Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1m5QRkutBS1DS25hzLnT_vK1rQs.roa
File: 1m5QRkutBS1DS25hzLnT_vK1rQs.roa (raw, json)
Hash identifier: 1sKYbqR+13WZCmgvrTmNTTjdzyHJ9tavLSRF6bcQoVk=
Subject key identifier: D6:6E:50:46:4B:AD:05:2D:43:4B:6E:61:CC:B9:D3:FE:F2:B5:AD:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FB423C9EB7522A8B7249A0E179933B63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1m5QRkutBS1DS25hzLnT_vK1rQs.roa
Signing time: Sun 19 Mar 2023 19:04:27 +0000
ROA not before: Sun 19 Mar 2023 19:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:fb42:e01/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:42:3c:9e:b7:52:2a:8b:72:49:a0:e1:79:93:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 19:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66e50464bad052d434b6e61ccb9d3fef2b5ad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:d1:95:e5:04:22:6a:bd:19:bf:7e:b9:9d:
e3:a5:65:70:15:07:c2:33:5f:07:b1:1c:90:05:f7:
f6:8d:8a:ce:1f:3d:51:f8:fb:5d:f3:6e:2b:d3:e8:
93:71:cb:69:8a:22:d8:90:24:b9:92:b3:72:11:cb:
4d:c3:14:00:cc:59:e3:51:5d:46:05:af:a9:93:5f:
1e:17:7e:e7:6b:b7:ca:bd:f4:c1:9e:fa:23:f2:dd:
15:7d:07:c5:c3:e6:e1:7e:5c:4b:9b:7f:a5:28:42:
c0:d3:1b:5f:89:25:cb:83:ce:8e:62:c6:f1:12:4e:
ed:69:98:b6:0e:1d:ab:29:24:3c:ca:e8:27:0f:d8:
42:a2:2f:70:fd:c0:1b:a5:05:3a:dc:4a:fa:13:5d:
2e:ee:e2:87:0b:78:da:ef:0e:0f:81:89:55:fe:fd:
a4:c1:ae:44:b8:1d:de:c9:21:3a:fe:35:f3:64:21:
b5:80:e7:71:ec:fb:6a:62:56:74:68:8a:d4:e6:80:
3b:51:e8:af:23:c1:0b:1a:b0:4a:45:d3:c7:6c:99:
56:cd:e5:74:58:ab:bc:d7:4a:fa:52:22:e6:4e:f4:
99:da:b9:40:6a:f0:b9:2f:b5:2a:16:c9:67:10:11:
9b:45:6b:57:16:10:ab:2b:ce:34:25:82:06:34:9f:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:50:46:4B:AD:05:2D:43:4B:6E:61:CC:B9:D3:FE:F2:B5:AD:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1m5QRkutBS1DS25hzLnT_vK1rQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:42:9d:14:05:54:d5:a3:e5:4b:61:8d:09:b0:b6:43:11:59:
8e:ce:e4:79:de:2d:4d:69:5d:38:b9:7d:ea:60:fd:7d:b1:db:
7c:a3:56:75:b0:26:32:48:c7:cf:fb:31:aa:8c:ac:c6:d2:ad:
bf:33:80:4c:13:e1:77:8a:9e:57:cf:41:3c:11:25:94:fa:34:
bd:7f:5a:3a:e5:83:3a:9e:cf:2f:0f:39:ef:a4:ba:fd:7e:a7:
b1:ce:29:93:ae:f3:fc:14:5e:fe:45:84:2a:15:40:c7:26:90:
f8:22:df:e6:7e:f7:4e:19:b1:1e:2f:b9:5f:ea:a7:f3:b4:bc:
ce:62:a2:45:b4:14:2a:94:b2:e7:a5:a4:17:12:b7:8e:5b:7b:
6d:23:c3:17:61:64:a5:b3:aa:9b:f9:47:a9:5e:73:a0:a1:a2:
4b:47:32:26:0f:2d:84:57:4d:2f:f9:9d:7d:56:86:22:2e:3f:
36:74:69:7e:3e:7f:b7:1c:7e:34:3d:f3:c5:e7:30:1c:1a:8f:
43:9a:85:ea:69:90:02:dd:b7:02:9e:6d:9f:23:42:98:75:1d:
a9:8e:ad:eb:b2:b2:5d:88:e9:b8:6a:16:45:c3:53:3f:8e:4c:
26:16:e6:c0:d1:7b:eb:2f:05:4b:70:32:44:5f:28:12:af:30:
db:06:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:04:57 2025 by rpki-client