Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5DOa5ZFzqo9Ngh-Tv60exZmMlw.roa
File: l5DOa5ZFzqo9Ngh-Tv60exZmMlw.roa (raw, json)
Hash identifier: K7gvNXSADaMprwZurVFNsROFJvp/IYkopKaMTbV7YLY=
Subject key identifier: 97:90:CE:6B:96:45:CE:AA:3D:36:08:7E:4E:FE:B4:7B:16:66:32:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8111CE68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5DOa5ZFzqo9Ngh-Tv60exZmMlw.roa
Signing time: Wed 04 May 2022 11:10:29 +0000
ROA not before: Wed 04 May 2022 11:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165427816 (0x8111ce68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 11:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9790ce6b9645ceaa3d36087e4efeb47b1666325c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:0b:e9:89:70:54:bb:70:46:d4:ad:f4:f9:
35:3a:8f:7b:74:67:9a:ad:6d:3d:2f:6b:63:d9:98:
3d:8e:44:b4:cc:5e:37:c3:89:34:e9:93:d6:73:f3:
5a:32:68:d5:c1:f6:e6:ed:84:88:e1:5d:2e:57:54:
36:45:63:97:ca:e7:6a:52:4a:0f:56:13:30:f4:50:
ea:49:28:6b:69:a4:83:fb:4f:e8:b1:bf:bc:7c:91:
ea:db:ed:47:7f:ae:9c:34:95:0d:e7:ed:6f:45:60:
40:2d:be:25:3c:22:8c:9d:47:d9:51:52:fc:0d:6b:
c4:db:de:ff:69:4a:a2:0f:28:9d:4a:ea:b8:60:03:
fa:1b:e2:62:c9:13:63:81:9e:a0:45:3f:11:71:7d:
7f:ea:c9:56:a2:2b:52:11:af:a2:3c:a4:1a:42:3a:
ed:17:ec:37:f8:95:0b:18:d9:2c:14:4b:b7:f0:de:
df:ae:d2:87:fc:40:b5:0e:74:21:e7:be:c8:19:ad:
cc:92:19:e2:1a:67:b8:1e:39:bf:b4:bd:16:2a:f5:
88:94:3d:87:ff:cc:89:92:50:d1:73:ba:f3:98:00:
1d:52:66:ba:ea:02:85:e3:3a:55:3c:92:c4:36:31:
db:22:c3:3b:4e:4b:02:a1:b2:0c:3d:98:b2:1b:ad:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:CE:6B:96:45:CE:AA:3D:36:08:7E:4E:FE:B4:7B:16:66:32:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5DOa5ZFzqo9Ngh-Tv60exZmMlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:09:96:6b:ad:1c:26:91:a5:47:ce:88:60:a2:03:80:79:5c:
47:19:dd:13:68:7d:f6:73:76:78:3c:7c:a8:65:7b:78:30:a5:
9b:5d:cb:e2:71:30:5c:e6:61:b7:38:91:79:5f:ef:31:b8:18:
44:f4:46:3c:12:45:15:91:c9:e7:7d:c6:1e:f1:d4:e3:d4:c4:
1f:69:ea:e4:7b:3e:a8:86:b6:bd:ef:11:79:6f:66:50:fb:54:
98:d3:84:fb:a0:82:47:cd:b2:c9:21:6d:4a:c9:37:82:9b:ee:
1b:f9:9c:c6:bb:6f:6a:27:b8:09:ba:8b:96:68:14:16:66:8b:
e0:a3:cb:aa:88:3b:43:09:ba:44:e5:cc:f0:7c:bb:59:57:d5:
11:58:38:b6:06:8a:15:97:e8:fc:87:a7:70:7a:3a:e6:b0:30:
d8:3a:0d:f9:85:19:77:c1:aa:ce:e7:1f:89:8f:a5:fb:a7:7c:
db:ea:22:22:61:28:19:fc:0d:fc:20:f6:dd:68:c3:b6:75:a9:
44:31:35:d9:29:44:05:1a:73:98:71:56:63:a1:85:e6:cb:62:
6f:3b:81:b2:97:69:bd:dd:6d:56:1e:03:88:e5:c5:c6:88:8e:
67:d4:d3:17:8a:33:c5:e2:ac:37:cc:ff:ca:12:80:6d:15:06:
f9:30:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:44:24 2025 by rpki-client