Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g51T5bYgHU5hwq5R7x4lMXtI3W0.roa
File: g51T5bYgHU5hwq5R7x4lMXtI3W0.roa (raw, json)
Hash identifier: NAu1u3WUudO8ZBuUvttoH2Y5oS+/ofSgcqtiUhiTECE=
Subject key identifier: 83:9D:53:E5:B6:20:1D:4E:61:C2:AE:51:EF:1E:25:31:7B:48:DD:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871FFC16138459FA511D62B9B4350277EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g51T5bYgHU5hwq5R7x4lMXtI3W0.roa
Signing time: Sun 26 Mar 2023 22:13:46 +0000
ROA not before: Sun 26 Mar 2023 22:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1f:fc:16:13:84:59:fa:51:1d:62:b9:b4:35:02:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 22:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=839d53e5b6201d4e61c2ae51ef1e25317b48dd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:ad:96:6b:3e:68:b3:d8:9a:dd:8a:e4:71:
89:3f:80:38:68:3d:fd:8f:7a:c8:87:66:b3:70:96:
15:fd:2a:c7:a2:f3:14:4f:85:8e:34:f6:43:df:66:
3a:e7:0e:3b:0e:76:31:b4:fa:e4:b8:96:d0:7d:d8:
72:13:cf:89:28:ff:90:cc:0e:a0:1d:70:f5:f2:10:
30:0a:4c:df:fa:36:a0:61:69:a9:f1:4f:ce:94:1f:
f2:49:e2:c1:d5:ad:a9:26:03:ee:47:a2:c4:3e:98:
5f:63:5f:c9:a9:38:c3:90:11:ce:8d:94:1c:46:7b:
59:2c:d3:a0:77:da:23:b4:92:c0:c4:5a:42:19:3f:
ac:5b:db:1b:dc:5f:fa:ed:b8:58:e9:7e:35:55:ea:
19:f4:d7:4d:eb:71:0c:03:ce:dc:3a:93:b8:b1:ad:
84:45:41:f3:21:a3:f9:48:4a:d4:60:b2:99:30:cd:
5b:d3:df:1a:17:ef:31:17:81:e5:37:a5:fb:43:1b:
8b:62:58:84:0a:72:f1:92:01:04:78:12:cd:77:26:
49:11:c2:c5:c6:de:22:c4:3a:0a:1f:57:4f:0c:e1:
3d:4a:a3:e3:ae:44:ab:f8:eb:37:1a:5d:c7:f5:47:
cb:2d:3c:9d:d2:aa:db:da:54:76:38:e0:48:57:df:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:53:E5:B6:20:1D:4E:61:C2:AE:51:EF:1E:25:31:7B:48:DD:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g51T5bYgHU5hwq5R7x4lMXtI3W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:0e:bf:3b:9e:94:7e:06:f3:a1:61:c7:21:eb:0c:b9:82:00:
31:2b:ff:2c:d0:fa:32:9d:b7:b0:70:37:b7:66:9a:cb:f1:ba:
f7:57:b3:72:5d:09:f0:8f:44:99:76:3e:31:63:23:84:99:65:
80:fb:d3:b1:b2:82:04:68:d0:9d:dc:00:19:1e:48:7b:c6:10:
f2:60:f7:89:9b:3b:ed:6e:ee:25:fc:f9:4d:f9:de:ea:b5:03:
a0:46:c2:27:99:99:60:17:be:4f:e4:36:19:8e:25:0d:72:c2:
16:6d:c9:bd:88:57:74:c9:1b:a9:4c:c7:92:47:6e:ba:d0:59:
9b:fc:d1:3f:17:94:d0:2a:2b:56:97:88:0b:c9:07:3e:57:5c:
1e:38:cd:ff:9f:23:f5:44:c6:87:7c:52:aa:5b:bd:2d:82:92:
87:a3:b4:63:8e:36:db:6e:b9:e2:1d:18:01:6c:65:d7:ff:3d:
39:0e:60:51:90:42:32:f9:cb:9c:61:6e:46:9d:1e:f8:7e:37:
1d:79:b3:72:e2:43:30:a4:19:2c:de:86:e4:4f:94:37:fa:a6:
75:60:6b:fd:7a:5d:5d:e5:06:7d:98:13:02:bc:15:43:58:05:
7c:ae:0a:35:33:c8:a8:ba:43:96:d1:a4:e9:17:f0:07:5a:2d:
39:8b:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:25:39 2025 by rpki-client