Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5UOdSptLV8psBP3e_fxaI6dDEY.roa
File: B5UOdSptLV8psBP3e_fxaI6dDEY.roa (raw, json)
Hash identifier: alIDeaNHhse1zLRZ4qV48Yg1c0gdEsRCaCHutqOnsng=
Subject key identifier: 07:95:0E:75:2A:6D:2D:5F:29:B0:13:F7:7B:F7:F1:68:8E:9D:0C:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7683CFB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5UOdSptLV8psBP3e_fxaI6dDEY.roa
Signing time: Mon 28 Mar 2022 20:11:00 +0000
ROA not before: Mon 28 Mar 2022 20:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988349873 (0x7683cfb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 20:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07950e752a6d2d5f29b013f77bf7f1688e9d0c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:2b:93:ec:b8:16:63:3f:66:98:47:5d:94:
96:32:4c:57:d5:22:bd:03:b7:c8:c0:fc:02:9d:2a:
7a:90:ec:17:0e:c8:ef:fc:c3:4c:ff:ab:1f:2f:5a:
3d:9e:fa:ec:37:21:fb:e4:a1:7d:5c:5c:4e:bb:35:
1d:1c:ff:e8:05:b8:07:87:f0:56:41:a1:85:63:37:
ad:26:a0:71:73:c7:29:a9:26:12:db:e1:44:fb:e2:
b4:55:75:65:63:b4:45:b5:bf:9c:00:6a:ce:c0:49:
8a:19:e6:de:eb:cb:c7:bc:13:b1:86:86:c9:90:0c:
a9:6c:b2:73:75:5f:2e:fa:5a:07:7f:45:02:33:66:
29:d5:0e:ac:1f:6e:b2:6c:a0:d7:c9:71:0f:1f:c3:
2b:07:90:c4:3c:65:f4:cb:65:ee:42:d3:25:a2:c0:
4f:f7:39:76:b5:80:bb:41:e1:c6:e1:e3:0a:b4:19:
73:0a:17:b2:fe:d7:3c:57:04:8a:61:6c:6e:7e:76:
a8:78:41:b9:04:1f:9b:36:8b:74:7b:53:48:80:2b:
ea:75:1f:d1:94:55:0b:34:21:c8:04:94:60:e3:b0:
93:98:6a:15:76:9b:c1:30:1a:28:06:ac:40:8f:9a:
97:a6:b3:00:c3:66:c2:68:e5:7a:be:b4:00:89:5e:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:0E:75:2A:6D:2D:5F:29:B0:13:F7:7B:F7:F1:68:8E:9D:0C:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B5UOdSptLV8psBP3e_fxaI6dDEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:c1:24:9b:f7:a4:15:a8:20:5d:5b:85:1f:34:0c:31:b0:01:
bf:93:7f:a4:6f:76:dc:83:fd:14:2c:56:a7:b0:99:fa:af:d5:
27:d5:12:bc:c4:b3:0b:ad:92:12:c3:c5:dd:36:12:06:0f:ec:
a5:b1:8e:44:8c:c6:29:3a:3f:59:ef:41:73:2b:82:ba:87:b0:
03:c1:43:7b:84:53:c9:cf:5c:8b:5f:d0:6b:cd:ec:3f:b9:0c:
3b:c0:ef:80:4e:ee:5a:8b:fa:e5:e7:7a:e6:b1:f9:20:b2:7d:
f5:2f:59:c3:2f:0b:9a:a4:2e:2b:b1:71:8e:70:29:f2:8f:b3:
80:c2:0e:d0:99:34:ab:d9:68:5b:95:2a:9c:2a:df:e7:83:50:
9c:46:d5:23:aa:2f:a5:cd:6c:b3:27:07:f0:e9:f1:46:57:9f:
49:0a:52:4b:1c:e2:10:b1:a0:0e:1a:f8:47:d1:17:2c:fb:d8:
78:2b:d0:85:b5:9e:23:04:bb:e8:59:fb:c2:64:36:fa:b6:37:
d9:50:1c:c3:e8:04:42:13:42:65:8d:b6:c8:ab:14:f6:96:ae:
31:6d:da:77:b0:e1:29:30:ed:6c:9b:96:f4:29:a3:ad:2a:dc:
12:1b:dc:5e:02:78:da:13:1b:c9:bb:48:ad:7f:8d:aa:1d:3c:
d9:cd:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:41 2025 by rpki-client