Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5vovHSuZ2xHdRtFT_Fe89E1c18.roa
File: k5vovHSuZ2xHdRtFT_Fe89E1c18.roa (raw, json)
Hash identifier: huILJf5MEXAdyZGICEc/acFWYun/Q8VM/w7u84jpdD0=
Subject key identifier: 93:9B:E8:BC:74:AE:67:6C:47:75:1B:45:4F:F1:5E:F3:D1:35:73:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188367E46064E918BED589EF55AFDF445BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5vovHSuZ2xHdRtFT_Fe89E1c18.roa
Signing time: Sat 20 May 2023 00:10:25 +0000
ROA not before: Sat 20 May 2023 00:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:36:7e:46:06:4e:91:8b:ed:58:9e:f5:5a:fd:f4:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 00:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=939be8bc74ae676c47751b454ff15ef3d135735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:f6:41:d2:b0:d4:f5:1a:8b:9e:9d:1a:a8:
83:f3:84:03:99:f9:b6:0c:ce:b7:8d:98:be:f1:9c:
f4:6d:2e:b3:8e:2d:5d:75:76:a8:f9:c5:77:cc:1a:
62:08:4c:b0:30:5a:05:1b:30:55:94:64:0c:09:19:
e4:d8:ca:94:c1:4f:65:f3:9d:30:10:93:38:89:9b:
3d:73:c7:dd:86:3a:61:79:67:a1:b9:61:06:96:a4:
34:b6:c9:b1:3e:3f:8b:0f:fa:c6:a8:3a:ed:75:65:
40:28:1e:22:24:84:9c:f4:30:a7:c9:af:9e:ad:dd:
ed:67:40:d3:7e:78:af:51:11:6e:e0:0b:26:3c:1a:
74:42:a9:2d:d5:5e:1c:d7:e3:09:f1:33:c1:27:5e:
8f:ba:d3:20:40:a8:82:73:49:a4:b3:ea:35:a1:7f:
7a:74:ef:b1:3f:fa:09:35:20:11:26:eb:ef:94:2b:
a7:bc:db:70:fc:5f:cd:95:44:f8:38:9d:3a:5e:1a:
b3:4b:03:dc:ad:2b:4f:50:52:f7:f5:fd:47:f1:38:
44:0e:a1:3a:67:ea:2f:b0:6e:3f:40:50:fb:35:b9:
21:b9:ed:3b:fa:46:97:2e:42:be:3c:13:ca:53:6e:
a1:6d:d1:5d:54:76:2d:86:52:85:8a:db:dd:a8:db:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:E8:BC:74:AE:67:6C:47:75:1B:45:4F:F1:5E:F3:D1:35:73:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5vovHSuZ2xHdRtFT_Fe89E1c18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:5b:95:1c:25:7e:e7:a2:18:1d:ff:ec:58:0a:23:d8:64:e3:
e1:43:a1:53:c5:c7:20:c5:2a:4f:27:1d:24:21:5d:00:da:64:
2d:9a:d1:0d:38:dd:bc:e6:2b:ff:de:3d:7f:d9:b0:65:29:b5:
f4:dd:b1:c9:1b:53:18:24:b1:d7:99:05:7b:e8:c8:78:18:87:
74:b3:b8:21:3f:57:51:08:04:31:fb:21:55:02:74:07:4d:b7:
46:29:0a:9d:ee:9f:b3:10:35:48:23:92:82:62:72:23:d0:56:
05:3c:b7:ec:5e:c5:46:d4:6d:3d:f5:16:e5:65:20:d0:90:ac:
5d:fb:8f:86:d6:3c:fa:eb:26:34:2b:d3:07:44:76:cd:66:aa:
f6:ca:46:31:69:3c:04:12:d6:59:94:5a:63:bd:ed:d9:1f:9d:
e3:99:ae:19:b4:e7:b3:6f:5d:ca:2d:ff:b1:78:df:6e:06:09:
ce:16:de:3d:74:2f:f6:0e:ee:af:83:11:37:5a:31:f8:3c:6f:
ae:5f:47:fa:c9:3e:ae:eb:62:9b:f7:59:ae:44:24:bb:4e:38:
2d:b6:b1:d1:48:3e:65:db:0e:60:fc:8c:27:86:61:51:86:a4:
fc:b4:6b:4a:1a:e7:67:e1:c3:f8:a4:c4:69:45:e4:2a:dc:28:
22:ad:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:55:19 2025 by rpki-client