Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EM5eUuf0xutKYLO7V-ns1O9unT4.roa
File: EM5eUuf0xutKYLO7V-ns1O9unT4.roa (raw, json)
Hash identifier: yY9LPKtx61UqKmmNLmLWdTS5V9rb1GghiYUpwGX1mNI=
Subject key identifier: 10:CE:5E:52:E7:F4:C6:EB:4A:60:B3:BB:57:E9:EC:D4:EF:6E:9D:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884C2EF152F78B7393F66FE935F75C911A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EM5eUuf0xutKYLO7V-ns1O9unT4.roa
Signing time: Wed 24 May 2023 05:15:24 +0000
ROA not before: Wed 24 May 2023 05:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:2e:f1:52:f7:8b:73:93:f6:6f:e9:35:f7:5c:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 05:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ce5e52e7f4c6eb4a60b3bb57e9ecd4ef6e9d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:08:6c:a9:ae:ba:6a:56:23:93:d0:cb:a2:
5b:27:86:b6:7e:7a:42:2f:e1:e1:47:48:7d:fc:1f:
eb:38:ed:70:7d:fc:43:ea:ca:41:b1:32:fd:cd:69:
b8:bc:d2:17:d5:94:b5:1b:f4:bb:3c:fa:e0:12:31:
f7:27:4f:8b:05:40:33:0e:1e:3c:6d:d2:8d:60:0b:
ed:fb:39:08:11:15:f1:f8:86:fe:8e:63:cb:ad:49:
84:32:f3:a2:26:bf:5c:fe:06:8c:1a:5b:64:2e:90:
fe:9c:92:8c:09:dd:24:b0:ab:41:71:aa:9b:51:3d:
b5:96:b2:cc:a7:5d:e8:99:cf:1a:3b:07:e5:dd:4e:
0c:21:00:46:d8:89:55:01:3e:66:22:b4:29:3e:4b:
cc:15:e5:ef:c5:5b:b4:40:9f:e8:8d:f3:45:3f:e0:
6e:33:44:a0:3c:6d:65:4e:d1:24:bb:c2:27:2a:dd:
8d:5a:76:0e:a9:b1:f7:d4:6f:5e:c5:9a:84:e0:b7:
ea:ca:0d:66:d0:90:66:1c:03:73:55:6f:62:4b:e9:
30:95:b3:83:2b:08:c0:c6:bf:69:75:4b:e1:41:6a:
af:bc:99:2c:c0:6f:d8:51:a7:da:36:b2:41:02:ba:
af:cb:fa:a3:2c:9e:b6:e7:5c:9f:58:62:a4:c8:bf:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:5E:52:E7:F4:C6:EB:4A:60:B3:BB:57:E9:EC:D4:EF:6E:9D:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EM5eUuf0xutKYLO7V-ns1O9unT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:a8:12:30:f4:04:89:3a:cb:46:8e:62:5a:59:45:26:ef:cd:
dd:6d:eb:25:ff:59:fb:f0:a9:a1:4c:83:67:04:9a:bc:bf:0a:
50:dc:74:e1:d1:2c:c6:fb:b2:49:00:ae:ae:9a:67:19:76:27:
72:e3:93:dd:bb:9f:bc:00:a9:5f:26:6a:ff:f7:a1:7f:0c:de:
cb:5d:06:fb:3f:53:6a:83:93:74:6c:ff:57:d4:89:ba:d8:4e:
d8:a4:3e:10:31:12:b6:79:bf:95:34:bf:49:5f:3a:8d:5a:42:
24:9e:c5:fd:35:5b:1a:65:de:d9:e7:b1:b2:ae:2f:e8:a6:6a:
17:f7:8b:1d:48:63:f9:98:29:20:06:8e:32:a4:5f:e2:36:b9:
30:46:a8:b5:59:2e:73:fa:40:1a:83:75:b2:81:7c:40:95:15:
d4:15:ff:14:7e:44:81:a5:57:bb:23:c0:18:d3:6f:2c:92:b9:
75:e0:34:15:95:ce:0f:b0:19:64:f5:72:a8:d0:b8:63:76:18:
bd:26:7d:47:f7:ee:0c:1d:a7:d8:50:8f:ca:41:a2:c3:9c:fe:
24:32:51:ed:d3:e7:e6:86:1b:ad:02:d1:97:d9:e7:e5:e0:ee:
50:32:2d:e1:40:ef:cf:ab:ed:23:04:f7:bc:7b:04:7c:66:c5:
9d:93:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:25 2025 by rpki-client