Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5UZp3-gOvVmhucpsUCE0GpYZWU.roa
File: F5UZp3-gOvVmhucpsUCE0GpYZWU.roa (raw, json)
Hash identifier: 1XKSOoDjmczhmeqmItnlCVf9uENiatJkAmkUxyxS/j4=
Subject key identifier: 17:95:19:A7:7F:A0:3A:F5:66:86:E7:29:B1:40:84:D0:6A:58:65:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018753AB6697E13869B653FC3952E1000CAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5UZp3-gOvVmhucpsUCE0GpYZWU.roa
Signing time: Wed 05 Apr 2023 23:05:54 +0000
ROA not before: Wed 05 Apr 2023 23:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:53aa:92fd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:53:ab:66:97:e1:38:69:b6:53:fc:39:52:e1:00:0c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 23:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=179519a77fa03af56686e729b14084d06a586565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:11:90:28:00:f1:5d:b9:3f:6e:25:eb:0b:
f5:80:77:7a:4a:a7:b9:54:b3:bc:86:da:06:8d:8c:
bf:4d:1c:18:93:dc:53:48:67:3e:ae:fa:c7:f2:20:
ad:56:73:f2:b8:de:e5:bb:72:85:2f:8e:08:11:ea:
5f:43:7b:c8:cd:79:a5:b2:58:36:ee:72:bc:9a:f3:
7a:8a:7f:44:84:aa:11:b2:c4:58:bd:36:40:15:90:
c3:3b:39:12:90:be:03:28:f8:b9:61:1f:8a:56:a7:
88:2a:81:31:d7:b0:1a:c6:8a:9d:67:d7:ff:63:42:
97:62:31:15:95:c0:2f:0d:e0:96:29:d1:d2:a0:11:
ea:44:d5:5c:af:2a:33:45:7b:6c:72:69:d7:44:4d:
e6:c7:89:19:99:f0:2e:b9:96:3f:c0:2c:00:6f:65:
80:33:a8:40:9e:d2:fd:eb:83:10:2b:5a:ce:e8:16:
16:19:2e:01:41:21:12:eb:5e:3d:5a:7b:73:15:5d:
06:b2:a4:69:f7:49:cc:69:81:ab:08:36:7e:bf:db:
b4:19:c3:e3:79:53:c2:8c:45:40:3d:44:d1:b3:0b:
49:f8:6f:f5:70:78:ab:1a:24:37:a8:bc:a1:5c:54:
31:d7:cc:ab:c0:26:01:f9:cb:ca:21:91:3a:8d:3a:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:95:19:A7:7F:A0:3A:F5:66:86:E7:29:B1:40:84:D0:6A:58:65:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5UZp3-gOvVmhucpsUCE0GpYZWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:b4:d3:81:cf:0b:cb:07:30:fa:16:41:89:3a:45:a0:64:82:
96:c6:16:f0:59:c0:3b:be:d2:fc:6b:d3:60:57:e9:54:b9:07:
99:78:34:b1:66:8e:ec:5d:14:9d:ba:04:3a:99:ab:48:b2:b5:
f3:fa:98:0b:25:16:0f:d9:ae:de:13:f7:92:f3:62:6a:fe:99:
ef:a7:e1:20:9c:1b:4b:48:96:f9:2b:41:89:16:0c:2f:60:cd:
40:28:11:67:db:d6:38:c6:45:95:db:0c:42:3b:39:72:da:4e:
d1:f3:fa:1b:e3:2f:b2:dd:14:05:81:d0:0e:2b:01:43:8a:08:
19:a6:dd:5a:e1:b2:e5:6c:0b:36:3b:87:bc:14:1f:aa:68:f6:
cc:5c:4a:3f:30:6e:2a:4e:f1:da:5a:27:07:1e:38:ad:f4:a4:
43:62:a9:bd:d4:38:15:e6:2b:c9:0b:1d:bf:17:e9:27:56:7a:
82:9c:b1:4c:79:7a:89:80:b0:76:40:9f:f1:ba:80:c2:5f:19:
cc:20:58:1d:4f:e3:c9:a5:31:b4:65:8c:f8:e9:83:40:45:e9:
23:ac:8e:e0:ff:ee:fd:5a:49:c5:27:0f:b7:71:2d:90:24:6b:
fd:eb:9d:fd:0d:b5:11:5e:84:7c:92:c2:7a:6a:48:8b:b8:64:
4b:6d:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:22:58 2025 by rpki-client