Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X2tKS2Wa2NdBYBDoCrpjqZYa3hc.roa
File: X2tKS2Wa2NdBYBDoCrpjqZYa3hc.roa (raw, json)
Hash identifier: PHbcyssbZPKJVSGQsuJodqClNOxKlU3zVlg/ktaZj/E=
Subject key identifier: 5F:6B:4A:4B:65:9A:D8:D7:41:60:10:E8:0A:BA:63:A9:96:1A:DE:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183320E6F1CE7B0E9ACD5AF65BEE9D6D3ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X2tKS2Wa2NdBYBDoCrpjqZYa3hc.roa
Signing time: Mon 12 Sep 2022 14:15:50 +0000
ROA not before: Mon 12 Sep 2022 14:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:0e:6f:1c:e7:b0:e9:ac:d5:af:65:be:e9:d6:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 12 14:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6b4a4b659ad8d7416010e80aba63a9961ade17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:7e:d9:63:69:f6:fe:ce:67:00:d3:5b:0b:
1c:04:b2:aa:6b:bc:39:c2:47:62:8d:dd:e2:0f:b9:
b8:97:dd:d2:87:ee:c8:ce:ee:b7:5e:7d:eb:69:ad:
87:12:6c:d5:00:d6:6d:89:5e:81:fb:89:15:ba:20:
2b:4e:a9:87:44:27:75:9f:9a:6c:10:b4:a6:42:05:
77:9b:e4:c0:46:f9:4d:e9:f5:5d:64:6b:67:b3:7a:
a4:ec:3c:94:16:33:bd:b4:5d:a7:e9:7b:00:67:12:
fe:0b:42:f4:3d:1e:a8:a3:54:da:68:d2:16:f8:92:
9c:f6:83:50:02:14:b8:6a:56:46:01:72:48:e9:6b:
62:51:0c:00:ec:de:ab:ce:ef:3a:47:37:d5:d5:c1:
7d:82:ee:b9:55:1f:8d:84:f9:0d:a0:aa:84:fa:14:
45:1d:f8:48:03:7b:5f:bc:6d:ae:91:09:ad:61:fb:
8c:f0:db:6d:19:29:8f:4b:1f:e7:cc:20:07:1f:9d:
63:76:3f:3a:9a:89:73:4e:be:a9:31:ba:f3:30:80:
15:07:ca:3f:2d:60:46:22:0f:2b:9e:2e:7e:99:71:
8e:ca:ef:75:f7:75:3e:fc:3c:64:71:d7:7b:53:6d:
5c:8c:60:ae:56:21:53:50:cc:66:39:58:12:66:77:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6B:4A:4B:65:9A:D8:D7:41:60:10:E8:0A:BA:63:A9:96:1A:DE:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X2tKS2Wa2NdBYBDoCrpjqZYa3hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:26:f2:12:13:a1:43:6a:2a:c6:8a:3d:68:36:9f:39:b1:e7:
4e:74:d2:19:d2:39:58:e7:b0:5c:f0:fc:ea:99:c8:f4:3d:86:
31:70:67:df:e5:2d:8d:2d:db:dd:92:38:48:5e:5d:82:3b:ee:
3c:c7:5f:62:b1:07:9d:38:23:d1:bc:27:ce:2d:27:8f:65:07:
52:89:bf:50:58:93:40:98:f0:3f:d0:3e:dd:05:ea:a6:ab:cf:
2b:3c:c4:6b:99:e0:6a:87:8f:c5:c1:ec:2c:eb:60:66:34:1e:
57:cc:03:bf:37:99:02:02:8f:0e:66:07:8c:92:1f:21:bd:a8:
c2:d9:39:3d:02:03:6d:42:7e:a1:f8:f1:36:a2:3f:6c:75:2a:
94:40:23:cf:5e:2c:56:e0:84:be:5f:1a:0c:10:b1:d5:66:b5:
32:7f:de:29:32:b6:43:05:ca:38:92:78:3a:cb:64:bf:29:68:
26:1d:ed:cc:c5:c4:b5:db:87:92:cc:c9:2d:e1:ef:7b:20:f1:
97:80:29:78:f2:c6:85:72:02:cd:e1:00:d1:51:60:25:0c:23:
9a:09:12:bb:81:c9:ef:a4:9d:9d:4e:e5:c5:b9:2d:d0:dd:f0:
0b:ce:61:b1:6f:9e:ce:f3:ab:fb:04:b2:ee:fa:d9:b6:e0:33:
9a:c5:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:00 2025 by rpki-client