Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P5m88mRDEl8v5JHbpZTrLo7fsvk.roa
File: P5m88mRDEl8v5JHbpZTrLo7fsvk.roa (raw, json)
Hash identifier: DkPmNtWjpzuPAB/l8WLvjKymq9PXFYw6zpOJu3jyTqI=
Subject key identifier: 3F:99:BC:F2:64:43:12:5F:2F:E4:91:DB:A5:94:EB:2E:8E:DF:B2:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864B1CE9F31074B3D148810353E73CF97A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P5m88mRDEl8v5JHbpZTrLo7fsvk.roa
Signing time: Mon 13 Feb 2023 14:10:31 +0000
ROA not before: Mon 13 Feb 2023 14:10:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:1c:e9:f3:10:74:b3:d1:48:81:03:53:e7:3c:f9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 14:10:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f99bcf26443125f2fe491dba594eb2e8edfb2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:62:19:6f:7a:d5:8e:2b:9c:34:32:9a:54:
5c:e3:66:b9:49:c6:5a:1b:6d:ab:13:03:85:61:5c:
39:95:f5:6f:5b:be:5b:6c:b2:95:e3:59:78:77:c7:
9d:31:b0:19:64:b9:94:52:d0:5b:83:1b:38:b1:d9:
6b:d7:f2:78:5e:7b:41:bf:bd:38:07:45:dc:86:e8:
09:17:51:60:79:54:f3:57:cb:e3:23:54:ab:8a:6c:
3b:20:da:44:1b:69:4b:de:c7:85:aa:99:7c:b3:d9:
bf:91:1f:e1:37:97:3e:ee:cb:b5:9c:f4:c4:d9:e2:
91:4b:b3:9c:74:c5:ff:a8:8c:3e:1e:6c:c0:97:2e:
9c:f2:2c:d3:50:b0:62:aa:be:3d:f1:36:c2:c4:20:
73:f1:c9:97:b5:59:bf:77:af:2c:89:37:10:92:1e:
99:f0:53:37:1e:99:80:cd:98:dc:c9:17:c1:76:22:
c2:20:6e:d7:de:d1:0a:3e:27:49:91:d1:71:03:8a:
11:d9:86:41:be:c9:ef:08:72:a5:02:39:1f:5f:49:
8d:67:52:85:1d:e3:bc:4b:df:64:29:bf:d6:06:2c:
4d:48:25:58:85:e3:7c:8f:3e:e3:b4:2e:64:46:41:
67:67:f2:c3:64:c9:0e:61:d0:4d:1a:14:bc:0c:66:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:BC:F2:64:43:12:5F:2F:E4:91:DB:A5:94:EB:2E:8E:DF:B2:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P5m88mRDEl8v5JHbpZTrLo7fsvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:2b:97:be:ee:29:2c:57:b2:3a:a6:34:ce:c7:cd:a7:5c:22:
f0:db:6d:22:77:e3:89:92:77:64:12:07:ff:b2:59:42:7a:ae:
d6:d7:1f:fd:f3:37:c9:52:11:11:18:3d:44:71:cb:69:30:1d:
39:65:b7:7f:49:8b:95:d0:30:22:1f:56:5a:3c:bd:69:a0:50:
8f:08:2a:8e:a7:d6:b9:f6:4f:76:8f:dc:af:9b:57:0f:85:7f:
7e:a1:5e:ee:9b:cf:2e:9f:25:53:a0:ab:41:7a:ee:95:a7:f4:
ab:1e:7b:41:11:eb:79:22:40:6b:0e:fc:4b:51:46:d8:09:82:
26:e5:e4:04:86:17:97:9c:40:7d:5a:13:dd:f2:43:2f:da:81:
3b:f4:8f:f3:91:0c:6f:7d:d4:d1:b8:a5:a3:7b:9d:03:30:72:
36:bd:65:89:cf:07:04:d7:ab:2d:49:d4:3a:bb:55:aa:33:61:
8a:20:b3:3d:9f:e3:51:a7:88:a7:04:7e:b5:4a:1d:31:61:a8:
4d:d4:0b:3a:ce:68:c8:ec:54:09:71:78:d6:eb:67:17:e3:2b:
70:61:ae:b9:05:59:ea:a5:82:c0:9e:01:15:81:1b:c5:77:0a:
b4:35:6b:60:ef:58:4a:1f:d8:d8:18:3b:c3:40:b0:26:f4:82:
ed:d1:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:34:19 2025 by rpki-client