Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pl5DeZQEN9zDJEajMzpt5_yKlfo.roa
File: pl5DeZQEN9zDJEajMzpt5_yKlfo.roa (raw, json)
Hash identifier: lF9MVOgkEGjh7I8bnhRc93tEbaby12sDlHxrYURU5uM=
Subject key identifier: A6:5E:43:79:94:04:37:DC:C3:24:46:A3:33:3A:6D:E7:FC:8A:95:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854F317F6C7B690656E3FCFD7358D37989
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pl5DeZQEN9zDJEajMzpt5_yKlfo.roa
Signing time: Mon 26 Dec 2022 16:08:42 +0000
ROA not before: Mon 26 Dec 2022 16:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:31:7f:6c:7b:69:06:56:e3:fc:fd:73:58:d3:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 16:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a65e4379940437dcc32446a3333a6de7fc8a95fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:43:b9:6c:0f:20:5c:2d:e9:6a:15:f7:ea:
9c:d3:f3:52:9d:ea:3a:d7:64:a6:56:09:5f:03:2b:
ce:d6:48:7e:30:a6:79:9a:b5:3a:a4:79:1f:a2:f3:
02:92:c4:ce:9c:bf:2f:91:70:2e:a6:f2:84:30:59:
18:52:97:10:6a:f8:bd:de:12:62:4a:bf:dc:69:b5:
ba:36:67:3c:87:a2:0d:50:02:eb:b6:e8:52:98:7c:
80:ed:ae:12:c5:10:e5:4d:5c:37:04:06:19:30:5c:
18:e4:ea:24:ca:05:55:5e:67:9b:23:ca:90:ca:43:
ed:98:e3:6f:62:ae:c7:c1:c7:b7:8f:1a:9f:a8:70:
11:32:b6:c4:02:7a:3a:22:bb:82:16:07:6e:6b:cc:
ee:7c:54:e5:11:2b:c0:98:7b:39:2a:86:a5:4e:55:
ef:c2:fe:71:c0:68:80:1f:8b:8b:e3:32:07:e3:3e:
bf:59:a0:48:49:a4:c6:ce:4f:6d:66:c2:53:34:3d:
67:e1:51:4e:ee:1d:28:7c:bf:f5:3b:2f:59:3b:fa:
d3:4f:a4:a0:79:84:4f:f4:51:80:62:ca:7d:5d:ca:
0f:9d:d2:44:e4:66:cb:66:40:b6:ad:71:01:e4:a6:
9e:d6:71:c3:bd:9f:8f:06:d5:47:5f:fa:ef:b5:93:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5E:43:79:94:04:37:DC:C3:24:46:A3:33:3A:6D:E7:FC:8A:95:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pl5DeZQEN9zDJEajMzpt5_yKlfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:3c:68:bd:63:6d:f1:64:ad:62:7f:68:8d:21:6c:b5:24:80:
8e:00:0d:28:9b:29:0d:7d:cf:f6:07:b9:00:a0:b2:9b:d0:7c:
3f:fc:66:51:5e:e0:49:7e:03:78:0f:3a:7c:b6:0d:14:43:0a:
81:32:5c:55:18:f3:96:95:84:21:2b:a2:73:68:4f:c6:e4:54:
89:d1:53:4f:a6:0b:aa:3c:6c:b0:97:63:7f:7e:ad:29:99:6a:
a0:dc:b0:b6:95:f6:6a:52:32:dd:1f:c2:65:86:4a:84:7b:68:
e2:69:4c:2c:c1:c3:32:78:c6:bc:93:29:3c:2f:39:83:81:75:
9b:d0:33:53:17:2c:ef:ac:38:b9:05:51:26:63:fd:95:9d:59:
c7:26:32:e6:31:2d:01:9c:79:ac:c3:8c:64:e1:3e:57:9a:50:
53:47:39:5e:e2:d1:b4:0c:dc:34:cf:60:48:95:c6:6c:62:82:
bf:3d:4c:ab:0b:da:e9:91:7e:8b:71:d3:3e:b9:5d:05:1c:30:
c7:c1:60:31:05:47:ec:4f:01:28:93:78:8d:e1:79:08:07:84:
2f:c0:44:fa:03:7a:77:10:f1:98:c3:61:0d:62:d3:4b:de:db:
eb:41:2a:fd:ad:f2:ba:03:10:18:2c:88:ff:01:d4:54:a1:70:
f5:b6:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:14 2025 by rpki-client