Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X6Tt-jJkn0E6A7NPhc8DymCZG1Q.roa
File: X6Tt-jJkn0E6A7NPhc8DymCZG1Q.roa (raw, json)
Hash identifier: QGHeuLI8U4GV5pFFRexWzddY9ytd4nS24gElsxDJzho=
Subject key identifier: 5F:A4:ED:FA:32:64:9F:41:3A:03:B3:4F:85:CF:03:CA:60:99:1B:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018944047ABEC82933ABA7117C0251A850CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X6Tt-jJkn0E6A7NPhc8DymCZG1Q.roa
Signing time: Tue 11 Jul 2023 08:14:51 +0000
ROA not before: Tue 11 Jul 2023 08:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:04:7a:be:c8:29:33:ab:a7:11:7c:02:51:a8:50:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 08:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa4edfa32649f413a03b34f85cf03ca60991b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:70:f7:f4:08:23:53:f6:94:7c:d5:1e:09:
57:98:f8:71:65:40:fd:1c:5a:f1:ed:50:98:6b:02:
55:69:25:2f:ca:36:b9:ee:b3:10:25:25:b0:d4:da:
13:99:97:82:29:45:72:6c:20:78:cc:8a:b9:94:c5:
6e:36:c8:5b:ba:3d:c2:05:94:6d:00:35:bf:3a:b4:
6f:9f:e5:ee:ce:6c:4b:48:07:c3:16:16:b3:35:37:
1a:ad:25:33:b4:79:42:9f:2c:89:69:ec:94:81:dd:
4a:c3:82:c9:d4:24:43:33:8d:1a:d7:14:1a:57:07:
af:af:5b:09:af:7a:4b:c4:01:56:e0:6f:1a:ab:a7:
93:d0:e5:3a:4e:2a:2d:a2:f7:a1:15:89:ad:c7:68:
78:b3:43:9d:e5:53:cc:42:75:a0:c0:b0:32:52:2e:
0f:c0:82:17:5a:7d:fd:90:fa:e8:62:d1:5d:23:fa:
b9:e0:c5:17:84:c1:da:c7:d0:56:e6:a1:2b:af:5b:
c0:c0:77:41:88:d9:eb:e7:f3:2f:aa:27:c3:74:22:
43:45:77:45:4c:05:7f:55:47:08:8d:19:1d:fd:cd:
af:c1:19:8d:8c:27:93:b5:5e:d3:8b:4f:16:b6:ba:
c5:f4:4e:3f:d5:b8:b6:90:40:07:3b:53:5c:71:d4:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:ED:FA:32:64:9F:41:3A:03:B3:4F:85:CF:03:CA:60:99:1B:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X6Tt-jJkn0E6A7NPhc8DymCZG1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:17:b8:8f:06:39:1e:36:9f:0b:bc:4f:f4:3c:37:dc:49:09:
9f:99:86:25:4c:b4:aa:a9:19:6c:b9:5a:49:7f:e4:3e:37:cc:
5b:58:72:38:65:29:ce:c5:e3:15:6e:5f:b3:e2:52:83:c8:f7:
e4:23:9d:93:32:34:00:66:b1:7b:3b:a6:6c:5b:3b:8e:e2:ac:
bc:0a:cd:2c:8f:f0:a3:13:1c:58:3b:3b:44:6a:5e:c8:7c:dd:
47:14:e4:fa:62:36:ea:3b:22:25:91:84:84:e5:2e:85:7d:d6:
aa:c4:cd:b7:37:b8:80:c2:da:13:65:c5:f9:96:a5:76:eb:ee:
b5:e3:2f:5f:5e:30:ae:d2:0e:e5:ae:d4:cc:49:38:08:c7:c9:
c9:62:8f:b7:ca:56:77:dc:cb:19:a8:47:84:32:dd:49:c3:0a:
fa:9c:3d:f0:d3:29:21:38:75:87:4c:80:f1:b4:94:a7:24:a1:
5a:18:11:ba:1a:eb:b0:03:47:98:52:fd:82:8e:7b:8d:69:92:
2c:52:e4:db:44:86:02:97:9d:14:24:02:2a:c1:69:d6:1a:60:
3b:88:71:3b:a4:be:ed:21:cd:b8:21:dc:f0:fc:bb:be:52:0b:
d2:72:be:48:50:36:4d:44:ba:fa:eb:7c:54:7c:f8:e7:87:de:
a4:6e:68:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:15 2025 by rpki-client