Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5FuvcgJX0Xpp--i9eHA_kHa9t3I.roa
File: 5FuvcgJX0Xpp--i9eHA_kHa9t3I.roa (raw, json)
Hash identifier: P4Q1OD6db/NqWLCPdi5scO8itS031cl1qk35oI3xEFI=
Subject key identifier: E4:5B:AF:72:02:57:D1:7A:69:FB:E8:BD:78:70:3F:90:76:BD:B7:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E934CE3826F47737F3B5AAD0174077C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5FuvcgJX0Xpp--i9eHA_kHa9t3I.roa
Signing time: Sat 12 Aug 2023 10:04:59 +0000
ROA not before: Sat 12 Aug 2023 10:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:e934:47a1/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:34:ce:38:26:f4:77:37:f3:b5:aa:d0:17:40:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 10:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45baf720257d17a69fbe8bd78703f9076bdb772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:40:e6:81:4e:f0:7a:2a:3e:b4:c5:e4:39:
8d:6b:2a:2c:90:27:26:19:2f:af:09:bb:ac:dc:b2:
b4:21:7c:9a:59:9d:e7:40:6d:a1:78:f9:9f:b6:75:
78:b3:e8:2c:f7:ad:bb:bd:00:3a:5a:ca:8c:e0:e1:
b1:3d:87:a3:93:33:72:7b:4b:50:cc:4e:60:87:5b:
1e:70:60:b8:e8:d1:50:6a:31:e8:e0:b7:0d:1a:40:
9a:f1:06:7e:b9:f6:85:56:00:47:ef:6b:a8:bd:b0:
c5:ba:96:6d:7d:13:06:09:21:6e:a9:99:b2:51:8f:
27:3a:db:20:79:94:0b:f6:f2:6b:11:50:76:ad:fc:
91:86:cc:a3:3f:72:57:02:93:a8:c1:2e:38:68:ab:
66:be:85:10:51:ad:48:5e:7d:2e:01:2a:80:45:ef:
96:e5:3e:18:d7:7b:f8:e4:b3:35:23:09:8b:87:ad:
10:fc:2f:d7:5d:10:ef:cd:d7:d3:07:55:b1:23:5f:
60:58:c9:1f:fe:2c:f2:1a:8f:62:55:0f:0a:3f:8f:
0c:70:74:8f:67:a7:fc:e2:f2:8b:08:33:ab:09:c6:
2b:e5:48:b2:88:d7:73:a2:f0:18:57:57:8e:6b:c9:
e0:fb:c2:a2:f8:4f:25:2f:93:e2:fb:a7:25:0a:49:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:AF:72:02:57:D1:7A:69:FB:E8:BD:78:70:3F:90:76:BD:B7:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5FuvcgJX0Xpp--i9eHA_kHa9t3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:e6:f7:82:1a:ab:88:3c:b2:ec:a3:39:06:be:6d:f0:51:ac:
e3:c8:20:71:b2:b9:b0:99:53:8f:6a:7d:cd:ea:a6:cd:13:1a:
e3:b3:da:9c:d1:b4:08:18:e2:09:e0:ba:66:dc:2e:6f:a0:80:
83:51:e9:1c:57:5d:63:af:ff:2a:61:ca:44:6c:28:fc:65:d9:
8b:ed:03:9e:7a:fa:8e:79:c8:7a:d7:3d:8c:c1:b6:d1:fa:27:
c7:72:ce:37:d6:dc:4f:2d:1d:70:12:11:2d:64:65:d5:d3:28:
70:da:74:50:02:66:1c:49:1d:c3:94:4f:93:7f:7d:71:50:4b:
87:e0:63:25:59:5f:ca:f5:6b:08:9d:f9:c0:75:73:9b:cc:a8:
33:23:a6:fe:52:f8:73:42:10:52:e4:9a:bb:8a:ca:9f:3c:61:
0a:a1:32:3a:aa:19:d7:d4:7b:e1:b4:f0:94:92:96:b0:54:18:
4e:cb:b9:7a:48:d4:b0:d9:d8:7f:3a:1c:0b:58:0f:de:0f:b7:
ca:cf:1a:fe:64:3f:18:ad:61:b7:16:d9:ee:2f:27:f8:71:59:
45:b9:34:39:b3:11:4c:bd:66:4b:56:7d:ae:78:a3:d2:94:9e:
1d:0d:02:21:e0:e2:69:53:08:21:7b:65:bf:ba:ea:65:c7:99:
10:82:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:27:56 2025 by rpki-client