Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qUVGVgtVM1vz9JCebcYKwFtyOE.roa
File: 5qUVGVgtVM1vz9JCebcYKwFtyOE.roa (raw, json)
Hash identifier: KpK+Pcya9Rp99H05Gdu+hoHKKRAmkow7hvSbCPNLRno=
Subject key identifier: E6:A5:15:19:58:2D:54:CD:6F:CF:D2:42:79:B7:18:2B:01:6D:C8:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A15A75EC7F2145DA4C2E1AB4F9FB1E968
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qUVGVgtVM1vz9JCebcYKwFtyOE.roa
Signing time: Mon 21 Aug 2023 01:13:24 +0000
ROA not before: Mon 21 Aug 2023 01:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:a7:5e:c7:f2:14:5d:a4:c2:e1:ab:4f:9f:b1:e9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 01:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6a51519582d54cd6fcfd24279b7182b016dc8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:d4:91:63:c6:1e:55:e6:0e:cc:20:3c:0f:
22:4f:38:ef:12:22:5c:2c:80:17:77:87:02:89:01:
a6:d9:ef:88:6a:3c:1e:b9:89:9f:17:01:e7:e8:3e:
f9:85:99:82:f4:9e:2a:1c:24:4f:fd:33:38:70:c2:
b8:b3:5c:22:22:f3:27:a6:59:e0:e7:20:fc:55:f8:
91:14:c1:b4:c0:57:97:bd:78:56:8a:fc:72:ae:ac:
72:55:61:55:4c:54:43:85:3e:b2:49:29:35:52:aa:
e2:df:43:9a:ed:8b:7b:66:f9:61:94:7d:09:ba:a1:
e8:7c:51:2a:d9:a3:b4:7b:f5:7e:07:cf:41:08:30:
06:49:3f:24:18:9a:c2:87:41:9c:19:7a:fc:23:cd:
54:bc:72:7a:16:a5:b0:48:04:a4:64:07:a6:81:a6:
e7:0a:98:c9:e3:f2:82:aa:cf:1e:65:56:58:9b:45:
fc:bd:d9:35:d6:2f:d5:d9:fb:5d:a8:1b:b1:b2:3c:
4e:22:79:4a:aa:73:8f:90:9a:3d:4f:e5:0f:23:b6:
3d:44:47:ec:23:b6:1a:69:a3:59:25:ba:d3:04:65:
c0:85:6f:2e:d8:7d:4f:af:dc:fc:07:36:88:06:9f:
9f:c5:b7:75:b1:44:40:06:7c:80:b1:e5:e4:ea:48:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A5:15:19:58:2D:54:CD:6F:CF:D2:42:79:B7:18:2B:01:6D:C8:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qUVGVgtVM1vz9JCebcYKwFtyOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:6e:a4:e1:92:fa:c7:c4:dd:02:e6:ab:28:8e:8b:b2:1b:47:
ce:c8:d0:e2:45:a4:ae:7d:3d:5a:2e:d7:b2:4a:23:15:b7:8a:
51:07:a4:00:45:38:94:7e:15:16:d5:30:0a:2d:d5:72:88:96:
60:0f:2a:cf:f4:e1:4c:59:35:aa:39:bd:d3:f9:5f:e3:ca:e7:
fa:d3:34:cc:8d:da:0c:5b:16:bd:f1:da:84:f1:48:b3:84:a6:
69:ac:4d:d1:6b:dd:4c:58:b7:d7:06:5e:fe:aa:7d:17:0a:5e:
84:75:58:ed:c7:7c:f1:6a:bb:68:91:2b:8d:80:f2:49:30:e5:
52:fd:a6:40:4e:79:7b:ac:45:13:c4:e1:38:60:fd:21:1a:fb:
d1:07:55:54:e6:1c:e6:d4:79:16:aa:d6:6c:04:46:94:b3:05:
9d:b4:35:73:3b:70:4a:9e:a1:1e:9a:e9:59:ec:11:11:80:21:
45:2b:9f:52:fa:06:fc:64:34:4a:c9:92:45:31:0e:b7:a3:ae:
e6:51:9e:63:01:83:ff:96:f0:5b:c8:6f:5e:5b:c0:70:4a:c2:
45:9e:82:0c:f9:37:9c:9c:b5:83:ea:0d:eb:80:e0:c8:be:f8:
e3:3e:83:46:d3:fe:b7:55:52:26:34:fc:7f:e9:7a:a9:70:ca:
c5:df:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:05:19 2025 by rpki-client