Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pyAomb5IKXelgrYXWXpKh0ZFlg.roa
File: 5pyAomb5IKXelgrYXWXpKh0ZFlg.roa (raw, json)
Hash identifier: qc0/4XX/pYlha4e6eWaYVVbbdMl5CTZXmEB/Vl6XqiM=
Subject key identifier: E6:9C:80:A2:66:F9:20:A5:DE:96:0A:D8:5D:65:E9:2A:1D:19:16:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D5EE5F27AE8C9B7FE80EFE5B1D6A6967
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pyAomb5IKXelgrYXWXpKh0ZFlg.roa
Signing time: Mon 01 May 2023 06:09:41 +0000
ROA not before: Mon 01 May 2023 06:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d5:ee:5f:27:ae:8c:9b:7f:e8:0e:fe:5b:1d:6a:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 06:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e69c80a266f920a5de960ad85d65e92a1d191658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:ee:03:88:83:a8:ac:df:d6:07:1c:8a:63:
f9:cd:a9:7b:4b:d7:d7:ca:26:8c:fc:3a:59:d7:94:
25:32:55:39:a0:c0:15:e8:b0:3d:f8:b4:22:49:ba:
4f:06:7d:cd:f3:4c:75:76:4b:3b:ea:ce:aa:25:fd:
73:44:70:13:19:85:b5:4c:7b:41:2d:12:58:96:ce:
f2:cb:53:05:43:a2:9d:68:b8:7d:3a:56:6c:a7:54:
ac:17:df:bb:f8:7a:45:9b:84:16:27:60:f1:3d:6a:
70:07:3b:75:a6:c4:b1:b2:9a:8a:39:0f:93:64:04:
61:11:4e:63:5a:18:62:d1:97:fe:20:c1:5f:fe:20:
4b:7c:2f:4d:c4:47:33:91:06:25:19:8a:3e:6c:1c:
00:1a:0b:cb:ae:0d:c2:84:b6:93:77:89:8d:94:57:
4a:88:f3:a4:7a:98:1b:00:06:1e:56:a6:34:a3:39:
25:91:4a:c0:3e:ea:5c:02:37:aa:c2:a3:73:ce:c7:
cc:af:28:59:52:00:46:cc:f8:1c:23:d3:94:01:fd:
b9:b8:7e:f4:c5:5a:6c:3a:a5:71:2e:3b:49:ae:af:
bb:3b:6f:99:4e:a3:67:07:63:f5:8a:26:42:d6:4c:
9c:32:24:40:a9:c4:a2:a5:e2:f8:ab:37:86:c9:e9:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:80:A2:66:F9:20:A5:DE:96:0A:D8:5D:65:E9:2A:1D:19:16:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5pyAomb5IKXelgrYXWXpKh0ZFlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:06:2d:fe:5d:0b:db:2c:64:b2:38:7f:d7:4a:d3:b3:f9:8e:
50:68:3a:39:81:60:4d:9a:04:03:31:59:7b:64:f6:f0:bf:77:
90:dd:db:8c:63:e6:3a:ce:2c:fe:60:43:01:08:11:fd:85:87:
3d:da:a1:69:f8:b5:d0:a3:ed:14:c5:a4:4a:be:11:a6:30:84:
c4:a9:ef:de:df:9e:d2:19:91:3a:9d:20:48:47:8a:23:85:2d:
85:a2:ab:e2:91:09:3a:69:5e:24:a5:33:91:93:15:54:4c:3a:
a1:b4:09:b1:87:76:00:98:db:ba:90:a7:6f:20:7e:30:20:99:
56:2b:55:78:cc:7f:b8:92:ee:45:85:d8:12:62:14:89:ea:1d:
e1:69:ea:84:3e:55:87:38:23:7f:0c:b0:17:64:ae:0d:66:79:
93:5f:9b:75:a2:1c:1d:1a:4c:86:a0:a1:82:ae:c2:7d:57:6c:
57:71:68:5d:1a:dd:26:e2:0e:c2:e6:1b:14:af:f5:92:a9:63:
b2:85:5c:f7:93:27:41:39:8f:88:c6:f1:49:b3:90:a3:94:c3:
54:87:de:32:ca:eb:9c:0a:fb:74:f7:d9:cd:7e:40:f9:b8:34:
4d:e0:e2:12:8f:e9:5f:5b:12:02:fc:a7:70:5d:c2:ab:11:75:
74:4f:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:55:58 2025 by rpki-client