Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5hVJ8rZuJXibwPFcXklQbgD8wbo.roa
File: 5hVJ8rZuJXibwPFcXklQbgD8wbo.roa (raw, json)
Hash identifier: 4C0nv62GmOFu6zVK4002dTE5/OGWtFqjvogny8tJbcc=
Subject key identifier: E6:15:49:F2:B6:6E:25:78:9B:C0:F1:5C:5E:49:50:6E:00:FC:C1:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826A10D1285FD003EB4AFE8C9B97ACDCCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5hVJ8rZuJXibwPFcXklQbgD8wbo.roa
Signing time: Thu 04 Aug 2022 18:14:23 +0000
ROA not before: Thu 04 Aug 2022 18:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6a:10:d1:28:5f:d0:03:eb:4a:fe:8c:9b:97:ac:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 18:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e61549f2b66e25789bc0f15c5e49506e00fcc1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:f9:14:f0:6c:d5:19:f3:c5:b6:f4:d9:34:
20:9d:bf:13:d3:b7:73:0f:4a:6b:f8:78:15:9e:ab:
96:7d:0c:6a:a2:3f:58:67:87:de:d1:2f:1e:ba:e5:
78:b1:de:73:84:78:e5:b0:87:65:97:23:16:2e:dd:
c5:e2:cc:83:49:6e:ef:7a:08:0e:1f:70:70:a2:22:
bc:53:40:b2:ea:5f:c9:7c:b0:91:64:b8:dd:f7:de:
53:05:7a:9c:c1:5f:a9:72:f4:09:ec:4e:f7:a4:f4:
49:d1:15:14:1f:c9:32:56:a8:f7:5b:4c:c6:ef:f9:
7e:9a:9b:77:c2:67:f9:a2:d6:8d:12:b4:de:9d:f3:
cf:ff:30:29:be:b3:90:80:16:b4:cf:b5:08:3f:82:
5e:20:8d:af:40:4a:e6:e2:7a:53:c0:c8:57:93:a0:
cc:67:f8:8a:d5:f7:27:75:c8:b4:1e:c1:3b:cd:40:
f9:15:dd:20:95:d7:09:92:67:67:70:c3:e9:4b:3c:
e6:8f:46:7c:67:75:98:ec:e0:6e:71:ae:13:5c:47:
97:05:50:fd:15:75:f4:c1:cd:aa:43:8b:12:78:d2:
96:07:e6:f7:e3:73:ad:bc:d1:dc:09:f8:a7:3f:68:
91:a2:bf:c1:67:cd:e8:fe:e6:19:a7:13:24:f9:c2:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:15:49:F2:B6:6E:25:78:9B:C0:F1:5C:5E:49:50:6E:00:FC:C1:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5hVJ8rZuJXibwPFcXklQbgD8wbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:82:68:66:1f:c7:7e:cf:af:03:9d:a5:7c:3e:03:1f:a3:1b:
21:c8:ae:0f:79:e7:0c:ae:39:f5:a7:e2:62:59:56:a2:51:c4:
75:f1:c1:f3:15:6a:a7:8f:8b:a6:a3:77:ca:65:05:18:6a:8c:
ab:8b:22:1b:de:88:e6:e2:b9:c4:e9:69:24:f0:e1:bd:f4:53:
a7:b5:05:e0:40:fd:3f:3e:6c:42:f6:5b:8e:24:49:1f:ec:38:
ce:74:21:48:5b:ce:39:da:a3:1b:4f:88:8b:07:2e:b5:e3:fb:
54:c6:b1:f0:c5:3c:ca:06:66:8f:d2:d2:c1:df:f1:75:af:4e:
4e:70:e4:c1:24:04:21:e2:49:34:35:f1:c9:b4:a1:76:34:4e:
22:15:a4:71:8d:9d:31:c3:ab:b0:ac:35:9f:ed:20:b4:88:c1:
81:ff:4b:53:fd:4b:07:24:2d:6f:0a:a2:43:50:ee:2f:dd:30:
90:08:0a:71:08:ee:ae:d1:85:20:24:99:d4:40:05:47:db:97:
c7:4c:b7:3f:19:b0:ac:01:16:a2:91:ee:a9:d5:d6:8a:3a:11:
2b:15:66:a4:85:b7:01:52:bc:c8:81:23:cd:6b:2e:dd:f6:69:
4f:80:82:92:73:6f:15:d1:21:73:4f:a1:1f:0f:c7:bd:da:bb:
94:22:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:16:04 2025 by rpki-client