Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5E2e6BiDzaZzr_9B4HUimPGBsY.roa
File: B5E2e6BiDzaZzr_9B4HUimPGBsY.roa (raw, json)
Hash identifier: xjgYjZtTk8vMoO2xhXjTYWHRdUuCcslHc+eKGeAZ6KY=
Subject key identifier: 07:91:36:7B:A0:62:0F:36:99:CE:BF:FD:07:81:D4:8A:63:C6:06:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018547AFCBA7603AE73CB09C2C0AFEBD109D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5E2e6BiDzaZzr_9B4HUimPGBsY.roa
Signing time: Sun 25 Dec 2022 05:09:41 +0000
ROA not before: Sun 25 Dec 2022 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:47:af:cb:a7:60:3a:e7:3c:b0:9c:2c:0a:fe:bd:10:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 05:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0791367ba0620f3699cebffd0781d48a63c606c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:1b:a9:6e:2f:05:2c:1f:69:51:25:89:03:
4a:c5:7f:1e:06:bf:f1:fb:6c:f2:b1:b2:d8:a5:68:
55:60:4f:d7:b5:23:5f:89:f1:bd:fd:5a:f9:d8:29:
b1:bf:ca:24:db:37:36:97:99:44:5d:e8:f6:4a:ac:
d7:60:15:83:f1:ba:23:91:60:17:d7:65:22:fc:32:
c8:7a:f6:1f:9d:41:8d:d7:61:28:2d:fd:e3:de:c5:
63:c8:11:b0:56:54:de:b6:62:3c:c5:69:b7:b0:35:
e9:cc:11:85:fe:f7:eb:da:27:75:9d:a8:4e:74:53:
d5:ad:b4:34:ff:9f:f8:5c:c7:f6:36:6a:f6:cd:ec:
30:87:ee:ec:9f:f4:18:c6:b8:73:75:38:dd:8c:55:
fc:81:a8:63:ad:33:6b:f6:07:9d:e9:2b:cf:43:81:
04:2a:9b:b5:5a:af:f1:35:e1:f8:58:a7:39:88:f0:
8f:ed:fd:37:32:d1:39:31:ea:48:d5:06:88:17:62:
cc:97:42:02:5e:89:4e:66:b1:d9:2c:43:a0:9e:30:
c1:4f:01:32:b0:62:ae:e6:2c:06:eb:61:c6:e9:74:
7b:bf:c5:e2:c9:ac:93:6a:6a:91:e0:2c:53:71:e7:
ff:09:88:96:0f:b1:f3:8e:58:97:e5:f0:29:23:8e:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:36:7B:A0:62:0F:36:99:CE:BF:FD:07:81:D4:8A:63:C6:06:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5E2e6BiDzaZzr_9B4HUimPGBsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:0f:cd:d2:5f:0e:95:0f:c4:66:df:5c:bc:5a:4f:2b:e0:cc:
8b:cc:66:8f:58:a2:78:28:09:2f:56:30:97:4f:55:12:26:b0:
7b:77:65:bb:75:be:3d:0d:c5:e4:00:a3:42:70:99:03:10:3e:
49:1c:77:c7:5d:1a:12:be:5c:9f:52:b5:36:cb:35:09:b5:75:
82:ec:61:7b:7a:db:25:16:03:88:3c:1c:05:be:58:21:e4:88:
ce:1b:bd:e4:91:49:f2:16:15:21:a1:f9:fd:7e:01:b8:63:28:
46:a3:87:91:db:b1:2f:87:cc:14:45:70:7b:82:26:74:ee:39:
7f:f1:dc:01:55:1a:ad:f3:48:f4:d2:6a:64:4b:9e:89:27:71:
59:cb:fe:96:3d:4d:56:79:10:b6:86:9a:f9:92:7e:d0:ca:e6:
bc:5e:ed:a6:7f:45:2e:28:da:2f:0a:0b:a3:20:31:d7:8a:64:
f3:6a:c9:3f:80:2f:d3:98:41:0b:75:52:ee:e4:4d:0b:35:15:
6a:68:f1:f0:98:2c:e5:fc:ce:79:53:f6:2d:7a:00:58:7e:d6:
c3:8a:92:f4:a6:52:82:e2:43:89:83:93:83:06:27:17:71:db:
8b:5b:68:a4:e4:26:c6:13:7d:52:d7:e9:38:bd:aa:6c:5f:21:
59:b5:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:26:50 2025 by rpki-client