Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5E8ZzVKrD8_Ma4Dg7b4R_H8a2cs.roa
File: 5E8ZzVKrD8_Ma4Dg7b4R_H8a2cs.roa (raw, json)
Hash identifier: 99UZOetHPaYIr4C7sEhmDVgz7Q+yuBml7FBOZdZkmXU=
Subject key identifier: E4:4F:19:CD:52:AB:0F:CF:CC:6B:80:E0:ED:BE:11:FC:7F:1A:D9:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3FF07B244E42EB1410C3D4824B88D6CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5E8ZzVKrD8_Ma4Dg7b4R_H8a2cs.roa
Signing time: Tue 29 Aug 2023 06:17:19 +0000
ROA not before: Tue 29 Aug 2023 06:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:f0:7b:24:4e:42:eb:14:10:c3:d4:82:4b:88:d6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 06:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44f19cd52ab0fcfcc6b80e0edbe11fc7f1ad9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:fa:ff:40:b5:46:66:4e:0e:1f:d5:86:c8:
65:96:0e:fa:43:a6:7b:41:d0:7e:f8:49:ee:c3:e1:
f6:de:75:20:f2:c8:08:07:b5:9b:63:d0:da:f9:7c:
51:d7:d9:21:6a:70:c5:02:f3:4c:6e:39:3f:9f:0c:
dd:7b:84:c3:54:29:4c:a7:f7:50:54:f7:bf:02:94:
28:42:2f:66:a4:bb:5c:7a:1c:85:de:bb:f5:b6:4c:
ce:39:8a:c4:3a:6d:c3:74:65:44:6f:e4:e6:4d:ca:
98:81:4a:56:c7:05:cb:42:38:6a:51:80:cc:e9:52:
ba:63:05:3e:92:d6:55:25:03:71:30:ac:57:22:09:
df:c7:98:1f:90:56:05:15:ef:36:7b:86:32:f0:40:
ac:35:fa:59:7f:bc:98:9e:a9:d0:80:b9:04:f4:49:
a5:04:5a:1e:51:40:d7:a9:f4:a8:19:3c:f0:42:14:
4e:96:c9:f2:e7:9b:a3:3f:10:57:23:e6:1c:69:ab:
43:1a:05:19:02:e0:f1:c8:5b:cd:89:05:b1:54:43:
ed:38:a9:01:9e:67:00:d4:23:f7:f2:1f:2a:18:19:
ec:5c:95:77:cc:13:1e:2b:fe:72:c9:c8:80:38:4d:
fd:03:76:8e:41:2f:e9:2b:a6:9a:89:21:9d:c0:92:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4F:19:CD:52:AB:0F:CF:CC:6B:80:E0:ED:BE:11:FC:7F:1A:D9:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5E8ZzVKrD8_Ma4Dg7b4R_H8a2cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:1e:47:11:74:c1:17:27:e4:17:99:ef:d1:a2:4b:4c:53:6d:
2a:66:c4:be:8d:55:3e:50:86:61:6d:1e:64:d6:74:15:1c:d5:
b7:44:cc:17:79:84:6c:8e:2d:a7:5d:48:06:8e:ab:6c:9a:28:
32:8b:77:92:53:90:65:9e:02:e4:51:7d:13:9b:56:b9:f0:d2:
ea:b5:18:8b:06:b4:3f:f6:10:27:41:fc:86:98:58:00:a7:34:
da:f6:b1:08:99:cc:ac:a8:25:01:a4:94:8c:d5:e5:9f:5b:35:
24:a4:9a:87:29:bb:55:7e:f5:8b:b7:3c:7f:0b:3d:d9:4b:59:
d5:61:87:13:c2:92:fe:0e:fc:52:9a:37:58:c5:b6:b6:50:f4:
1f:1a:73:f7:3c:37:39:10:c0:fb:80:f3:00:43:da:8f:2f:13:
bf:57:52:5e:ae:a8:7e:94:4b:73:fd:94:1b:06:2a:b8:3c:f4:
62:9c:d1:02:0f:86:80:58:04:8c:c1:81:31:8f:b9:ff:22:6c:
3a:54:6d:bd:c0:e2:de:50:4c:5f:7e:2e:30:66:e8:d6:86:69:
74:21:8f:c1:9b:41:87:e2:46:61:83:48:18:e2:e3:a8:0d:96:
84:e7:5c:33:22:12:e1:52:e7:99:de:36:05:3f:67:0d:bf:34:
a1:d4:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:21:51 2025 by rpki-client