Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X4ANamDpPBSrnKgXYtsDEus9o_o.roa
File: X4ANamDpPBSrnKgXYtsDEus9o_o.roa (raw, json)
Hash identifier: m1D1gu1yLsf2qqTBI1cOgBKuhKtZr8j2ERFKy+2b6nc=
Subject key identifier: 5F:80:0D:6A:60:E9:3C:14:AB:9C:A8:17:62:DB:03:12:EB:3D:A3:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E1BB588D4FA71A72B1A4CBB62276D08C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X4ANamDpPBSrnKgXYtsDEus9o_o.roa
Signing time: Thu 10 Aug 2023 23:14:58 +0000
ROA not before: Thu 10 Aug 2023 23:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:bb:58:8d:4f:a7:1a:72:b1:a4:cb:b6:22:76:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 23:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f800d6a60e93c14ab9ca81762db0312eb3da3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:6d:fc:70:c2:d6:23:5b:c4:78:91:0b:06:
5e:1d:e0:54:9a:f5:d5:ec:a2:f7:07:19:4b:26:53:
24:f3:80:35:3a:b0:54:63:62:b7:ce:d9:89:bd:77:
ef:90:32:48:3c:5c:f3:b6:19:58:57:13:50:8a:d7:
bf:cc:25:71:2a:c5:1b:81:e9:ee:ed:05:5a:f8:36:
91:67:a7:70:17:0d:4d:63:2c:12:6a:7d:d9:52:44:
8e:ea:e0:05:14:1c:a2:73:57:70:8b:bd:c5:72:64:
e1:c0:8b:88:1d:5f:9c:e8:8f:b4:73:42:38:d2:15:
87:9e:d2:92:30:8b:a1:7e:1f:47:45:2c:33:bf:c9:
81:a5:7c:5b:de:03:b4:2a:08:3f:a2:b3:1c:41:f7:
4b:17:d2:f4:1a:50:3a:84:72:c5:6a:f0:ae:5d:7b:
55:dd:74:44:72:3e:67:1b:bc:ed:59:4d:e7:6c:fc:
6c:03:75:18:37:dd:14:5f:39:5e:94:b7:47:a3:12:
dc:e2:b3:b4:d0:9a:d6:52:be:5f:1d:1b:e3:0a:47:
7e:bf:95:70:ab:00:26:10:c4:3e:5d:82:ad:53:c5:
dc:11:d4:cf:3e:d0:2a:94:31:40:99:2e:fe:c7:2d:
42:5b:57:ce:e5:f9:2d:0a:24:02:9c:ba:97:f4:5e:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:0D:6A:60:E9:3C:14:AB:9C:A8:17:62:DB:03:12:EB:3D:A3:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X4ANamDpPBSrnKgXYtsDEus9o_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d1:51:48:6a:1c:a3:6c:76:f2:7a:df:6e:81:4d:f1:9d:98:
58:44:0f:12:09:35:7e:0f:96:6d:cc:3b:68:72:08:d7:9a:c2:
18:98:81:ac:c9:8f:2c:25:ac:b5:83:56:4e:ab:9a:2c:6a:b7:
fd:c5:7f:db:7b:e5:3a:44:e7:4e:2f:38:38:64:a6:22:60:23:
c6:5d:c5:a7:e2:92:28:51:78:13:d5:94:30:1e:87:93:11:93:
57:49:27:90:85:b8:64:dd:45:14:79:77:32:95:5e:98:4d:7e:
b3:99:a0:c9:62:19:4b:5b:44:2e:8e:7d:61:73:6b:7b:c7:20:
d0:10:50:0c:5a:26:77:fd:bb:aa:dc:e1:f9:a9:b7:0c:25:72:
2a:e6:58:a6:5e:9a:58:8e:db:26:56:4c:39:eb:4c:73:41:0e:
67:ae:a4:b3:f1:c0:be:2b:58:cd:89:98:26:ff:d9:0f:ca:a7:
2d:4e:2f:bc:47:71:42:e9:19:da:eb:86:ed:b9:c0:d9:c0:04:
94:f7:1f:c6:0f:4d:b8:11:ac:59:21:22:67:ef:38:e7:ab:63:
3b:0e:b9:93:27:e0:2e:ff:45:e8:31:4a:0a:17:98:3a:a4:37:
9b:2e:77:aa:6a:db:4a:2d:c5:da:84:e0:24:f8:cb:a7:12:fb:
fc:e9:57:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:40 2025 by rpki-client