Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X79Svg3QNHpMoo3j8rzN-YZj5zI.roa
File: X79Svg3QNHpMoo3j8rzN-YZj5zI.roa (raw, json)
Hash identifier: jZgWBqXrkqZAH/SxPikfNcb0FzkNPUHNZcg84FAZ5FQ=
Subject key identifier: 5F:BF:52:BE:0D:D0:34:7A:4C:A2:8D:E3:F2:BC:CD:F9:86:63:E7:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7DF27533
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X79Svg3QNHpMoo3j8rzN-YZj5zI.roa
Signing time: Sun 24 Apr 2022 01:10:28 +0000
ROA not before: Sun 24 Apr 2022 01:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113041715 (0x7df27533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 01:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fbf52be0dd0347a4ca28de3f2bccdf98663e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:d4:c6:c1:95:80:d9:89:69:19:c1:6a:bf:
54:31:85:98:41:79:ea:74:ec:e7:01:6b:f1:77:60:
96:a0:00:43:91:d4:89:06:cf:95:88:2a:17:b1:52:
02:88:ed:7a:88:d2:4c:32:e9:c1:ce:88:6d:97:3a:
3c:a0:7d:ee:73:0c:77:68:6f:f3:8d:c6:1b:c9:9a:
66:e7:31:f9:17:60:b7:bb:c8:49:79:24:fc:1e:9a:
67:cc:bf:35:a0:4d:1c:4c:4f:c6:e5:4c:89:f6:e7:
b2:a6:8e:4d:fc:02:06:9d:89:ce:f6:3b:05:cb:bc:
3d:a7:82:17:db:72:00:eb:0a:ae:ac:d0:56:9c:f6:
1a:97:e5:de:85:50:45:73:2e:b8:2d:ad:c1:06:70:
47:2a:8a:5b:4f:c1:0f:ba:12:7a:35:81:47:e2:e1:
bf:3f:fc:7b:75:46:ba:87:e7:d5:c6:e5:92:43:76:
42:3e:51:4f:df:63:b1:ba:b5:d2:4b:d3:65:0b:a2:
5d:9a:e3:de:9d:46:cd:d8:20:10:4c:87:e3:9e:a8:
d9:58:eb:df:44:f3:7d:e3:51:10:e2:2c:85:56:7a:
d9:e3:37:7c:3b:34:13:e9:9e:be:76:ec:b2:56:7e:
35:ee:9c:be:21:36:34:b0:c6:e5:fe:e1:ec:9d:d5:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BF:52:BE:0D:D0:34:7A:4C:A2:8D:E3:F2:BC:CD:F9:86:63:E7:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X79Svg3QNHpMoo3j8rzN-YZj5zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:d7:35:2e:ae:27:8c:ec:3f:7f:44:31:2b:07:57:e6:a2:3f:
45:45:31:15:1f:2e:b2:16:6c:4f:7a:e1:de:52:98:64:ff:38:
b6:e1:e8:5b:82:12:8d:a4:dd:f7:f8:3f:b9:8c:1c:21:77:be:
9b:93:81:b4:81:55:78:49:b6:e4:8c:07:89:1f:fe:63:c8:ac:
71:0d:17:ac:cf:1c:e6:a8:d4:dd:13:54:a6:79:87:9e:63:34:
4d:49:fc:b1:6a:d8:89:6f:75:07:46:9d:32:7d:5f:64:55:b9:
04:1c:cf:64:e4:8b:d9:3a:a1:fd:85:56:c3:0a:b0:3c:43:ba:
f9:c5:14:8d:c3:87:8a:22:f2:85:a0:82:71:48:87:55:8c:30:
55:b9:4d:e1:1d:0b:2b:f4:23:50:7e:2f:8c:a5:87:57:3c:14:
9c:bf:49:85:30:22:e3:d2:aa:12:c6:be:ce:cb:48:29:e6:80:
30:93:fc:6b:02:a5:98:85:73:e9:bb:e0:b2:37:d8:e2:03:14:
37:64:02:c3:b9:77:ee:dd:55:82:d0:a0:c8:6d:03:e2:7e:20:
4a:99:61:46:70:12:ce:f6:03:c3:4a:67:d6:25:9b:96:99:ab:
8e:95:3c:6b:87:4c:7f:69:ad:ae:4a:0e:4d:ec:15:eb:7f:9c:
48:aa:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:54:51 2025 by rpki-client