Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_5BGq_fcSQgecqeGaKDrBmUQwU0.roa
File: _5BGq_fcSQgecqeGaKDrBmUQwU0.roa (raw, json)
Hash identifier: l2bzFl5MaouIqgJqAPiQYPxWk1KD9ilpgIWY74+M5h4=
Subject key identifier: FF:90:46:AB:F7:DC:49:08:1E:72:A7:86:68:A0:EB:06:65:10:C1:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018484027C4304B0B44E1B1D5CB4ACEC3806
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_5BGq_fcSQgecqeGaKDrBmUQwU0.roa
Signing time: Thu 17 Nov 2022 05:14:26 +0000
ROA not before: Thu 17 Nov 2022 05:14:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:02:7c:43:04:b0:b4:4e:1b:1d:5c:b4:ac:ec:38:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 17 05:14:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff9046abf7dc49081e72a78668a0eb066510c14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:05:6a:11:01:cb:d3:4c:9f:ae:ef:b8:17:
07:6b:b6:5a:ee:38:b4:9a:19:da:44:2c:ad:ad:9c:
a6:e4:da:08:1b:f8:9b:b6:33:e0:e5:de:05:ce:31:
60:15:33:8e:44:e6:04:2e:c4:bd:97:d2:c1:75:de:
c6:51:f2:59:98:20:64:4e:d8:bd:68:5e:ea:f8:6b:
9c:5a:25:b4:4f:34:c3:84:32:ad:7e:74:b0:51:da:
b2:10:9a:91:09:38:d7:94:cf:3e:1b:f2:23:47:99:
0a:39:af:71:97:a5:ed:38:7f:1b:c9:7a:85:05:4b:
2d:d8:65:c2:ea:a6:55:e1:4e:10:ce:d4:6c:c3:bc:
35:47:73:e1:d7:7f:a4:d2:e5:7a:cd:42:10:3c:cd:
e2:2c:66:9a:7a:a6:f7:fc:c1:ea:c6:00:52:b8:3f:
25:45:d9:ae:f4:1b:88:79:32:0e:3f:f9:f7:fc:76:
72:7a:c6:cf:36:ed:75:ed:ad:90:25:4d:25:a2:46:
be:c0:57:2f:57:98:cd:a0:eb:cc:28:15:f5:67:c0:
b4:34:15:3f:ca:fb:99:8c:19:29:23:17:e3:50:07:
bb:2b:62:99:0a:b9:a1:4e:67:f1:f3:4c:2f:b5:4f:
ba:5e:ad:0c:d7:0b:cd:83:0a:74:6a:12:7a:32:fc:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:46:AB:F7:DC:49:08:1E:72:A7:86:68:A0:EB:06:65:10:C1:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_5BGq_fcSQgecqeGaKDrBmUQwU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ea:9d:f9:e5:d5:53:50:f9:f3:db:23:2d:10:16:a0:d0:69:
e9:00:f2:c6:e7:70:9f:f0:96:8d:b2:b5:45:c8:1c:94:0a:50:
69:4b:69:f9:82:44:dc:27:46:63:f2:1c:ef:df:31:43:cc:08:
99:11:51:0a:b6:11:0a:c3:32:74:5e:f5:11:4e:3a:20:dc:47:
9f:0a:54:34:21:1f:04:57:13:52:e5:c7:38:10:be:62:5e:f9:
89:17:83:37:2d:88:5c:a0:94:99:28:7a:fd:d0:65:b9:76:c9:
c0:c4:5e:fe:d7:01:84:28:a3:c6:a4:38:83:14:a3:1e:8c:f4:
92:32:c7:e2:4d:54:64:df:c6:31:83:9d:75:2c:a4:bb:cd:cc:
35:4b:96:80:06:f7:9b:13:49:c9:e3:c5:59:ab:77:ec:35:85:
0c:4e:13:28:40:b7:57:44:a3:62:f6:21:18:e5:c8:91:ab:06:
6c:07:b0:34:bd:0f:3a:3b:85:11:46:ff:87:a8:39:50:b2:4f:
ed:7a:1a:58:8c:15:e6:b8:33:21:b4:38:e9:9d:0d:7c:e5:1b:
08:97:4c:32:e1:bb:0e:5b:93:26:3f:33:ed:e8:80:fa:17:9e:
c0:d5:18:4f:4c:a8:9c:bf:bf:72:9d:17:bc:84:15:44:9c:e9:
50:04:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:42:43 2025 by rpki-client