Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Gtm0WdPsIBiQJ2CNuz97n8Pgbk.roa
File: 5Gtm0WdPsIBiQJ2CNuz97n8Pgbk.roa (raw, json)
Hash identifier: wQ7lwZO67N/jM0HUurQeWHstllSRhcOeUvPTYv/PYCY=
Subject key identifier: E4:6B:66:D1:67:4F:B0:80:62:40:9D:82:36:EC:FD:EE:7F:0F:81:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845E09AFF7ECFBAD628421B13DFE429B5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Gtm0WdPsIBiQJ2CNuz97n8Pgbk.roa
Signing time: Wed 09 Nov 2022 20:16:43 +0000
ROA not before: Wed 09 Nov 2022 20:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:09:af:f7:ec:fb:ad:62:84:21:b1:3d:fe:42:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 9 20:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e46b66d1674fb08062409d8236ecfdee7f0f81b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:8c:dd:18:fe:5b:bd:d7:c0:21:e2:87:09:
b7:ac:37:a5:fd:76:99:be:e6:b5:19:54:16:7a:92:
ae:14:68:d3:fd:b5:dc:31:2d:df:1e:66:7e:86:9c:
ed:c9:01:e5:9b:ef:ad:3d:b3:12:94:35:92:81:98:
f5:e8:9c:1e:8f:eb:b9:80:b4:b4:d6:02:f0:5d:38:
ad:16:42:d2:e2:5b:18:8a:45:6c:be:9b:11:aa:76:
47:9e:e8:9e:8e:40:f8:6d:bd:e7:c4:c6:ab:06:1d:
6d:29:2d:38:94:57:18:05:08:43:92:6e:7f:85:47:
51:c3:c5:1f:96:4e:93:bb:24:ba:18:f4:c5:d6:06:
aa:40:c2:71:ea:4e:dd:7a:63:80:08:a6:64:32:de:
ed:5a:83:86:93:e0:a4:1a:54:53:aa:09:8c:b6:36:
34:14:33:55:dc:4a:91:4f:73:37:0b:88:29:7e:6d:
ec:1d:80:e3:7e:af:b7:b9:03:21:48:19:39:c4:67:
39:11:7c:dd:99:03:fc:7e:c4:98:52:a3:1c:4b:3e:
96:03:45:f4:bb:03:f8:3f:cc:78:92:6f:3d:bb:8d:
4a:c9:03:49:ba:59:1f:f4:87:97:a7:6e:fb:3b:80:
9b:83:98:be:4d:e9:4c:2d:95:74:dd:e8:4e:d4:98:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:66:D1:67:4F:B0:80:62:40:9D:82:36:EC:FD:EE:7F:0F:81:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Gtm0WdPsIBiQJ2CNuz97n8Pgbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:6a:7d:31:44:67:0c:6a:40:ac:20:61:93:dc:5e:8b:2f:e1:
a7:e6:f2:7d:24:fe:48:aa:53:91:1d:01:3f:39:bb:c6:87:16:
dd:f1:b6:51:94:2e:3b:2a:45:07:48:06:a0:3d:26:f3:ad:ac:
5b:ff:30:be:21:4a:5a:77:ad:f6:14:68:b4:7f:73:3f:ed:fc:
8c:bb:f9:f0:21:05:1b:14:67:d8:0b:90:59:63:da:67:66:da:
4d:7c:3e:74:4f:eb:9c:f7:9f:58:a1:de:5d:a7:0f:b7:7d:52:
1a:83:35:bd:2f:43:42:e6:ba:34:35:07:05:54:66:d3:9f:1b:
c2:82:fa:a2:c3:96:d4:bb:1e:3e:33:3f:7b:3b:9b:f7:0d:2c:
94:a7:48:58:b4:26:35:e4:56:d2:8f:c2:56:bf:79:d4:6a:86:
c7:56:94:34:6d:6f:eb:22:59:03:46:54:84:ef:4b:db:bd:cb:
53:8c:b2:a8:b1:1d:5c:74:06:38:f7:5c:ae:09:52:78:88:44:
e6:45:ce:ef:97:1f:52:2c:9c:e1:cc:be:50:79:b3:80:49:31:
d7:1d:ef:99:19:39:bf:d0:cf:54:0b:b8:3e:0e:94:ae:bf:36:
01:2e:a3:38:24:9d:70:fe:f3:d1:fe:1e:f2:ce:7f:db:76:f2:
59:11:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:17 2025 by rpki-client