Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5LXh7FtTyi55u7ACVgHwO43xV9c.roa
File: 5LXh7FtTyi55u7ACVgHwO43xV9c.roa (raw, json)
Hash identifier: 5bfVJUb1tAMipSWVSJ+w7g//+n1yx7j2lEMBcl/uKFM=
Subject key identifier: E4:B5:E1:EC:5B:53:CA:2E:79:BB:B0:02:56:01:F0:3B:8D:F1:57:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E4BB7A30873C53832CC7034AF5CAC2E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5LXh7FtTyi55u7ACVgHwO43xV9c.roa
Signing time: Fri 11 Aug 2023 13:13:58 +0000
ROA not before: Fri 11 Aug 2023 13:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:bb:7a:30:87:3c:53:83:2c:c7:03:4a:f5:ca:c2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 13:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b5e1ec5b53ca2e79bbb0025601f03b8df157d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:6c:67:d3:82:c8:2c:dc:02:b1:bc:fc:d3:
74:84:fe:0d:55:b4:5e:b3:be:9a:e5:48:a2:b7:50:
85:f7:70:33:bd:af:aa:63:21:5e:17:be:85:d0:73:
c1:12:ed:31:c9:09:ab:fd:2a:54:58:00:52:38:ce:
d1:0d:14:5e:e7:5c:17:99:1a:25:89:11:39:28:b2:
ab:12:1c:23:d5:26:2e:a1:9e:7c:17:85:c9:c7:98:
52:44:8f:c9:9a:78:42:00:f2:3b:79:d9:cc:98:d4:
6e:0a:77:e0:f4:ea:1d:5c:7d:7c:7c:48:c5:0a:5a:
90:24:df:75:2e:25:75:0b:1e:78:dc:71:c2:25:15:
0d:7c:75:48:9e:d7:f5:9b:11:dc:bb:24:9c:20:15:
9c:74:97:12:b7:69:56:28:b4:64:ea:6f:cc:89:6c:
f5:8c:1a:cc:f9:07:d5:36:ab:01:79:06:04:98:40:
fa:32:8e:05:af:a3:eb:37:fc:fe:65:7a:89:40:c0:
00:8d:a8:57:d1:6d:e4:5a:39:3a:1f:4c:32:c1:30:
7c:c8:7a:43:50:ed:61:d9:fd:d9:ce:bc:57:27:48:
2e:87:b7:60:64:85:11:d5:9c:9f:d6:9b:3d:7b:fd:
96:24:3f:01:6f:3d:bf:2d:ce:d6:f8:74:c9:00:16:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B5:E1:EC:5B:53:CA:2E:79:BB:B0:02:56:01:F0:3B:8D:F1:57:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5LXh7FtTyi55u7ACVgHwO43xV9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:d4:dc:8e:7d:95:e8:46:25:c3:9a:b6:4f:aa:a4:5a:12:69:
24:3f:fc:22:5e:d6:3d:30:1e:62:d2:c1:0d:6e:40:a3:09:d8:
7b:a6:c6:77:40:9e:9c:0f:32:8b:e4:9e:ae:ed:be:bf:f9:85:
69:55:e0:aa:94:e7:78:ed:85:36:3a:4b:c4:11:96:71:f2:93:
4b:36:09:f1:32:f1:97:a1:24:03:c1:4a:6c:6b:b5:8f:cc:8b:
ef:97:df:ab:ba:2c:b7:56:b4:16:5f:e7:f6:f7:d2:96:66:09:
10:a2:b8:ca:80:44:7e:27:7f:24:65:4c:fe:64:d1:9e:4c:40:
c9:5b:5b:42:47:b9:1e:f0:20:8a:16:f9:b2:25:76:ad:b4:cf:
29:0b:37:01:c8:28:51:d5:e7:e2:04:98:37:ce:fa:45:45:3b:
8d:25:00:a0:d5:e0:b7:1a:87:bf:b3:b3:cf:f1:75:0a:65:83:
35:bc:2d:5d:b2:47:0f:5f:3b:b1:60:1d:83:34:0c:51:99:09:
4a:01:66:b0:11:8c:4b:87:0f:9b:0d:42:19:f8:69:c4:2f:9c:
34:2a:e3:96:ef:fd:0b:65:20:21:68:e9:d1:74:f3:07:09:35:
29:72:b5:25:da:45:51:88:79:dd:19:56:1e:04:92:2e:d4:b7:
58:e0:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:58:01 2025 by rpki-client