Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s5OHx5H_Tch1iiZSjdDZktVvpS4.roa
File: s5OHx5H_Tch1iiZSjdDZktVvpS4.roa (raw, json)
Hash identifier: Mdhc/po0v2WGAXEZT+4nlDFQqqK1QZRmiN8VPt93VhM=
Subject key identifier: B3:93:87:C7:91:FF:4D:C8:75:8A:26:52:8D:D0:D9:92:D5:6F:A5:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879B5A0C2C3E9CA02314624B5A253873F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s5OHx5H_Tch1iiZSjdDZktVvpS4.roa
Signing time: Wed 19 Apr 2023 21:09:42 +0000
ROA not before: Wed 19 Apr 2023 21:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9b:5a:0c:2c:3e:9c:a0:23:14:62:4b:5a:25:38:73:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 21:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b39387c791ff4dc8758a26528dd0d992d56fa52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:5b:cc:0e:cb:00:3e:c9:3f:2d:74:6b:f0:
6e:db:c0:f5:45:d7:3c:97:60:13:42:28:2d:8a:61:
b0:f6:4b:33:c2:14:6a:3f:25:fb:79:83:48:65:a0:
64:ed:d3:dc:ec:e3:57:26:61:ec:63:81:1e:ba:a6:
30:e7:40:4b:5a:d6:c2:91:de:3e:50:e8:a8:c9:18:
8c:3c:9e:ed:ce:18:ab:69:5b:44:91:7e:cc:48:05:
b1:6f:68:f5:f9:38:7a:d1:48:29:96:3b:25:59:9b:
7c:b1:8e:b7:91:5a:d6:3c:e4:32:bf:43:ed:66:a0:
99:ed:04:0a:f3:d9:f0:77:34:13:47:e5:a1:65:0b:
10:6e:83:54:8c:ce:aa:c8:f7:50:51:aa:67:e6:09:
cb:63:c3:1e:87:f4:0a:90:68:ba:46:0e:ae:ea:ac:
a7:47:89:4e:f8:d3:a8:93:97:b7:21:c8:29:e6:1f:
ce:2c:e4:dc:df:1c:b3:4a:b9:20:b4:b2:4f:03:98:
81:93:04:77:a1:c6:46:23:88:d5:cf:79:ff:1d:91:
b5:db:66:ea:a3:f3:80:02:0c:ac:c1:a2:88:ab:86:
ab:e5:59:aa:90:f9:ab:33:3d:58:14:62:f6:c2:e3:
e7:4e:47:4f:20:f8:34:f9:f9:22:63:78:ee:60:85:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:87:C7:91:FF:4D:C8:75:8A:26:52:8D:D0:D9:92:D5:6F:A5:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s5OHx5H_Tch1iiZSjdDZktVvpS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:94:37:b1:e0:42:28:2a:ed:a4:00:46:7b:c1:77:8d:b8:4f:
70:be:2b:53:8b:96:69:a5:d8:93:23:66:2e:69:f8:58:8b:ce:
03:1e:9e:18:40:02:e0:b9:ce:7a:0d:01:4c:a4:00:e9:5e:4a:
d9:83:b9:1e:69:b8:25:95:8c:62:78:0a:50:e8:2c:a2:a9:df:
16:11:0d:c0:d3:25:18:bb:22:ab:dd:d2:33:69:7f:ad:ad:8a:
e8:93:65:21:f9:7b:65:61:53:ef:c1:92:fd:f0:ed:b0:dc:75:
f8:2a:83:a1:02:36:c2:92:4a:a1:71:20:2e:06:6f:bb:39:e8:
e1:11:7a:fe:f6:90:08:4f:e4:c4:2c:ec:33:5f:c7:12:63:75:
84:41:97:4a:90:11:6c:31:a3:42:3c:ad:a8:2c:cc:12:aa:21:
9c:63:6a:30:9e:76:f1:0d:fa:e8:3e:f4:de:4f:c8:37:c9:5d:
b4:f9:0b:28:db:32:84:63:32:f9:10:7e:02:0f:02:f1:20:0d:
4c:79:fb:f3:24:64:fa:cf:1b:d9:d4:64:8e:9e:73:00:d4:58:
d2:ee:29:b3:b2:ae:2d:25:5a:9f:a5:95:7b:37:0f:05:c6:42:
e0:17:0e:3b:69:1e:03:01:f5:6c:93:29:a6:9d:08:8b:d5:a0:
1d:3f:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:14:53 2025 by rpki-client