Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1XU3o9vrE5AD21QVWSU5lhpSMI.roa
File: X1XU3o9vrE5AD21QVWSU5lhpSMI.roa (raw, json)
Hash identifier: XjBTTQkNtiA23HI2J/YVkBivV8oQs6YMv0CoHUfaKcQ=
Subject key identifier: 5F:55:D4:DE:8F:6F:AC:4E:40:0F:6D:50:55:64:94:E6:58:69:48:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89B164D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1XU3o9vrE5AD21QVWSU5lhpSMI.roa
Signing time: Fri 03 Jun 2022 22:10:20 +0000
ROA not before: Fri 03 Jun 2022 22:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310104272 (0x89b164d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 22:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f55d4de8f6fac4e400f6d50556494e6586948c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:7d:28:81:cb:5a:ed:ac:70:58:74:66:68:
d8:dd:78:5f:83:bf:d3:c4:4d:56:7e:f2:d7:9c:a4:
39:2e:0a:4b:60:40:72:58:87:cd:73:d8:48:03:3f:
ed:5a:26:0b:38:87:c7:6a:19:b5:38:7c:53:8d:24:
5e:eb:24:1e:9b:72:b6:ab:35:01:10:fc:ff:7c:cc:
2d:c8:29:34:ca:0c:4a:7d:1b:72:bd:31:78:f7:8f:
7b:7f:65:7d:fb:e2:44:17:f7:cc:02:25:c7:10:36:
d7:a1:0a:87:de:dd:8b:ae:9b:ef:2e:6b:39:78:22:
be:d8:21:1f:e6:2a:4f:a6:08:f2:c5:b4:a3:65:a1:
fd:4a:c3:62:5d:21:eb:62:24:08:b7:fa:33:9c:9b:
d0:fe:46:c6:07:98:82:4d:0b:bd:3a:81:92:c1:95:
d9:73:b8:52:38:80:de:e9:6b:06:96:20:3d:9d:85:
70:c0:8a:34:1f:de:51:68:66:23:e0:77:24:5b:50:
24:18:da:f1:7e:a4:db:1a:56:18:03:b5:de:2d:ee:
b3:35:43:b9:ec:49:37:aa:c0:1b:d9:96:cd:b3:a0:
ce:b0:f5:42:3e:4d:5b:a9:8b:f7:a2:f2:7e:f4:27:
a9:34:9c:84:ac:0a:c2:b8:52:b8:03:4e:93:a0:fa:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:55:D4:DE:8F:6F:AC:4E:40:0F:6D:50:55:64:94:E6:58:69:48:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1XU3o9vrE5AD21QVWSU5lhpSMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:39:24:13:71:94:a3:80:67:95:d0:f4:1b:76:0d:61:a4:ea:
8c:79:cf:80:b3:8b:9e:17:58:9b:3b:37:f9:db:43:63:b1:9f:
2e:0d:f7:f8:90:42:40:39:59:29:76:19:87:14:28:18:6b:da:
63:f5:61:58:65:d1:c1:e0:95:ca:90:7e:d6:0e:5f:4e:f0:45:
84:be:9c:c4:1b:5f:1d:dc:08:f0:33:ea:cf:3c:3a:b9:bc:bf:
7c:fb:7d:63:65:80:43:72:3a:c3:3e:fe:61:09:6c:28:a7:20:
42:84:8b:42:ac:3a:a6:ca:1e:05:d4:7d:b0:60:f9:77:e6:b3:
58:82:4c:72:b4:0d:66:12:93:d6:b6:3b:66:b8:74:79:38:f2:
f3:9b:6e:79:a2:fa:e8:c7:83:12:a4:2b:17:dd:cb:62:e0:1d:
27:9c:90:db:bb:0b:21:68:f3:9f:3f:7c:6c:19:ca:ac:03:e5:
de:66:20:d4:3c:44:aa:46:4c:8d:42:cc:fe:b3:a9:bb:20:01:
61:59:8a:40:ce:d6:ae:99:a6:38:58:2a:bd:fa:fe:48:78:83:
76:8c:5b:61:c2:00:d6:6d:bf:d1:ac:9c:d0:ce:f2:22:73:f3:
40:61:34:14:fd:79:ec:ee:5c:fc:c3:01:06:87:f6:07:ae:87:
6f:19:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:16:29 2025 by rpki-client