Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5eIfAbDFEN4GEj6z-pJ8IsTtd6U.roa
File: 5eIfAbDFEN4GEj6z-pJ8IsTtd6U.roa (raw, json)
Hash identifier: zrLLy/5dUqxC/iZHE5HHwC7T2uhHttG7WDdDth1t3ks=
Subject key identifier: E5:E2:1F:01:B0:C5:10:DE:06:12:3E:B3:FA:92:7C:22:C4:ED:77:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E5A7B47BE67C83E6B94E84E37D35195A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5eIfAbDFEN4GEj6z-pJ8IsTtd6U.roa
Signing time: Sun 28 Aug 2022 18:12:29 +0000
ROA not before: Sun 28 Aug 2022 18:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:a7:b4:7b:e6:7c:83:e6:b9:4e:84:e3:7d:35:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 18:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5e21f01b0c510de06123eb3fa927c22c4ed77a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:9f:d8:00:25:45:50:9f:5c:5a:6c:8d:54:
19:4d:53:53:31:76:1c:d2:82:81:35:2f:66:4b:72:
8e:71:fd:43:5c:03:6d:f5:1d:71:99:05:25:10:6a:
7b:40:f6:05:81:41:0c:1e:2d:af:2a:2b:ef:03:a8:
10:ee:c3:8b:31:4b:1b:00:a5:f8:c5:23:3d:29:57:
a8:d7:3d:c8:7a:a8:b9:eb:cf:9a:ad:ac:df:38:9f:
8b:6d:f3:51:44:e7:ce:68:72:5f:90:9c:1f:05:c3:
74:ed:bd:49:ec:c0:96:e6:0d:45:fd:64:bb:2e:52:
8f:e7:ca:d2:68:54:41:7b:0b:a6:cf:a4:32:f1:e1:
90:24:c4:b7:92:0f:6b:3d:b4:fc:59:00:f8:09:f7:
1e:e5:dc:f2:4c:26:06:c7:37:8c:84:c7:0a:00:35:
0d:3e:b9:39:1d:4d:44:81:79:40:7d:d5:c8:9f:ff:
c6:7b:3d:2e:da:74:3f:74:24:8c:5b:c3:29:29:06:
4f:ef:86:45:07:19:5d:f4:a9:84:57:26:25:73:4f:
ee:5f:69:db:04:06:a6:19:8a:cb:af:4e:e3:3b:84:
c1:88:d0:ef:10:28:94:2f:68:3c:22:13:04:d4:3f:
b0:36:1f:8f:9a:5d:6c:b6:3e:83:04:10:67:e7:f9:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:1F:01:B0:C5:10:DE:06:12:3E:B3:FA:92:7C:22:C4:ED:77:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5eIfAbDFEN4GEj6z-pJ8IsTtd6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ce:c0:85:1a:ff:70:40:d3:f9:70:26:ef:da:82:b1:27:e9:
bb:f5:39:74:ed:e2:ce:b5:f5:38:91:d7:f4:a0:3d:f9:84:d5:
20:3f:2d:51:dc:f1:ce:d7:15:bd:96:a5:72:c1:a5:12:3e:8b:
09:1a:7f:eb:21:90:c2:a8:74:2a:a1:cd:72:8d:b6:29:d3:65:
3a:9a:df:a0:f7:ac:08:2e:58:d9:29:fa:01:90:85:92:2f:37:
50:48:79:1b:91:8e:34:90:ac:66:14:e4:24:4a:34:b9:60:06:
69:4e:30:49:0f:6b:57:ce:47:28:7e:83:be:a0:e2:1e:5d:ea:
38:8c:c3:bb:0d:d7:02:5a:33:d7:25:89:bb:4e:a3:17:02:e0:
5d:69:87:18:a2:fc:a0:2a:6d:b6:d2:db:65:9c:a0:26:80:68:
cd:1f:98:cd:bb:81:a6:41:24:ba:c0:44:87:11:a4:d6:49:c8:
20:e3:fd:29:14:3b:ea:75:bf:c3:51:04:5f:eb:11:74:82:93:
a4:8c:81:37:20:88:bb:5e:f1:cd:6e:63:c9:34:97:61:f5:20:
0b:34:53:26:8d:e5:3b:34:ce:91:65:a3:97:13:83:0e:8a:cc:
d1:1e:5d:33:be:4c:02:33:fc:8b:5b:9c:f1:6f:12:76:0f:d7:
3a:aa:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:03 2025 by rpki-client