Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJ5tLzwdAINMupRIhEqwxYmfeQ4.roa
File: sJ5tLzwdAINMupRIhEqwxYmfeQ4.roa (raw, json)
Hash identifier: MRsiLFRJyl7Ia0Vk6fJ1/0tjgUwpqX6g+0+xhWG7UkE=
Subject key identifier: B0:9E:6D:2F:3C:1D:00:83:4C:BA:94:48:84:4A:B0:C5:89:9F:79:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CD8B74FF97A63D737A8E24EDEF72C245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJ5tLzwdAINMupRIhEqwxYmfeQ4.roa
Signing time: Sat 29 Apr 2023 15:04:41 +0000
ROA not before: Sat 29 Apr 2023 15:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:cd8a:fe4c/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cd:8b:74:ff:97:a6:3d:73:7a:8e:24:ed:ef:72:c2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 15:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09e6d2f3c1d00834cba9448844ab0c5899f790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:70:d1:f1:35:0e:85:4e:b5:a2:d3:9c:6e:
d4:e7:96:5c:5a:8c:9e:20:b5:23:10:81:bc:9a:f6:
f2:82:2b:a5:1b:04:7c:6c:57:3c:3a:c4:bc:1e:f0:
8e:87:5a:1b:fe:1c:dd:91:45:75:6b:d1:22:dc:51:
05:8f:38:8e:cd:9d:39:4e:69:1f:a7:33:71:92:07:
70:46:18:ae:92:6e:91:a9:41:9e:07:56:ad:b0:d9:
2c:8d:e8:0e:ed:a0:0f:4b:71:f7:6f:5e:e4:05:0b:
93:fb:ad:84:00:65:da:ad:eb:c9:b6:42:ad:f5:4c:
77:b4:f7:9c:69:5f:f5:62:1f:d4:85:7f:a0:7b:03:
49:34:3a:90:47:f2:c5:b7:ec:7a:03:19:74:9e:c2:
f4:5d:94:68:6b:92:a4:4d:bc:05:c2:33:40:04:d1:
81:36:e7:26:bb:85:c5:5d:0e:0a:ba:f5:c9:55:c9:
95:29:90:a1:ae:a2:c1:2a:b1:d9:85:4e:74:9f:59:
d2:f6:e0:dc:ae:b7:6c:e4:7f:d9:1a:c5:94:5e:92:
96:21:e2:1c:4c:38:db:7e:01:60:a6:4f:57:d6:59:
a9:c2:4c:96:76:fe:c2:51:dc:e4:b1:d3:70:41:5e:
d6:1b:c1:e4:0e:73:33:08:0c:73:38:2b:ac:14:0a:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:6D:2F:3C:1D:00:83:4C:BA:94:48:84:4A:B0:C5:89:9F:79:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJ5tLzwdAINMupRIhEqwxYmfeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:89:72:09:82:fa:0a:1a:31:50:45:07:52:38:d9:c1:f8:3c:
1a:4f:dd:bb:6f:7b:78:f5:e5:a8:6e:e7:f8:84:1e:d1:c1:62:
cb:9e:65:7e:14:c7:47:d1:70:bb:f0:3b:e6:e0:01:35:f8:1f:
bc:c1:08:f7:3f:31:f9:56:0a:5c:71:ec:00:2e:4f:e4:40:c5:
5a:f8:78:7a:f2:bd:e2:5d:d4:7e:95:65:2c:2b:43:b4:ae:85:
17:62:2e:1a:01:5a:d7:43:13:84:63:87:a7:a6:e0:1e:8a:22:
c7:7e:da:3b:61:36:bb:7b:d2:dd:d6:b6:ad:19:42:23:f8:ef:
dc:d4:2f:13:5e:9a:44:fb:f9:b3:c9:2f:3a:7a:3a:35:82:fb:
ac:2f:30:53:d1:c7:d9:4b:a0:44:80:f7:5b:d5:47:ef:0e:e0:
b7:63:8f:95:79:a2:7f:d6:70:7c:28:00:5e:e7:3f:a7:3f:7d:
95:72:11:64:e9:65:0a:25:82:b6:38:73:6c:6a:5e:35:ab:e5:
14:39:88:88:e2:34:ce:93:78:e6:0a:a9:95:52:24:70:4e:4e:
58:38:b6:75:89:1a:0b:c4:9f:8b:0c:13:79:48:f0:e4:d8:c6:
62:d2:3c:34:28:98:db:b1:6b:e1:7a:0b:54:11:80:50:6a:ca:
52:f4:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:01:59 2025 by rpki-client