Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EX5Ym1yCPj37l37ub2O3G-ImmbE.roa
File: EX5Ym1yCPj37l37ub2O3G-ImmbE.roa (raw, json)
Hash identifier: 5R+X36Ic6meyPboQFRgmA+m1pW0pGaVlMjH+Ug0lb7Q=
Subject key identifier: 11:7E:58:9B:5C:82:3E:3D:FB:97:7E:EE:6F:63:B7:1B:E2:26:99:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D74A083ACD96C9A2E1AD2CB132372BC1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EX5Ym1yCPj37l37ub2O3G-ImmbE.roa
Signing time: Thu 25 Aug 2022 23:15:29 +0000
ROA not before: Thu 25 Aug 2022 23:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d7:4a:08:3a:cd:96:c9:a2:e1:ad:2c:b1:32:37:2b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 23:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=117e589b5c823e3dfb977eee6f63b71be22699b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:45:17:d7:1e:86:e4:fb:48:34:21:3b:01:
9b:a1:62:1e:da:a4:a1:d2:1d:be:b6:ce:ec:e2:48:
53:c2:00:05:6e:96:b8:18:bd:e2:88:08:fd:2e:1e:
53:31:50:23:a0:11:08:cb:54:f5:43:d9:19:e0:b0:
78:e2:18:22:9b:15:66:de:c6:23:c4:8a:1a:21:46:
63:15:5d:64:28:fa:96:e7:24:d9:7f:e0:fe:1a:04:
a1:ed:1c:51:66:c5:f3:61:ae:1a:86:bf:95:95:eb:
ae:54:a7:4e:1e:ba:96:c6:b8:be:c4:7a:c1:0c:86:
a5:9d:40:61:11:89:08:14:3e:60:df:3d:3d:47:7e:
9a:69:57:b9:9b:b0:e1:45:c8:b4:ff:a3:c8:77:e4:
e8:7b:2b:f0:be:a7:4e:3f:93:23:f1:91:09:67:de:
d3:2d:12:a6:00:2a:4e:ae:d9:0c:73:45:e9:55:49:
5f:be:1f:a9:77:e3:1e:9d:9f:58:3e:16:6c:e5:22:
25:e7:fa:96:20:18:90:cc:3f:3c:5f:56:df:b2:7b:
20:32:8e:15:ea:7b:97:79:b7:32:5a:37:7c:91:19:
fb:89:ec:c8:1d:13:d9:60:1a:15:6f:09:ea:6e:4b:
63:e0:04:02:a8:2c:0c:a3:d3:56:06:20:dc:38:6c:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7E:58:9B:5C:82:3E:3D:FB:97:7E:EE:6F:63:B7:1B:E2:26:99:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EX5Ym1yCPj37l37ub2O3G-ImmbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c9:c2:8f:31:fc:e8:58:15:d7:af:ef:22:d2:17:fc:26:b5:
e9:04:49:2c:16:99:15:0d:48:79:4a:9c:49:bc:d1:71:93:6a:
2b:2a:62:6a:df:8d:47:1f:8d:80:05:fb:93:90:41:f6:9c:5c:
5e:e1:df:0c:9a:f6:17:dd:ac:17:6c:35:34:49:fa:a9:51:7c:
87:fb:de:1a:ba:78:40:15:a9:49:22:7a:60:56:a6:b6:13:56:
55:bd:25:c6:4c:75:cf:93:47:42:80:23:73:89:75:24:dc:c9:
63:24:1f:62:f9:bf:2b:46:93:c4:99:67:d3:bc:48:f9:d7:4d:
58:3d:8e:b6:b6:60:cf:b9:62:2d:5f:7a:5b:bb:0a:77:19:db:
98:92:38:1f:73:7b:50:b0:0a:55:cf:8d:2c:32:88:3b:3b:81:
13:52:7f:56:76:ca:eb:32:6f:69:6f:3d:45:d6:0b:60:65:c7:
cb:f3:c1:4a:72:10:9f:d9:8b:72:e9:06:55:66:6b:03:78:8e:
7d:c7:b4:3a:3f:10:b5:0e:ea:fc:4c:e0:47:ad:fb:e0:3f:29:
f5:18:c4:86:fa:45:71:3a:ea:12:ac:c9:f8:c5:da:0e:87:95:
2e:f0:f6:61:4f:eb:bb:f1:0d:b5:d7:61:ce:11:a4:dd:87:7f:
2a:e8:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:43 2025 by rpki-client