Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X5HjMykp4t_ZSdAZc9EdgciLfkA.roa
File: X5HjMykp4t_ZSdAZc9EdgciLfkA.roa (raw, json)
Hash identifier: jhHbMPRqGjlk2JCnNKOH1qcbjnUpJcRDNPovQpyjDMw=
Subject key identifier: 5F:91:E3:33:29:29:E2:DF:D9:49:D0:19:73:D1:1D:81:C8:8B:7E:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C833DB0D8846E1AFAEEC2CDE0C7165CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X5HjMykp4t_ZSdAZc9EdgciLfkA.roa
Signing time: Thu 19 Jan 2023 04:05:19 +0000
ROA not before: Thu 19 Jan 2023 04:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:c833:86a6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:33:db:0d:88:46:e1:af:ae:ec:2c:de:0c:71:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 04:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f91e3332929e2dfd949d01973d11d81c88b7e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:bd:22:08:d1:68:06:e2:88:8c:58:c5:d2:
a1:55:a3:aa:60:e5:39:ff:6f:86:bc:28:44:94:c1:
88:31:7e:ac:15:8c:b2:f0:05:e5:3a:46:e8:60:fb:
4f:25:3a:a6:c9:8d:34:b2:18:24:c2:78:60:9c:94:
ea:8d:6c:53:82:14:2d:a6:94:ec:9b:9e:52:74:47:
62:71:d6:f3:9f:71:a7:07:b5:87:a4:18:7b:a0:58:
f6:3d:19:09:d3:b4:f6:fd:2e:9b:11:a7:16:2b:25:
44:43:d3:70:05:b4:1f:5f:66:7b:82:b3:64:7d:d8:
ee:13:32:65:41:17:c5:83:6f:ae:72:44:58:38:04:
02:0c:d9:90:0b:2d:6c:60:a9:29:7f:3a:05:ec:9b:
12:62:5b:b8:b4:6f:32:bf:ea:68:1e:d7:79:76:78:
0a:9b:a4:a6:3f:19:e0:98:3c:17:00:25:89:a6:6d:
fe:86:c4:82:97:51:4b:84:17:2b:ab:fc:8f:23:a0:
54:aa:d3:9a:ea:62:99:36:53:53:e2:e8:72:d7:f9:
54:8c:7d:91:8d:6c:19:3e:d9:95:f6:db:66:21:24:
ce:20:aa:61:70:f8:ad:dc:6d:37:37:d6:00:6d:18:
4a:2a:51:29:7f:57:ad:37:07:85:d9:63:80:ea:50:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:E3:33:29:29:E2:DF:D9:49:D0:19:73:D1:1D:81:C8:8B:7E:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X5HjMykp4t_ZSdAZc9EdgciLfkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:7c:d5:79:b4:a8:6b:70:b9:a6:cc:72:09:93:50:ec:14:fd:
d6:36:77:c6:96:f4:d0:1e:1f:63:f0:a4:93:ee:ae:06:2f:3c:
dd:4b:39:f6:b3:64:fc:ff:15:9f:d4:55:81:5f:0e:4b:6f:54:
bc:b0:9d:25:b2:fd:b3:5d:19:74:aa:db:81:e8:bf:b3:c3:0f:
60:ed:ab:80:ac:8f:ca:9f:5b:10:71:16:67:71:be:4d:ca:d7:
13:12:9c:36:d4:19:5b:b1:af:ff:2e:9d:37:29:37:11:77:42:
60:56:c9:43:d4:fe:e9:c7:2e:9a:ea:97:1e:19:4b:9d:75:81:
24:05:e8:19:d3:a2:2d:53:1a:6d:e7:82:0b:79:0e:66:b8:87:
60:29:7d:e6:3f:ee:f4:65:78:6e:1a:b5:2c:c7:b3:8c:4e:7f:
98:12:c9:f7:54:dd:b3:14:2a:8f:ca:5c:74:84:dc:42:5c:be:
5e:6f:10:bc:c5:70:b6:61:c4:f9:33:a1:c1:06:68:dd:d0:e5:
0a:7a:20:8b:5d:e4:95:d4:fd:48:22:15:c9:c5:76:fb:55:bb:
16:ab:b4:53:82:b0:4a:26:9a:32:e3:51:4e:36:5b:1c:7d:e3:
b9:ee:f3:9e:2a:59:56:ee:2f:6c:69:63:43:ff:7b:b5:2f:37:
c6:2d:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:49 2025 by rpki-client