Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z5NQagcLD9iSS2vl1FvndygTquE.roa
File: z5NQagcLD9iSS2vl1FvndygTquE.roa (raw, json)
Hash identifier: bIElT21UbJwux7ydZ9ppVNIBMYuCvyw44EwtdvGxbH0=
Subject key identifier: CF:93:50:6A:07:0B:0F:D8:92:4B:6B:E5:D4:5B:E7:77:28:13:AA:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B632FF5400E95C1857B37BC190AE3497
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z5NQagcLD9iSS2vl1FvndygTquE.roa
Signing time: Mon 06 Mar 2023 09:14:00 +0000
ROA not before: Mon 06 Mar 2023 09:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:32:ff:54:00:e9:5c:18:57:b3:7b:c1:90:ae:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 09:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf93506a070b0fd8924b6be5d45be7772813aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:a5:94:b1:08:e1:0e:ed:c5:c8:82:1c:b7:
85:51:26:d1:c2:98:d6:e0:db:c3:e9:dc:f8:c9:fa:
8b:74:2d:78:84:d5:a4:29:67:20:e5:46:40:6e:99:
e5:2d:3d:0d:1d:5d:88:8a:f2:a6:32:47:52:2a:60:
92:98:b8:2d:88:54:ff:fb:6c:4b:d4:20:69:c2:58:
8c:83:aa:e2:d0:2d:8e:33:0e:b9:c5:96:88:59:02:
23:b3:86:37:d8:93:ac:5c:ca:73:42:68:34:9f:8a:
4d:71:ca:ee:e8:d0:55:66:90:52:a2:b8:43:4b:27:
af:57:5d:b4:be:bd:f5:8c:43:82:dd:74:fb:a5:c1:
23:b9:37:84:10:8c:28:5c:11:6d:40:cd:b4:7b:cf:
59:3a:86:4c:4f:d2:4c:65:d8:f8:25:ad:b5:56:52:
e8:12:ab:d0:7e:72:fe:3d:92:2f:6f:a4:ad:bc:a0:
4e:88:6c:4e:67:56:b2:a7:49:e1:54:c7:87:f7:4e:
a9:c4:c2:b3:1c:44:e6:14:dd:32:bc:72:17:a8:8c:
fb:19:86:98:fe:06:3f:bb:78:57:30:f3:0c:37:35:
5e:d5:d2:68:02:c3:38:e0:ef:a6:d9:d8:df:29:df:
06:cd:dc:01:40:39:5f:42:68:4b:ae:d2:4a:99:5e:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:93:50:6A:07:0B:0F:D8:92:4B:6B:E5:D4:5B:E7:77:28:13:AA:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z5NQagcLD9iSS2vl1FvndygTquE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:4d:2a:41:33:91:53:ed:e7:b4:f3:37:df:d2:78:b3:93:d8:
b9:87:4a:c2:50:66:4e:f9:94:16:1b:1f:a0:25:11:de:fb:bd:
7f:5d:fd:b9:f1:87:59:b1:7f:77:be:9c:38:06:11:12:fd:17:
1c:9a:c7:4a:0c:eb:ef:18:21:09:6d:d8:43:f3:5e:72:82:41:
35:1f:08:35:c9:8d:ad:1b:ba:43:00:b6:85:52:07:da:10:0c:
89:db:38:4a:0f:71:74:c6:6d:2e:94:85:b6:c7:cd:be:3b:02:
72:51:72:31:51:01:a4:16:9b:59:ee:57:04:e1:13:28:1c:81:
d2:9e:62:90:67:dc:53:45:b3:12:d4:a6:24:ee:e8:96:c1:d6:
14:5d:3f:74:83:6d:d1:41:da:b0:04:86:2b:5e:89:1d:38:9f:
bb:ea:4c:68:71:c6:0d:38:c6:dc:2a:e5:ac:cd:32:68:a0:6b:
3e:dd:9b:c3:22:ce:c3:b8:cb:ad:40:e1:00:ae:51:4e:a3:f5:
81:a1:26:82:0b:80:35:78:3b:5e:6f:06:dd:8e:ab:87:6c:45:
9a:1e:72:7b:2c:cf:5f:37:ec:7e:71:d7:2e:eb:b1:8b:1c:c1:
3b:60:3e:74:36:7c:11:25:06:0e:9c:e7:75:98:71:58:56:b4:
a3:40:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:24:39 2025 by rpki-client