Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5w-G5ZxSx5HR2N-_Wlyu3aVvaAY.roa
File: 5w-G5ZxSx5HR2N-_Wlyu3aVvaAY.roa (raw, json)
Hash identifier: +kBTh/UgtaV/oFbc9+0/5cX1QXuLzzKmj6FYaLUuIT0=
Subject key identifier: E7:0F:86:E5:9C:52:C7:91:D1:D8:DF:BF:5A:5C:AE:DD:A5:6F:68:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895CE6B9DE5774763C81CE78CF6BBB7C98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5w-G5ZxSx5HR2N-_Wlyu3aVvaAY.roa
Signing time: Sun 16 Jul 2023 04:12:51 +0000
ROA not before: Sun 16 Jul 2023 04:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5c:e6:b9:de:57:74:76:3c:81:ce:78:cf:6b:bb:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 04:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e70f86e59c52c791d1d8dfbf5a5caedda56f6806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:6c:63:ad:f4:12:b9:6c:d8:8a:3c:96:2f:
3d:e8:68:69:07:36:13:35:f4:7b:f8:77:86:d6:79:
ea:99:9c:19:19:ff:9e:e3:7b:95:3e:f2:9a:49:df:
34:9e:c8:5e:dc:3b:ab:45:25:48:90:b0:d5:9d:19:
0f:ba:55:e8:a5:7e:25:74:5b:78:c9:e9:ca:ff:f3:
81:82:59:95:88:85:72:0b:df:c4:2e:be:f5:3d:07:
6b:ba:5b:f7:6f:fc:7e:bc:0a:52:94:22:fc:ee:ae:
45:13:f9:bf:f3:90:b3:5a:b7:6e:c1:74:75:d8:f7:
bc:4b:00:12:8f:1f:40:6c:b1:8e:21:4c:25:ad:e6:
ec:7c:6a:f1:33:57:b5:0c:11:b4:9b:1b:c1:9b:e8:
c2:f3:c4:6b:eb:b2:43:a0:cc:03:43:5f:e6:8d:1e:
d1:fd:1f:13:69:83:eb:94:ba:35:33:5c:2c:2a:77:
fa:f5:f4:d9:1c:d8:25:9b:ef:23:e5:d5:fd:b1:24:
53:37:de:46:7e:e5:4e:b4:24:cd:e1:5d:a0:5e:46:
d4:d2:c6:77:7f:79:36:4c:38:d5:8e:b5:ba:28:0e:
04:bf:15:31:22:5f:fb:52:ec:38:3a:42:c5:6e:9d:
b9:ae:a8:73:c0:89:24:9c:de:97:ca:ae:99:4e:ed:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:86:E5:9C:52:C7:91:D1:D8:DF:BF:5A:5C:AE:DD:A5:6F:68:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5w-G5ZxSx5HR2N-_Wlyu3aVvaAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:cb:f5:f2:6c:f6:79:da:06:45:67:1e:b4:c9:b2:d5:19:84:
f0:70:cc:03:a9:f5:47:83:a4:9b:46:5a:69:da:62:82:b7:33:
29:6f:a7:04:8a:6a:26:be:14:28:c2:70:14:4f:97:d0:56:5c:
76:7f:27:ba:76:0f:16:9c:80:0d:a9:c2:3d:f8:d3:e8:58:79:
f4:7d:1a:e3:85:fe:50:c5:92:4c:ce:02:5c:c5:b6:47:8e:e5:
68:0a:5a:6c:d0:ff:80:80:12:23:24:2c:1b:43:bd:98:b0:2e:
58:e2:f3:77:2c:72:47:b9:8d:b2:d0:a8:bf:86:27:47:e7:85:
83:d6:d1:3a:59:99:f6:18:18:7b:4b:c8:25:79:e5:1e:97:04:
d6:66:dd:f5:50:4d:b5:c9:5e:64:c6:3e:c5:9b:0a:15:78:38:
e3:3f:03:01:9b:e0:e3:b1:7f:73:e4:09:73:38:c2:04:ee:67:
d5:4a:e6:4d:f6:9e:9a:90:33:a5:0d:40:7a:7e:bb:99:15:d2:
e8:2a:1f:cd:25:46:9b:a7:2b:b1:e8:ea:bf:53:5e:75:4a:42:
ba:7c:e2:dc:18:75:12:3c:a1:c3:fa:bd:d8:40:94:f0:50:67:
46:3b:37:67:dc:33:3d:b0:3e:8e:0e:eb:93:b2:b8:73:ec:a8:
99:e5:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:08:38 2025 by rpki-client