Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5f629mElxZVlbIZbEIzGVt1wFXU.roa
File: 5f629mElxZVlbIZbEIzGVt1wFXU.roa (raw, json)
Hash identifier: e1bM4a6up5+5K9PXYEDnNU7hG3agsJACNrzknj45pKY=
Subject key identifier: E5:FE:B6:F6:61:25:C5:95:65:6C:86:5B:10:8C:C6:56:DD:70:15:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018585B224A3363AE1AA14A50E3DF5C80CA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5f629mElxZVlbIZbEIzGVt1wFXU.roa
Signing time: Fri 06 Jan 2023 06:08:42 +0000
ROA not before: Fri 06 Jan 2023 06:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:b2:24:a3:36:3a:e1:aa:14:a5:0e:3d:f5:c8:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 06:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5feb6f66125c595656c865b108cc656dd701575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:d8:46:56:ef:3d:06:2b:f1:bc:24:1f:af:
ba:57:a8:12:bd:d9:e0:32:cf:21:99:d5:d5:81:c7:
1e:32:06:7c:c0:2e:08:70:33:04:13:9e:3b:45:5d:
80:ce:55:58:75:b5:25:b6:e9:2c:f1:4c:5e:61:cf:
8b:c2:87:38:24:93:ab:58:54:50:de:7f:f8:c5:f9:
fc:db:a1:3f:96:77:c4:a0:51:77:1b:92:33:e3:e1:
bd:0b:89:64:07:18:d4:1f:da:5a:f4:66:cd:91:51:
ae:86:d9:ac:6c:8f:8a:67:be:95:98:c0:68:33:79:
e7:59:16:38:d1:cd:d9:39:82:9f:9e:a4:91:f2:75:
a6:93:ba:38:a3:23:61:64:86:27:b8:21:ff:c3:ae:
19:18:49:3d:5f:5b:8a:7d:9c:f5:d5:4d:4c:6a:ec:
42:7a:b1:35:47:16:35:e0:58:20:e8:db:e1:11:09:
b6:3c:7a:3b:16:00:a6:5c:62:31:8c:43:83:37:3b:
ed:6a:5d:4b:3e:d2:05:7a:02:04:1e:2c:83:bc:31:
0f:bf:94:16:c1:7a:d1:37:e8:fd:a8:c5:93:1a:f4:
4f:68:ed:9c:9a:3e:ac:cf:1b:74:2f:64:0e:62:25:
c1:76:00:50:bc:fc:b6:4a:ad:33:8d:58:97:87:7b:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:B6:F6:61:25:C5:95:65:6C:86:5B:10:8C:C6:56:DD:70:15:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5f629mElxZVlbIZbEIzGVt1wFXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:0b:37:bc:57:2c:02:be:5d:fa:38:43:9a:f4:da:60:9d:27:
85:4e:6f:eb:b8:69:99:4e:64:5f:04:94:5a:0d:02:2e:a6:83:
61:f0:9a:34:e4:52:9f:94:bc:ca:9f:0f:47:94:98:0f:79:54:
1b:8c:af:a8:ab:e8:14:3a:5d:8c:64:ea:d6:0a:8c:32:20:66:
38:de:b1:d9:55:53:47:19:7a:b8:b8:35:4d:34:3c:97:70:5f:
72:3f:e0:00:b8:c9:82:88:a0:77:d3:0c:fb:94:bd:76:99:a4:
3e:3a:2f:1a:cf:9f:07:f9:f1:e7:02:d1:2a:c1:65:a0:11:b6:
b8:c3:87:b1:c4:97:b0:b5:26:a9:4e:06:2c:36:79:10:e6:78:
d3:1c:35:36:c6:f9:c6:f1:07:24:49:7f:a6:d8:b5:df:39:c3:
07:ab:7d:76:2e:fd:fa:8c:f6:c1:59:37:08:c2:8a:41:62:22:
b3:f4:4a:b7:a7:23:cc:cf:53:02:5b:95:0f:8f:9f:42:7f:55:
6a:13:4a:80:82:79:b0:8b:55:9a:61:85:23:5b:f5:9a:66:ff:
a8:8d:10:11:1d:44:0e:ba:fc:ac:4f:ce:27:7e:ec:00:1c:7a:
5f:3f:b9:5b:f5:6e:f6:e8:80:0a:38:e9:5c:9a:b7:e7:62:28:
64:96:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:58:45 2025 by rpki-client