Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c5Fkh-GuOYC2n_4Hsj9tjV3aG0A.roa
File: c5Fkh-GuOYC2n_4Hsj9tjV3aG0A.roa (raw, json)
Hash identifier: yiNUmobq1qbKtmd0n0Q/NvsLrMpKbQIuDghrVyr41kI=
Subject key identifier: 73:91:64:87:E1:AE:39:80:B6:9F:FE:07:B2:3F:6D:8D:5D:DA:1B:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018746D2D4CF3E2547DB2B05BFEAA984021E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c5Fkh-GuOYC2n_4Hsj9tjV3aG0A.roa
Signing time: Mon 03 Apr 2023 11:13:54 +0000
ROA not before: Mon 03 Apr 2023 11:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:d2:d4:cf:3e:25:47:db:2b:05:bf:ea:a9:84:02:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 11:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73916487e1ae3980b69ffe07b23f6d8d5dda1b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:bd:e1:41:5a:50:4a:de:2b:6f:bd:2f:89:
1b:f3:f0:4d:6f:ea:84:48:8f:08:88:fe:b3:d9:90:
56:77:3f:2a:37:d0:47:d5:77:c3:ee:13:fd:58:45:
e8:9c:3f:39:01:04:be:d2:8e:48:fa:84:fe:81:f0:
a7:f7:9e:e4:79:28:b3:93:8d:75:f4:a1:7f:e5:9d:
ee:28:8a:7e:ce:f1:d1:ee:7e:cb:9e:46:2c:bf:70:
0a:20:70:ac:3d:45:1f:50:11:78:34:93:34:6b:25:
dd:35:5a:1f:8a:31:cc:e0:37:60:c7:bd:8f:3c:36:
fa:8d:1c:73:d6:e7:15:82:2f:51:9e:93:9d:e0:39:
84:7c:77:97:f8:1e:96:b2:ad:86:8f:a7:2e:51:4b:
40:e4:31:a8:dc:e0:d2:d2:eb:47:3a:7e:64:f8:80:
c6:be:4e:ee:c9:43:3f:64:92:ac:e9:6b:20:ac:db:
82:cf:f0:de:76:27:f6:3d:3b:96:d5:a0:5c:91:08:
50:e0:17:bd:2f:92:61:3f:bb:29:51:a8:4b:7f:7a:
e7:9a:5a:b2:0e:79:83:cd:70:ef:81:e5:55:4d:04:
d9:26:04:52:97:3c:05:ad:14:85:63:dc:6d:3f:20:
95:62:1d:28:f8:db:27:86:98:18:ad:18:bd:1b:bc:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:64:87:E1:AE:39:80:B6:9F:FE:07:B2:3F:6D:8D:5D:DA:1B:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c5Fkh-GuOYC2n_4Hsj9tjV3aG0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:23:00:57:7e:71:30:f3:e0:fc:fb:e9:08:4d:cb:39:4a:55:
b9:2e:25:4a:60:e6:9f:9b:01:90:89:6f:25:aa:83:ec:f5:17:
2e:2c:92:dd:f9:9f:f2:28:78:db:22:59:f8:05:8e:97:bc:35:
02:03:77:44:72:9c:d7:79:20:e2:56:3a:02:d5:4a:ee:1c:c2:
1b:67:20:d5:64:b0:96:eb:f0:7a:1c:cb:63:75:0c:ed:b1:ee:
5a:f4:95:00:bb:1d:f0:13:bd:5a:7b:1f:9d:28:73:50:01:b5:
1d:23:d7:e6:29:6e:42:b2:30:f9:58:38:2a:11:27:a8:8d:4a:
7d:04:35:8f:13:f0:26:4b:b0:38:60:3e:ca:5c:97:f1:38:ff:
ee:a1:aa:1f:41:32:6d:68:76:08:ec:ae:c7:dd:04:dd:ca:52:
db:ab:4a:8e:1d:25:9c:c7:0c:ce:53:78:70:9e:2c:4f:de:de:
1e:94:d3:2c:90:57:5b:2c:dc:c0:92:ce:42:0d:e8:f1:41:5c:
89:d6:ea:23:ff:70:21:65:c4:92:2f:6f:bc:4b:50:f8:3b:35:
80:cc:14:81:d8:a3:a7:db:20:bb:6b:05:45:c8:16:aa:f8:ca:
0f:44:ca:33:22:2a:71:70:b1:30:f3:73:6a:de:00:4f:26:58:
e4:10:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:35 2025 by rpki-client