Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5b8l3AhXk_keqCAFWoxOi1Ga7U4.roa
File: 5b8l3AhXk_keqCAFWoxOi1Ga7U4.roa (raw, json)
Hash identifier: Kq0mzErwgMTgHdpOmEpAykBRfUbL3QLSmu0ysmpIu38=
Subject key identifier: E5:BF:25:DC:08:57:93:F9:1E:A8:20:05:5A:8C:4E:8B:51:9A:ED:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840039B11FB8CF324FC12322A498E02E16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5b8l3AhXk_keqCAFWoxOi1Ga7U4.roa
Signing time: Sat 22 Oct 2022 15:04:51 +0000
ROA not before: Sat 22 Oct 2022 15:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:39:ce1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:39:b1:1f:b8:cf:32:4f:c1:23:22:a4:98:e0:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 22 15:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5bf25dc085793f91ea820055a8c4e8b519aed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:80:5e:10:e7:dc:33:f5:8b:a3:ca:53:09:
df:23:5d:cf:81:da:a6:1d:bd:15:04:c8:16:83:a0:
89:7d:76:e5:dd:8d:ac:00:a6:0c:27:43:33:a1:ca:
47:c8:34:cb:71:8a:57:a2:2a:94:04:23:c7:f2:ee:
09:94:51:41:d2:ec:df:ef:b6:10:91:f6:6f:1b:a7:
a7:a2:47:18:da:f5:83:ba:45:bb:26:b4:c2:65:b2:
5d:01:a1:8f:32:62:95:db:e3:5e:26:df:f1:91:20:
b2:f2:5c:cf:dc:d8:cb:8c:b4:a8:a3:e3:89:65:b9:
70:6b:d2:d9:ad:53:6c:56:55:35:ab:be:87:e6:b8:
64:c4:a5:4f:b4:1c:62:c9:90:b9:ee:86:ee:d2:66:
de:5f:e6:5c:ea:8e:c6:5b:a1:80:86:34:fb:95:a3:
2a:cf:ed:cd:4c:13:ce:02:8e:d3:21:b7:54:0d:f4:
67:d8:37:f9:0d:44:19:04:41:b5:dd:40:2d:97:d0:
77:a9:3e:55:07:8a:97:00:9e:99:66:ee:70:6b:e7:
6d:85:5d:f7:8c:27:ee:75:88:82:3d:71:7c:a8:4f:
9c:69:7e:79:7a:af:9d:01:ff:24:72:ac:d7:c0:a9:
af:66:a4:9d:f3:e5:f0:3b:56:e9:57:86:7d:3b:4f:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BF:25:DC:08:57:93:F9:1E:A8:20:05:5A:8C:4E:8B:51:9A:ED:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5b8l3AhXk_keqCAFWoxOi1Ga7U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:15:1f:db:a0:47:bc:fb:26:57:25:a9:cb:69:0f:48:0a:e5:
68:75:f6:8c:5b:0c:47:40:a0:4c:c3:8a:e3:a3:72:31:05:e5:
a5:3e:8a:0e:a4:15:65:1c:44:3b:2b:3c:5e:c0:c1:87:65:48:
76:6c:78:d5:e5:3a:72:b3:e7:96:2b:25:a0:bb:15:8c:7e:3f:
ac:e8:2e:d7:78:1e:58:95:c4:a7:bc:85:15:4a:0e:b1:93:80:
30:30:f8:9f:b4:76:60:42:cb:db:17:11:c4:0c:e3:fb:bf:08:
7d:9a:57:41:16:3e:14:ac:27:50:f0:30:1d:56:00:ac:66:6b:
93:eb:a7:77:55:47:b3:fa:58:9f:fe:05:cd:b8:7a:44:05:bb:
e2:a2:71:95:cb:26:3f:27:72:80:dd:c5:26:14:24:b2:77:89:
89:ba:13:d3:ed:54:4f:36:c2:f9:10:5a:7c:8d:7d:54:c3:42:
f6:2b:45:cf:26:af:74:f1:84:9f:00:0c:be:5b:ea:57:15:50:
d5:77:12:7f:7e:60:94:c4:4c:3e:aa:1f:a6:55:52:1c:36:74:
7d:31:ec:a8:ed:86:09:1b:cd:26:43:36:4e:79:d6:71:2e:2f:
10:b1:40:83:ef:b2:1e:73:d5:80:0d:c5:19:e5:1b:c7:9d:ed:
32:b9:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:43 2025 by rpki-client