Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X6550lb1eM_P1F2UwP62_R224b0.roa
File: X6550lb1eM_P1F2UwP62_R224b0.roa (raw, json)
Hash identifier: E9E9zRuBtKVAx79tQzN8Suyf2IAEVoui/cZvAV8CMbk=
Subject key identifier: 5F:AE:79:D2:56:F5:78:CF:CF:D4:5D:94:C0:FE:B6:FD:1D:B6:E1:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7246A4FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X6550lb1eM_P1F2UwP62_R224b0.roa
Signing time: Sun 13 Mar 2022 21:09:45 +0000
ROA not before: Sun 13 Mar 2022 21:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917232380 (0x7246a4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 21:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fae79d256f578cfcfd45d94c0feb6fd1db6e1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:0b:d1:a8:e0:ad:d2:7d:64:b0:42:a5:0c:
89:ea:1a:50:4b:3b:c3:48:1d:45:c5:bf:a8:d1:65:
7a:99:e4:12:ca:40:15:6a:9d:6e:00:96:06:e3:cb:
9d:0a:b3:eb:78:6f:9f:00:fa:91:59:43:8a:e6:33:
05:02:17:c8:60:cc:3b:78:29:fd:54:63:70:c1:1f:
8a:ef:9f:6b:ce:90:92:16:02:ab:21:5e:82:94:19:
fb:bf:be:a2:4e:3f:78:b3:10:66:c5:de:e4:48:ef:
01:82:ba:0f:7a:c5:2e:1a:10:a9:df:dd:b5:96:57:
5f:db:a7:4b:89:1e:09:a0:a0:ce:96:92:60:c4:fc:
06:b4:07:5f:39:c3:66:7f:ee:75:ef:ac:dc:fb:cd:
ef:62:07:80:60:16:df:6e:f4:fd:b8:3a:c3:a3:8f:
f3:2b:22:99:64:21:eb:8c:35:2e:2e:0e:c8:c3:a4:
0f:ee:c1:ef:38:ea:98:5d:65:01:ad:51:29:f9:17:
a6:e1:78:ae:86:ac:0b:af:fd:48:dd:07:01:1d:3d:
6e:3c:6a:42:2c:11:f8:5f:60:c3:06:05:55:87:94:
2e:37:86:b6:1a:cb:df:8d:e1:2e:66:59:7f:a9:97:
11:fa:68:f2:72:27:fe:43:4e:a4:dc:d9:6b:9a:81:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AE:79:D2:56:F5:78:CF:CF:D4:5D:94:C0:FE:B6:FD:1D:B6:E1:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X6550lb1eM_P1F2UwP62_R224b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:b4:e4:66:71:dc:d3:11:68:34:45:b2:b0:c7:77:73:13:09:
c1:82:81:57:30:f5:f7:04:3a:d8:ad:5e:07:cc:90:bf:b0:d8:
66:f3:2b:d8:a0:81:aa:12:28:b5:30:f8:b2:04:ce:01:92:ac:
31:ab:cb:f2:2e:80:c3:5e:1f:76:84:87:5e:d8:23:fe:dd:8b:
b3:39:91:97:a6:48:a8:03:1b:db:cc:c2:c5:c9:20:d8:5c:f4:
d7:c4:00:0e:e7:c5:ea:5e:d9:9c:49:30:f2:68:3c:63:08:64:
1f:f4:42:97:d3:47:ed:46:b3:75:54:30:26:e2:b2:39:88:de:
44:28:1f:b6:24:10:b3:b3:a5:df:bc:3a:29:d1:50:d0:a5:45:
17:ea:e0:65:a0:f2:b7:a0:99:63:b6:27:db:52:39:ca:b3:ee:
ac:cd:ff:40:81:24:43:19:27:d9:60:48:bc:c3:2d:0e:97:51:
61:9d:49:0e:ae:87:1a:0c:7f:a8:0a:88:42:4b:0b:99:01:71:
1f:cb:40:69:d6:59:a6:da:4e:0c:0e:cd:18:05:c3:2c:30:66:
23:a7:bb:6b:81:81:d7:13:e4:83:58:9b:c4:de:2a:af:98:9f:
c3:46:8d:5b:0b:51:9f:72:1a:2c:66:5e:34:81:49:0f:95:4f:
59:13:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:47:12 2025 by rpki-client