Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5e9GBu7xZUd1-rPXtwO8HmewfU.roa
File: k5e9GBu7xZUd1-rPXtwO8HmewfU.roa (raw, json)
Hash identifier: YXqs73PBMUxyW6yAOctzUGYNGaBYcDl8EcEG/4AIv1U=
Subject key identifier: 93:97:BD:18:1B:BB:C5:95:1D:D7:EA:CF:5E:DC:0E:F0:79:9E:C1:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B4AA3CC734FACE1B514CF047ED16DFAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5e9GBu7xZUd1-rPXtwO8HmewfU.roa
Signing time: Mon 06 Mar 2023 02:05:00 +0000
ROA not before: Mon 06 Mar 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:b4a9:b995/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b4:aa:3c:c7:34:fa:ce:1b:51:4c:f0:47:ed:16:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9397bd181bbbc5951dd7eacf5edc0ef0799ec1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1e:0a:31:91:48:be:76:61:7b:e1:53:25:1d:
0d:5e:99:04:33:9a:c9:3e:c1:c6:de:c2:ea:93:90:
cf:60:41:3d:30:ce:e8:95:a7:97:b5:27:af:9f:b5:
87:1a:06:73:6c:be:4f:2d:32:33:62:74:ce:b3:a7:
95:bd:04:2e:0c:a5:4d:77:80:86:d9:e6:e4:02:e3:
b4:04:e2:e1:0f:1d:16:5e:01:75:71:33:10:c3:d6:
04:93:fb:2a:a4:c1:30:8e:8a:4c:ac:fd:6c:36:1e:
8d:04:b1:63:ce:6d:3c:bf:84:6d:b3:e6:a2:2e:22:
60:1d:3d:0f:67:b6:24:e3:0f:cd:d8:b7:4b:c4:24:
08:cc:a3:24:c4:20:02:9a:ce:38:5f:32:59:5b:fa:
50:1e:15:a3:d5:49:4e:00:06:c9:c0:4b:cf:90:b5:
62:cd:28:1e:2a:d3:0a:78:4c:2d:dd:1c:e3:88:4c:
78:3e:ea:0e:e3:44:18:5b:e3:2f:42:f7:6a:6d:d8:
47:6e:8a:29:c6:bc:f5:59:3f:34:a8:c4:47:b2:88:
2d:09:be:91:4a:ef:b7:50:aa:16:45:d8:11:98:23:
78:f6:ca:cc:54:d0:d3:de:5a:21:f9:67:6c:52:b0:
47:a8:e9:17:42:05:fa:cb:b7:84:2c:1c:25:60:2b:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:97:BD:18:1B:BB:C5:95:1D:D7:EA:CF:5E:DC:0E:F0:79:9E:C1:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5e9GBu7xZUd1-rPXtwO8HmewfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:e8:59:42:de:98:b3:38:0e:8a:49:ed:e7:b6:57:ce:42:e1:
9e:87:e8:b4:d9:9d:cd:24:42:3c:7e:0f:e5:34:3f:12:ca:7e:
e8:a9:78:2a:75:ca:ec:07:47:a6:55:b4:48:10:ae:93:bb:ee:
c4:6c:85:cf:2d:b6:33:a2:e8:41:30:94:44:15:ed:2a:23:37:
1c:cc:41:75:0d:11:b7:0e:d4:b3:fd:7c:06:77:35:6f:76:f7:
89:2b:0b:0a:a3:81:f7:a8:a0:5f:04:54:f5:00:6f:06:49:33:
92:83:9d:2e:88:f0:15:ea:73:ce:c4:ad:56:ee:94:46:2e:e6:
40:5d:ad:70:29:f3:0c:9c:af:ff:0d:9e:29:4f:9e:c9:ae:1f:
17:85:61:0e:18:ab:0f:de:25:b1:0d:b0:e6:75:e9:67:60:e1:
dc:d9:ba:08:83:fc:3e:ef:06:a4:d5:97:75:a8:9f:18:5e:cd:
ab:ed:5e:cb:11:6a:2b:40:25:60:2a:1f:eb:6f:d3:7e:64:52:
a7:49:6d:63:15:c6:20:45:28:d1:c3:3d:c0:e7:f5:bf:df:63:
ac:76:34:a9:a7:a2:91:a9:f6:a2:10:3e:43:f9:f3:25:6c:97:
1e:f9:8f:db:da:86:df:4d:e5:d0:df:d6:38:fd:d8:7a:57:2e:
9d:d5:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:44 2025 by rpki-client