Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1m5lMaEQnZEL7pSs2FZ-EvULXGU.roa
File: 1m5lMaEQnZEL7pSs2FZ-EvULXGU.roa (raw, json)
Hash identifier: WQAzHSlqvwYF4/pdq8Rm2yULhxhocLoD1TsBTK95sX8=
Subject key identifier: D6:6E:65:31:A1:10:9D:91:0B:EE:94:AC:D8:56:7E:12:F5:0B:5C:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894327D665A4ADE2AD4F8A357B23F1B85D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1m5lMaEQnZEL7pSs2FZ-EvULXGU.roa
Signing time: Tue 11 Jul 2023 04:13:51 +0000
ROA not before: Tue 11 Jul 2023 04:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:27:d6:65:a4:ad:e2:ad:4f:8a:35:7b:23:f1:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 04:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66e6531a1109d910bee94acd8567e12f50b5c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:d8:9c:1d:09:29:0f:37:8d:3b:62:04:7b:
1e:d4:64:13:5d:20:3f:8d:f7:96:f7:6a:b3:a5:ef:
e2:7d:8a:e1:7c:1f:8c:7f:d2:7d:2f:ca:3b:b3:6d:
21:66:17:07:6a:1d:7c:c2:c0:cb:43:04:6a:c8:c4:
28:6f:a2:44:23:2a:68:f8:f6:c8:88:3a:c1:c4:07:
ac:0a:c2:54:cd:41:ce:55:7b:19:13:3e:e3:77:31:
f7:7f:c6:e9:62:4a:2d:47:4f:0b:23:9c:f0:1a:9a:
41:11:78:5f:3a:d2:ee:2c:66:ec:ee:b1:09:ba:54:
a4:43:14:73:56:c6:e9:d8:e5:16:0e:11:ec:66:4c:
9f:a9:f3:a8:98:4f:01:08:cf:69:a8:de:e3:91:09:
9b:43:0f:bc:ab:9f:45:f0:89:af:57:1b:5b:b6:28:
ca:31:b5:40:2d:c7:55:06:d7:99:6a:b9:cf:67:aa:
4a:1a:8e:5b:ad:5b:9b:28:18:85:cc:55:f9:fc:ef:
e9:79:5e:32:43:71:29:d8:fa:22:af:b2:49:f5:35:
c6:65:6f:dd:0a:f7:a9:50:1f:b3:2f:42:c4:5f:14:
02:92:9a:41:8c:8d:20:8f:d6:81:23:a9:0e:ea:55:
a3:8f:d3:cc:de:5a:8d:fa:1f:ae:d4:da:10:12:7a:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:65:31:A1:10:9D:91:0B:EE:94:AC:D8:56:7E:12:F5:0B:5C:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1m5lMaEQnZEL7pSs2FZ-EvULXGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:44:36:f6:d7:ff:ab:5f:08:71:82:d1:1c:7c:82:18:49:a4:
26:96:db:ee:5f:37:78:36:aa:c1:20:10:91:d1:70:d4:d7:bc:
b4:95:f0:1c:4b:27:a0:06:ee:48:52:e4:ce:3a:8b:c4:d0:1a:
ef:c2:86:7a:c7:35:6c:e0:45:08:60:14:91:5b:fe:85:f5:34:
2d:a7:e6:6b:fe:df:c8:c0:10:6e:74:ca:50:79:9b:8e:d4:fa:
aa:02:91:c3:bf:5a:de:6b:02:ca:51:dc:a9:48:35:0d:08:2c:
9b:fc:03:11:ad:84:40:e3:d3:92:de:e2:6b:e7:5e:55:70:74:
63:0b:74:2d:fe:07:38:bb:6a:8c:30:3a:0e:32:46:44:d9:cf:
46:70:5d:f5:6b:c3:90:03:09:bc:13:95:de:a9:74:3a:6e:15:
a9:75:7d:31:80:41:20:a5:07:41:70:6d:0c:2e:66:ae:93:c5:
3d:e7:19:d6:e0:2c:62:23:ce:07:77:ad:f4:41:53:82:ca:37:
89:5b:13:34:98:7c:24:37:da:69:91:00:0e:e8:b7:fd:ab:4a:
cb:e6:27:58:04:b2:ab:d1:f4:d7:75:ad:c0:92:33:84:ba:b0:
58:ae:e3:97:0c:d6:a0:d9:0c:67:15:3b:5d:c2:4d:d3:92:e7:
0b:15:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:29:25 2025 by rpki-client