Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5uIs52iuqrxr6btvSl5fYJ6vmHM.roa
File: 5uIs52iuqrxr6btvSl5fYJ6vmHM.roa (raw, json)
Hash identifier: dVjYu7SP8UFFObvhW3nOe0L9kO6K+o2u2uDH9uUHMKo=
Subject key identifier: E6:E2:2C:E7:68:AE:AA:BC:6B:E9:BB:6F:4A:5E:5F:60:9E:AF:98:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841057AF8B5A50AB27C36D689084169C09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5uIs52iuqrxr6btvSl5fYJ6vmHM.roa
Signing time: Tue 25 Oct 2022 18:11:32 +0000
ROA not before: Tue 25 Oct 2022 18:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:57:af:8b:5a:50:ab:27:c3:6d:68:90:84:16:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 18:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e22ce768aeaabc6be9bb6f4a5e5f609eaf9873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:66:22:62:25:d0:e2:a3:ab:bd:20:be:99:
c7:00:7d:a2:b3:cb:49:79:7a:ba:45:6d:0d:0d:99:
7b:38:69:5a:fb:99:44:89:ea:8f:27:56:8e:84:b8:
af:37:70:b7:f9:67:4e:5e:87:35:bc:9d:ec:95:21:
c5:a1:1b:9f:4b:e2:ca:75:cd:f8:cc:81:dc:6e:61:
8d:5d:4d:d0:46:e1:84:17:0a:6b:20:0b:7e:5d:20:
25:2b:fe:fb:a4:eb:af:fd:2e:c7:7a:01:82:0e:ee:
87:18:e0:18:e6:b6:35:15:e3:e5:49:3d:ce:81:2f:
c5:88:83:a5:0e:fd:e0:7f:70:52:86:c7:6a:6e:e8:
f0:ec:10:b4:96:63:e8:81:37:c7:48:db:df:07:43:
b2:37:f6:8b:7b:ad:6d:1a:10:09:2c:97:f1:25:f2:
38:37:be:15:ab:1b:4b:fb:b5:90:56:ab:74:6d:cc:
a5:37:58:6d:25:95:23:3d:0c:44:20:99:88:04:b6:
65:fd:9b:62:17:3b:f6:5e:a2:e5:ed:bf:65:67:bd:
4c:18:35:85:86:ae:7a:50:67:8b:41:fc:42:1f:3d:
ef:b1:0b:82:56:a7:2d:f6:06:5f:09:2d:ba:9e:71:
eb:47:83:c2:23:07:0e:24:a1:91:40:40:ab:99:8e:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:2C:E7:68:AE:AA:BC:6B:E9:BB:6F:4A:5E:5F:60:9E:AF:98:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5uIs52iuqrxr6btvSl5fYJ6vmHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:54:b3:ed:a7:6f:3d:bd:92:ed:2a:94:45:a3:f0:c5:6f:86:
ba:03:06:b3:3d:d4:14:4f:1e:e2:04:f1:79:ad:f3:52:41:af:
bb:e2:95:30:03:4a:d1:e8:95:12:5d:23:09:9c:d9:4c:27:30:
87:85:c5:5f:ad:97:41:00:c4:11:52:1f:72:6e:fa:82:d2:c9:
bf:31:9f:1a:a4:1b:84:29:bd:8e:26:61:c7:1e:43:a7:c9:a3:
b4:35:a4:91:2e:ed:57:e5:f3:7c:f0:b6:fc:61:19:16:ad:9e:
02:b2:d6:d2:56:e5:3d:87:54:af:ed:30:9b:75:de:dd:5d:51:
ef:f2:83:17:7d:cd:d1:94:56:06:4d:a6:bf:ce:43:9e:e9:f0:
03:fc:b8:37:14:4a:da:95:f2:75:46:9e:6b:a3:41:95:cb:f4:
dc:2b:c6:aa:64:1e:7d:f4:17:60:ff:14:1c:90:b4:e4:6d:71:
04:7c:56:66:e1:31:e4:d9:74:60:32:2b:a2:9c:e5:5b:a3:04:
38:c1:34:2e:22:22:69:6f:19:73:2d:66:11:2d:f5:3d:13:10:
78:47:a1:02:c7:1b:0c:85:02:80:73:bb:58:8f:c1:8f:bc:05:
a3:cf:ce:ac:7a:e1:79:f4:4a:a3:68:13:81:cf:57:c6:21:60:
1d:5d:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:40 2025 by rpki-client