Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/719XBe1PmPY-wWFKUARSLd1z9ro.roa
File: 719XBe1PmPY-wWFKUARSLd1z9ro.roa (raw, json)
Hash identifier: tHYdr6qjR8VzrhDHjR7oKSApJzT07Bzy3eSN1DX2N4U=
Subject key identifier: EF:5F:57:05:ED:4F:98:F6:3E:C1:61:4A:50:04:52:2D:DD:73:F6:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DF282709FCFFEC722C6BFEB05AD631B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/719XBe1PmPY-wWFKUARSLd1z9ro.roa
Signing time: Wed 03 May 2023 01:09:23 +0000
ROA not before: Wed 03 May 2023 01:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:df:28:27:09:fc:ff:ec:72:2c:6b:fe:b0:5a:d6:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 01:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef5f5705ed4f98f63ec1614a5004522ddd73f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:61:f5:d8:0e:95:52:c8:37:6f:4a:47:9b:
93:31:51:be:a5:44:31:31:30:40:38:bc:13:38:87:
be:2a:c0:b0:3e:de:2b:7d:6a:70:06:d0:06:eb:65:
95:11:c3:40:f8:77:eb:8e:84:27:9f:c1:62:48:b8:
e1:d2:44:d2:dc:cf:de:20:78:6e:ed:13:d8:1d:ea:
26:19:4b:f4:84:f3:53:b0:70:bc:27:f8:ba:0b:1f:
3a:f7:bf:e4:c3:3d:3a:05:da:77:18:e2:d7:cf:52:
ef:30:5d:91:fe:d2:b6:47:c4:65:9e:00:cb:d8:9c:
a8:71:28:27:57:88:6d:0e:b3:88:24:56:6a:36:6b:
00:54:11:74:82:6e:9c:77:94:b4:cc:61:a4:34:e0:
fc:bc:e6:a5:fa:ba:ba:5f:27:9e:48:a5:99:2b:4c:
93:fc:37:c9:32:54:5a:27:84:20:9d:8f:f0:e2:b4:
7a:73:c2:3f:3d:da:91:39:1c:37:4c:d0:8d:48:be:
f8:3b:54:51:e3:5c:08:6c:0c:4c:ea:ad:87:f3:eb:
4e:4a:26:de:b1:b1:57:f6:68:41:f0:e5:77:93:f1:
d4:75:fd:67:ce:4d:42:23:ee:a8:ff:8e:31:1d:65:
3d:67:e6:5e:11:c3:30:8e:40:7f:5d:1f:01:35:78:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:57:05:ED:4F:98:F6:3E:C1:61:4A:50:04:52:2D:DD:73:F6:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/719XBe1PmPY-wWFKUARSLd1z9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:1e:29:c5:8f:3f:6b:b8:68:4b:81:1d:2f:e5:b1:87:c6:05:
e7:6c:02:b2:db:e5:da:8e:3e:9c:b0:e3:37:be:87:14:a7:0a:
27:06:25:fc:d1:40:a4:31:fb:ec:2e:c2:91:05:34:5e:5b:d5:
dc:5b:b4:ad:7a:f4:62:61:e8:c3:1b:73:49:80:44:cc:40:68:
1e:44:0c:31:be:04:c9:f9:fa:07:d6:49:e8:a4:6b:6c:1b:35:
aa:d3:52:40:f3:60:f8:e5:a7:bf:41:af:c9:c6:85:ca:f2:9e:
48:9c:6f:69:f3:5e:c2:3d:df:1c:2a:a6:b4:44:a3:42:2f:6f:
ef:43:fa:dc:b0:d9:09:3a:06:31:b8:f5:eb:47:68:aa:5c:bf:
5f:9b:1f:4d:fb:1e:3a:08:83:09:c1:d6:51:27:bf:9b:11:8a:
f8:1c:dc:5e:b7:91:a7:af:9f:59:a3:f5:07:9b:f3:a0:46:0d:
71:5d:71:9b:12:62:02:07:1e:5c:9c:71:6b:43:b7:13:b0:9e:
6c:8f:20:15:ec:01:e4:cd:04:21:28:bd:a2:84:6c:42:37:ac:
c7:1d:a2:02:14:7e:f4:ba:39:cb:e7:6b:11:12:f6:1a:c5:fe:
12:82:f0:c6:42:1f:57:7f:0c:72:26:b3:8e:71:62:70:e2:ca:
cb:6f:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:34 2025 by rpki-client