Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa
File: 5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa (raw, json)
Hash identifier: dNWLyInxsQXg7G2MYCGMDkPj/P2m0yGuyrjDP4gILxM=
Subject key identifier: E4:7B:FD:B0:8E:95:19:F4:83:79:71:CB:86:52:87:7D:7F:EA:78:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846AE8F8E793D5CFC48DAC088F04537A1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa
Signing time: Sat 12 Nov 2022 08:16:03 +0000
ROA not before: Sat 12 Nov 2022 08:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:e8:f8:e7:93:d5:cf:c4:8d:ac:08:8f:04:53:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 08:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e47bfdb08e9519f4837971cb8652877d7fea78df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:78:3d:96:d5:1b:76:4a:f1:11:55:79:06:
59:46:65:8d:02:8c:4d:47:57:23:c9:dc:28:7c:d9:
93:67:8e:17:e3:28:20:f6:b0:f1:13:a4:f7:8a:89:
f8:95:f6:12:47:63:4f:14:68:10:42:2c:88:04:19:
c6:61:73:d0:c6:0d:58:b9:4e:28:d4:82:10:3f:07:
14:09:82:06:94:dd:05:13:04:0a:1a:30:58:08:41:
66:d9:ec:a0:0e:1a:32:b6:02:04:b6:ad:3e:f3:79:
af:08:e7:e6:57:96:cc:66:6a:d3:67:67:46:57:a6:
b4:ab:cb:2d:8e:76:74:2c:42:3a:d4:cb:a6:be:82:
1c:34:9a:06:f5:a2:33:d0:3b:e7:4a:57:d2:b4:d8:
91:6d:f7:66:c6:00:cc:5c:6c:92:80:01:f9:f4:f9:
ee:a2:46:ef:6d:55:93:ef:93:08:5b:70:50:30:22:
27:4a:df:6d:31:2a:9e:d5:9a:0c:98:49:22:17:86:
8f:92:17:3f:b9:49:a9:e2:80:a0:de:73:a7:c0:5b:
96:b3:21:13:11:3e:e6:72:34:ea:80:58:e5:53:55:
4b:f1:7c:39:cd:08:0c:e5:41:29:61:da:8a:1f:b6:
ef:75:5b:8e:87:6f:2b:6a:3d:50:a0:52:b0:1a:00:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:FD:B0:8E:95:19:F4:83:79:71:CB:86:52:87:7D:7F:EA:78:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:f5:87:a3:ef:f6:49:f6:e3:4a:69:0e:ee:fc:ab:93:f3:6a:
22:53:5d:22:43:63:93:2c:b3:85:dc:79:81:bb:b1:76:83:5b:
87:dd:d9:61:84:08:45:56:fa:1a:e4:51:ee:9e:76:46:bd:b3:
e7:22:7e:bd:02:ec:76:7e:4f:1e:15:53:d3:a8:33:e9:6f:c7:
fd:20:2f:18:1f:fd:23:f1:2a:1a:51:5f:6a:95:3e:27:82:6b:
b2:2b:50:1c:a6:b3:1e:20:f7:01:99:d2:0d:77:7b:3e:ad:b8:
c5:33:9a:ee:ce:67:df:88:34:e4:36:66:27:46:73:10:d2:ad:
aa:b8:14:42:3f:d8:ec:21:44:36:c6:fb:02:97:c2:0e:ed:3e:
35:ca:6a:b2:7d:ba:13:e3:40:41:85:c8:b7:42:15:61:f7:23:
9a:69:4d:e8:70:c6:0c:cf:55:eb:34:d2:6b:62:b3:92:8f:fe:
c3:90:d9:1a:49:7a:63:0b:2d:30:0c:f0:6c:e7:a6:7d:21:40:
ee:a2:77:fc:60:88:62:04:87:ac:55:57:21:6c:e1:e6:7a:c3:
f7:15:39:5b:fb:c5:e1:60:54:e2:a5:96:c4:b6:6d:e0:6f:07:
93:8c:94:15:61:20:bb:ab:a2:dd:87:f4:49:9f:b4:07:e6:2b:
59:bb:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:27:17 2025 by rpki-client