Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X67QK0Mk9eJNcfnDykcoBZmROxk.roa
File: X67QK0Mk9eJNcfnDykcoBZmROxk.roa (raw, json)
Hash identifier: +HBoayUax25BWHEZnt4Cs2fdasrHldb7OR39NEaHp9k=
Subject key identifier: 5F:AE:D0:2B:43:24:F5:E2:4D:71:F9:C3:CA:47:28:05:99:91:3B:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2836E0BF34BD5C6097ED01E505745E1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X67QK0Mk9eJNcfnDykcoBZmROxk.roa
Signing time: Thu 24 Aug 2023 15:43:19 +0000
ROA not before: Thu 24 Aug 2023 15:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:36:e0:bf:34:bd:5c:60:97:ed:01:e5:05:74:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 15:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5faed02b4324f5e24d71f9c3ca47280599913b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:f6:e7:6d:26:e9:33:0e:99:e1:ab:36:92:
d2:90:ad:f8:d9:43:0f:e8:e8:6f:d1:c6:b4:c2:be:
f5:43:6b:84:15:24:79:75:b5:d0:62:7d:a9:b6:d7:
9b:54:bc:60:9b:68:a5:6f:aa:fb:e1:44:48:77:1f:
dd:af:53:a0:3a:c4:81:26:a5:46:cc:2d:3e:9d:58:
89:1a:8a:8b:4a:28:6e:3e:a3:dc:24:d1:7f:8a:0b:
9e:9c:c7:1b:f0:09:3f:eb:80:cc:5a:a7:d7:f0:50:
0e:d4:15:c2:36:c2:1f:f5:2d:4d:c9:cb:2f:5c:b9:
de:55:b5:da:d1:53:c5:da:37:3b:11:ab:3c:9e:45:
b3:f5:8e:40:f1:ee:73:da:88:c4:fd:58:4d:98:f4:
32:2f:de:a9:3d:63:f0:e3:25:d7:83:42:7e:2a:ed:
6a:aa:d2:2e:5e:ba:4e:02:b3:a0:a1:ce:d7:40:a5:
3a:89:12:33:80:ef:f1:d6:8d:05:a6:02:22:57:28:
e1:07:63:e0:7e:6d:be:d8:a6:85:0a:ae:84:2a:46:
d1:65:52:ef:21:ef:2f:f7:03:00:e7:f9:36:af:87:
83:05:af:4f:0c:09:a2:d1:9b:69:f4:cc:31:f1:eb:
cb:38:1a:9e:0c:6e:35:0b:03:14:60:5b:97:ab:42:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AE:D0:2B:43:24:F5:E2:4D:71:F9:C3:CA:47:28:05:99:91:3B:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X67QK0Mk9eJNcfnDykcoBZmROxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:5b:8b:71:3f:47:c9:a3:1b:4c:96:e0:d4:4e:39:69:3c:8f:
50:47:ce:3b:50:7a:f5:7c:d2:d2:62:d8:c7:ed:b4:47:42:91:
0c:3d:2b:4a:93:e4:6c:4a:64:e2:09:a2:54:fd:d0:56:16:d3:
58:dd:45:0d:1f:dd:f7:20:ac:6d:ef:0b:e5:5f:d6:63:72:32:
d2:c6:3c:c0:2d:fb:a2:68:4d:f3:46:41:83:af:78:19:75:db:
21:2d:5f:b1:a7:a1:0f:ff:71:9c:e9:07:64:c1:4e:3b:a9:bc:
19:90:d3:e5:59:ca:93:b0:a3:ce:80:df:d9:67:68:dc:8b:86:
7d:b4:f5:6c:1a:a9:4a:62:72:b0:1f:04:a1:39:61:e0:78:27:
57:89:c7:48:2e:f0:2d:00:5f:cc:36:86:cf:34:50:46:9f:f3:
0c:83:88:3f:4c:62:d1:d5:bd:04:f4:aa:6d:90:ac:a1:37:0a:
6c:d7:f3:7e:b8:39:c1:1c:2a:f7:8d:b6:6e:1f:e2:c9:1b:36:
7e:ef:1a:1a:73:17:64:16:92:b6:b9:e2:db:2b:90:e1:ee:d3:
2e:39:04:ed:ec:35:b2:4b:b3:de:c5:28:36:62:86:5c:f8:46:
5a:d6:8b:4d:3e:23:53:22:d9:f8:62:da:99:f1:97:b1:f1:34:
92:87:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:27:14 2025 by rpki-client