Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5EoBLZOr7Bir7bzhZsuyP6k2b3Y.roa
File: 5EoBLZOr7Bir7bzhZsuyP6k2b3Y.roa (raw, json)
Hash identifier: dfzaX1XAc5V5cLjSJLJYMLO37qsrjhk31I+E3dA+T0o=
Subject key identifier: E4:4A:01:2D:93:AB:EC:18:AB:ED:BC:E1:66:CB:B2:3F:A9:36:6F:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889A4549EC4D3773CA95C83ACFA8E9D574
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5EoBLZOr7Bir7bzhZsuyP6k2b3Y.roa
Signing time: Thu 08 Jun 2023 09:10:12 +0000
ROA not before: Thu 08 Jun 2023 09:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:45:49:ec:4d:37:73:ca:95:c8:3a:cf:a8:e9:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 09:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44a012d93abec18abedbce166cbb23fa9366f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:84:e7:c7:30:e1:16:64:62:e0:4c:5b:2a:
ef:e4:70:d1:3f:1a:8a:78:2d:75:f3:c3:39:3a:dc:
a3:f9:80:a0:cd:b9:8e:04:ac:f9:90:b3:cf:1b:d4:
9f:24:62:a5:c1:32:06:86:4b:90:08:28:37:eb:bd:
38:4b:86:e7:e2:0e:26:da:ed:c6:b2:0a:1b:81:75:
5d:84:b6:e4:a7:38:7f:3d:a5:9d:f8:af:02:e2:db:
7d:32:0e:15:d2:e2:20:4a:3e:4e:2d:cc:5f:46:24:
e7:66:2f:42:e4:76:10:77:b9:e8:61:b8:c2:bb:05:
6d:af:d2:24:12:da:7a:80:62:e6:54:16:dc:82:52:
ee:f7:d4:b9:1d:d6:bf:57:fc:fb:f7:62:aa:39:fa:
25:65:d6:47:7f:58:44:e3:c4:67:94:c9:8d:1d:d8:
68:fd:44:d4:3e:6c:72:12:1a:ff:2a:e9:2f:91:53:
f9:0e:80:3c:c1:03:92:35:7a:d8:7a:4a:a5:10:1d:
7a:fd:85:22:7f:3f:18:b5:fe:8d:e9:2d:d7:d1:ef:
84:6c:ee:17:90:1e:83:55:16:36:29:7b:5a:d8:b1:
d1:1f:82:17:4f:7d:62:c4:33:31:85:d2:18:a6:d1:
46:d5:a2:f9:21:79:9e:72:3f:55:45:5f:da:30:51:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:01:2D:93:AB:EC:18:AB:ED:BC:E1:66:CB:B2:3F:A9:36:6F:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5EoBLZOr7Bir7bzhZsuyP6k2b3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:70:9d:0e:95:86:6f:a5:8f:9a:ea:7f:fd:57:c8:7b:a9:1e:
1f:fc:08:00:f9:94:5e:67:f1:94:ed:41:61:9c:b2:82:f5:42:
af:75:c1:f5:5b:0e:80:a4:11:94:e5:70:d2:fb:67:2b:10:de:
44:1b:6b:31:7c:f1:f4:97:a6:bd:d6:5c:8b:f1:eb:bd:1c:88:
ce:4d:fe:d8:49:03:a0:a8:a1:e2:53:8e:e0:e7:79:31:9d:f2:
a9:b1:5c:a4:bb:48:f8:48:fe:5e:31:08:ca:26:d9:21:ac:cf:
75:8e:08:b6:62:35:87:3d:1a:1b:4c:ed:4c:96:89:b4:03:d5:
df:cb:58:62:8c:bf:38:2b:f1:58:cb:7f:7a:e6:92:ec:3e:f0:
dc:e6:ec:54:7e:d9:38:a0:07:96:69:98:60:e9:21:cc:9e:3c:
0f:09:d4:ea:4e:02:9b:4e:fe:c7:ca:dc:1c:cc:a2:99:fd:43:
5c:b1:33:88:77:07:25:a6:0e:86:3e:60:b8:b0:5b:ba:11:48:
37:50:b6:48:93:78:cb:38:fa:b9:bc:72:43:b8:24:08:82:d9:
96:ad:15:a9:be:6a:c3:27:fb:fa:b6:35:f6:10:1a:75:70:1a:
8e:cd:32:b0:ec:83:85:8c:20:01:2a:12:4f:f0:05:3d:59:9c:
48:5e:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:40 2025 by rpki-client