1:6a:23:3a:aa:5e:84:
3f:20:a7:ac:bc:10:f8:c9:60:39:00:4c:ef:c7:9a:
49:24:37:c6:25:9f:19:97:60:42:dd:93:c8:90:cb:
d7:d4:3d:01:fa:39:c7:37:40:48:c4:d7:41:6b:88:
57:b0:00:89:ed:e7:a4:3b:a4:b1:b4:3e:b0:e3:93:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:65:9A:79:EB:CE:08:DD:1C:A4:BE:AB:F2:EE:0D:92:D7:5C:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E51lmnnrzgjdHKS-q_LuDZLXXOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:fb:76:dd:98:3e:b7:33:06:f8:b1:d1:c6:0d:1d:b8:8d:b4:
2a:a4:64:0d:51:77:bc:44:fd:c5:fe:0d:aa:8b:4e:2c:67:9f:
99:78:e2:fd:a9:8c:8c:95:64:f0:26:46:c2:88:c0:be:04:24:
59:6d:ac:5c:f0:0e:f6:0f:11:fb:7c:38:01:ac:17:a8:74:f8:
43:6a:83:78:04:74:45:2f:00:fb:84:a7:fb:e7:4e:29:a6:3c:
43:94:04:2b:31:b5:80:e0:06:4f:6d:99:b4:76:b1:29:76:6d:
b3:b3:25:86:74:cd:02:b2:6b:65:d4:f7:00:d8:70:a7:08:25:
9a:b1:ee:b4:cb:a8:e2:49:ba:38:a2:27:ad:3c:4e:ff:4b:73:
c9:55:24:48:89:82:26:af:84:15:b8:2c:0b:42:7c:d7:10:bb:
d9:e0:38:c6:a6:04:71:65:76:5f:e3:11:0d:b2:aa:1b:13:fa:
0b:91:65:3b:6b:7f:db:f1:7b:16:6b:72:44:1a:ba:22:d8:0b:
23:fb:58:07:6a:5f:bf:e2:50:74:3f:fa:1a:55:54:f2:f8:75:
1c:e1:0f:bf:21:aa:f0:63:f3:3a:3b:9f:85:3c:35:a8:0e:30:
fe:21:cc:84:ea:60:a0:b9:71:6f:e3:b4:4e:76:03:e8:d0:5a:
33:cd:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:33 2025 by rpki-client