Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MUDHd54azUHBSO75Nj2veoxYUA.roa
File: 5MUDHd54azUHBSO75Nj2veoxYUA.roa (raw, json)
Hash identifier: BaUizPir5ts3KHvlHYOfqpKq7S1SmQXl4KAl6MtF2SU=
Subject key identifier: E4:C5:03:1D:DE:78:6B:35:07:05:23:BB:E4:D8:F6:BD:EA:31:61:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CEA182CA129FB5B30C3AFC2EA8D2A882
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MUDHd54azUHBSO75Nj2veoxYUA.roa
Signing time: Mon 07 Aug 2023 06:13:58 +0000
ROA not before: Mon 07 Aug 2023 06:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:a1:82:ca:12:9f:b5:b3:0c:3a:fc:2e:a8:d2:a8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 06:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4c5031dde786b35070523bbe4d8f6bdea316140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:15:48:9b:57:3a:1f:35:4f:fa:bf:fc:1f:
80:d3:ce:fc:e9:4e:5c:d1:e8:3a:6a:7d:97:60:84:
4e:d5:40:b7:75:a3:6b:ba:f5:19:d2:b0:f0:3a:6e:
31:79:7e:11:7c:c6:17:c2:8d:0a:67:f1:0f:cc:26:
9c:fe:8d:08:d0:f6:29:fd:ea:90:2e:d0:46:18:c3:
ff:e8:a8:f6:b4:69:10:51:9e:6d:26:44:72:3e:15:
1f:1a:0b:e4:4a:ff:86:83:42:5f:aa:1d:2b:1e:01:
78:fd:c3:cb:88:48:b9:30:6f:0a:57:60:f3:13:64:
60:ff:49:50:0f:3b:99:fb:06:c9:54:7d:67:d9:f0:
ec:39:87:35:29:51:ae:db:7a:a1:ca:66:07:33:a7:
53:7e:ed:5f:3c:59:a5:dd:50:5a:36:20:35:28:ec:
53:86:0d:31:cb:c9:c5:a9:85:97:52:74:c1:6c:a0:
82:26:e7:98:dc:a0:e6:6d:24:ea:58:bb:a8:ea:15:
4e:c5:c8:90:03:fc:4b:86:38:16:07:ef:fa:ab:97:
b0:ff:e2:4b:a6:3c:39:6f:c9:03:56:0c:9c:f4:d0:
34:9c:23:96:01:a6:89:80:81:d4:af:72:ae:f1:fd:
35:6d:67:4e:f6:14:36:b2:b7:3d:1c:67:5f:6e:36:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:03:1D:DE:78:6B:35:07:05:23:BB:E4:D8:F6:BD:EA:31:61:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MUDHd54azUHBSO75Nj2veoxYUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:18:71:6d:ac:fa:ad:99:06:86:9c:28:4e:89:e3:cc:4b:7c:
51:78:4e:4d:89:19:bc:c0:c3:b7:0d:93:10:f5:dd:cc:6e:ea:
cf:3f:10:3d:1f:0d:82:88:6f:12:2e:cf:cd:8e:65:c6:de:38:
5f:a4:55:7d:53:f6:fc:e7:8d:6e:ec:56:14:f2:ec:27:64:ce:
08:d0:05:c2:ea:ac:8f:28:c9:f2:df:ab:b0:1e:90:8b:8f:e4:
e0:02:d9:10:f7:1a:d7:d0:a1:b7:98:6c:ef:27:01:0f:a9:f2:
e6:8d:b0:51:17:d7:e6:76:db:9b:ec:bd:b5:69:b1:8e:d5:7b:
17:f3:2d:e0:f7:a7:75:13:29:43:ec:dd:2e:2c:c0:23:b9:39:
77:f8:ca:8b:50:f4:20:e1:3f:f6:6b:0d:05:13:c5:2b:41:6d:
fd:d3:af:09:9b:76:fa:2d:7f:b0:34:f4:0e:c3:a4:c3:70:35:
83:a4:ba:ec:b0:73:78:ca:bf:44:10:d7:4e:ac:62:82:68:81:
27:5b:8f:db:e2:b8:ea:25:a5:a5:18:76:e0:65:69:16:73:97:
c9:ed:9c:c0:22:5f:a0:62:35:99:44:ca:6d:59:8e:f0:25:89:
3e:68:20:60:8f:ec:ca:1c:ce:90:0b:31:8f:c3:35:86:49:84:
f0:80:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:07 2025 by rpki-client