Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5RFCEAxylXYKAVvj2NEodAM3zXU.roa
File: 5RFCEAxylXYKAVvj2NEodAM3zXU.roa (raw, json)
Hash identifier: MQeArErHY5crOS1blRpwxtfzyDMh5E8r9rU1KjDwIjk=
Subject key identifier: E5:11:42:10:0C:72:95:76:0A:01:5B:E3:D8:D1:28:74:03:37:CD:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018982AA4F999339336505D0C592674DB0A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5RFCEAxylXYKAVvj2NEodAM3zXU.roa
Signing time: Sun 23 Jul 2023 12:12:26 +0000
ROA not before: Sun 23 Jul 2023 12:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:aa:4f:99:93:39:33:65:05:d0:c5:92:67:4d:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 12:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51142100c7295760a015be3d8d128740337cd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:3c:2b:50:cd:9e:0e:27:f2:0c:a1:f1:a2:
5f:d1:99:c5:6c:43:47:2a:f5:b2:43:53:ab:f1:b7:
29:fd:e5:50:6b:6a:37:fe:67:3a:96:eb:d2:46:08:
7d:e1:f2:c7:ee:7f:7d:ff:c8:f8:ae:68:19:09:60:
4d:cb:48:c6:bc:09:df:df:3f:d4:b8:02:14:ef:16:
7d:36:5e:a8:f9:45:94:18:67:4c:d4:0b:c8:8b:ae:
b6:6c:40:ac:10:68:84:8b:4a:b5:39:d0:ef:23:ae:
ae:ff:04:e9:19:5f:fb:7d:92:7c:51:59:93:bf:53:
b9:83:ed:17:19:b0:ac:2e:f1:c5:f4:60:6c:12:6f:
96:7a:d8:52:37:f8:28:78:f2:dc:df:bd:80:3f:82:
14:18:86:08:51:05:bf:17:9d:a5:1e:d1:55:c1:2d:
53:6c:37:17:c5:a2:5a:bb:a7:e6:07:a3:3a:75:29:
3f:1e:c5:fc:aa:f5:39:3f:07:a1:73:3c:ab:23:21:
ad:2d:dc:b5:49:d6:33:ca:ed:72:23:67:2e:80:ce:
83:0e:2c:30:87:2e:4d:4a:db:b4:bb:fb:dc:dd:2e:
18:61:11:44:74:4c:2d:8b:4a:1d:01:a2:49:ee:52:
f4:08:24:9d:ad:8a:cb:54:24:8e:b2:53:0b:01:52:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:42:10:0C:72:95:76:0A:01:5B:E3:D8:D1:28:74:03:37:CD:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5RFCEAxylXYKAVvj2NEodAM3zXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:47:41:c3:95:f4:d2:c6:b6:58:2f:ff:b2:98:01:50:57:ec:
db:29:df:96:e2:b6:bb:5c:c7:45:83:83:f0:c9:1d:dc:52:b4:
82:48:48:75:64:ce:92:b6:4b:b4:d0:5d:32:fc:4f:05:2a:4a:
23:4b:4b:ec:76:ed:64:7a:7d:e8:9e:ff:9e:28:0c:48:15:4e:
ec:e5:b0:5a:27:8d:a4:93:df:c0:8d:8b:f3:1e:15:f6:3d:b8:
f7:96:18:af:27:a2:56:af:bb:33:b6:59:77:3c:69:69:38:4c:
b1:8e:56:8b:54:d0:55:e3:13:74:86:3a:88:56:0b:8d:22:20:
ad:43:eb:66:b9:98:e7:ba:96:e2:30:bb:20:bb:8a:0b:46:04:
6b:b9:9a:de:87:06:b0:73:7d:53:27:4b:b8:65:92:8d:10:0f:
fb:44:6d:73:60:6f:7e:37:fe:2c:74:38:9a:72:fb:e0:11:e0:
57:0b:57:cf:07:83:e9:3b:0c:2b:fc:e9:16:b5:2c:3d:e9:d8:
2d:fa:00:8b:87:4a:43:5c:e6:6e:7f:8c:14:b1:42:fc:a7:f8:
22:f6:95:42:45:cc:b1:da:21:f6:ee:df:fa:a0:ae:a2:e9:e5:
e9:51:1a:e3:c8:dd:80:13:e8:5b:c2:29:31:68:67:97:08:38:
46:a2:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:13:56 2025 by rpki-client