Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9aWXBd3XO1QQUc7yFKgRb6Ql-c.roa
File: X9aWXBd3XO1QQUc7yFKgRb6Ql-c.roa (raw, json)
Hash identifier: l4TW4uUWNsl6DEOIdsUbnDXzHmxat996QAnoH5lFga0=
Subject key identifier: 5F:D6:96:5C:17:77:5C:ED:50:41:47:3B:C8:52:A0:45:BE:90:97:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B70D1D08CC0F327D1C1F1268B45A2E07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9aWXBd3XO1QQUc7yFKgRb6Ql-c.roa
Signing time: Sun 15 Jan 2023 20:09:28 +0000
ROA not before: Sun 15 Jan 2023 20:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b7:0d:1d:08:cc:0f:32:7d:1c:1f:12:68:b4:5a:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 20:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd6965c17775ced5041473bc852a045be9097e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:50:22:f2:83:1e:16:c2:55:9c:a5:67:bb:
70:65:4f:fc:11:c4:84:d7:56:59:82:e0:d0:51:09:
a0:e1:6d:9f:cb:93:27:f1:22:62:5e:7f:18:81:e7:
11:e5:2b:67:cf:2e:c9:8e:91:00:85:dd:00:66:71:
d0:ba:0e:32:54:c3:88:2a:c1:8b:be:84:60:5a:f8:
48:71:9b:4f:ca:47:b5:9c:95:50:01:4c:02:8c:a2:
59:07:5a:cf:42:a5:ff:e9:94:16:9e:a9:91:17:3a:
93:dd:69:34:01:f5:f1:0b:52:62:a7:ca:23:80:f4:
bf:37:a5:d9:92:f7:b1:00:63:fb:78:6d:d4:21:2f:
03:fe:19:6c:e9:18:76:28:13:95:dc:71:61:a1:db:
e9:cf:2f:00:63:f3:15:cf:1f:60:f5:7f:fd:65:38:
04:fa:e2:1d:a9:a8:46:bd:ba:d4:e8:2a:c6:c7:29:
27:a0:ef:72:c9:5c:e5:59:4a:bf:b6:46:9c:c4:f2:
10:b2:13:48:a1:b1:8c:16:27:3c:d0:51:51:f9:45:
9f:a3:53:20:68:e9:e9:98:65:01:2c:21:65:0c:1e:
6d:09:7f:ff:95:12:e0:21:d7:03:dc:01:85:09:46:
1f:50:c9:fd:d9:b2:29:71:a1:09:e7:f0:78:79:41:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:96:5C:17:77:5C:ED:50:41:47:3B:C8:52:A0:45:BE:90:97:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9aWXBd3XO1QQUc7yFKgRb6Ql-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:38:6c:c7:e2:c7:89:7d:f5:35:59:eb:c9:bc:7b:f3:3b:32:
80:67:5c:e4:22:7a:60:03:00:15:42:8e:9f:0c:b9:3f:eb:87:
d7:bb:0b:aa:29:6e:75:ed:62:70:7e:37:64:c4:9f:ae:9e:b6:
62:af:e6:e4:b5:cf:c9:34:39:6f:88:8d:82:f4:8e:2c:18:d0:
8e:4f:e8:f2:32:a4:d6:fe:13:8a:35:55:85:9e:51:75:12:31:
4d:47:a4:53:f4:12:65:a4:71:d8:63:fe:d5:93:63:f3:af:58:
11:1d:41:57:65:28:3c:12:85:93:0a:03:89:f2:ee:cd:87:c5:
ae:a0:be:4a:58:b1:b9:fd:e0:a5:df:53:08:8d:21:73:4b:b3:
29:42:26:d7:a0:ca:54:af:af:01:f4:23:7b:9f:be:af:64:7c:
6b:20:08:fe:8b:6d:90:29:64:33:94:9d:2a:60:ac:c7:55:42:
1f:6c:fa:26:fd:8d:58:1e:a7:1f:7b:b0:b3:86:cb:68:76:84:
ff:c2:d9:2a:fd:96:2a:d5:31:b3:1f:70:04:28:48:75:36:15:
9e:1e:86:9f:35:0f:3c:ee:0a:1c:a8:b4:fb:06:1a:53:a0:8d:
20:44:f4:e1:09:1c:44:5c:93:bf:7f:e3:de:4c:29:29:4e:0d:
1b:fa:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client