Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XB3DwMNf6GoVI-ss6v4eM6wleCA.roa
File: XB3DwMNf6GoVI-ss6v4eM6wleCA.roa (raw, json)
Hash identifier: Aem+OgFq+ijasUVnFf1B9GZ8sqwtmfXrib/45/92UGk=
Subject key identifier: 5C:1D:C3:C0:C3:5F:E8:6A:15:23:EB:2C:EA:FE:1E:33:AC:25:78:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E2CBF236AA497A7BE87D876C6F7515BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XB3DwMNf6GoVI-ss6v4eM6wleCA.roa
Signing time: Thu 22 Jun 2023 11:09:56 +0000
ROA not before: Thu 22 Jun 2023 11:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:cb:f2:36:aa:49:7a:7b:e8:7d:87:6c:6f:75:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 11:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c1dc3c0c35fe86a1523eb2ceafe1e33ac257820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:72:0e:f8:36:87:5f:73:1e:27:e2:0e:ff:
ff:94:5e:0f:bc:8d:98:5f:97:6e:23:c5:07:60:e4:
82:7b:56:c5:47:aa:8f:bb:32:ce:48:0f:55:2d:1d:
35:32:f2:38:80:03:c5:a5:c4:a4:89:75:15:23:e7:
68:21:8f:dc:3b:ea:d6:fb:6a:f3:a7:f8:85:66:ff:
6d:23:57:c4:82:0e:ab:b7:0a:6e:30:51:5a:ce:6c:
fd:85:ed:8f:0a:e6:87:c3:c6:41:c7:ba:87:a4:b2:
bf:a8:ce:a6:67:fe:af:4c:67:4c:85:64:21:be:ac:
77:0c:4f:c6:d8:a5:19:7f:03:aa:66:73:f8:e4:1a:
fb:af:f4:f8:fb:1e:2a:4c:9a:04:8c:9d:97:f8:31:
d1:be:c0:00:e3:1a:55:cd:aa:b9:f6:40:95:19:36:
14:91:6a:36:46:17:10:00:0a:79:cf:f6:91:45:f4:
7a:a6:8a:95:02:62:ca:57:2c:31:19:e5:99:49:07:
0e:9d:8d:82:5b:a8:56:6d:8f:c2:22:af:db:8e:c3:
58:26:1a:12:25:b7:2a:69:a6:8e:55:58:39:d3:45:
b8:eb:a1:63:36:4a:a3:c2:fc:eb:c0:56:83:ff:b5:
8a:2c:fd:3f:80:df:16:50:d1:71:29:58:3a:fa:ca:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:C3:C0:C3:5F:E8:6A:15:23:EB:2C:EA:FE:1E:33:AC:25:78:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XB3DwMNf6GoVI-ss6v4eM6wleCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c5:c5:e3:35:b3:57:85:7a:8a:b7:60:d8:88:0e:86:e8:5c:
de:d7:18:9d:c5:6f:db:5a:38:a5:f4:5d:83:38:76:ce:55:22:
60:59:5e:17:bd:e2:98:d0:14:67:87:82:35:85:70:df:fc:4e:
5c:38:95:c3:e9:74:50:7e:8a:2d:1f:db:96:26:af:1f:cc:8e:
f4:2b:a5:81:67:74:31:b5:95:df:1f:77:c2:23:ee:86:ed:4c:
05:ca:c7:46:4b:26:f3:af:6b:88:34:f0:3c:09:82:f5:ad:9f:
87:2a:ae:b2:fb:82:ae:47:b8:10:0e:dd:62:d5:59:3f:fc:62:
4d:a2:2b:0f:af:f2:2c:57:2a:10:73:8e:ab:6c:5f:d1:ba:b7:
a2:c3:be:6e:f8:2a:11:92:73:8e:c7:da:e7:49:b5:28:3b:26:
97:17:f2:d8:cd:df:b8:6a:18:ed:15:bf:f1:0a:f3:8d:8c:1e:
bf:c4:dd:47:01:a1:26:24:91:de:40:7a:ee:b1:79:16:d9:f2:
96:e7:97:fc:d2:5a:55:0d:ab:5e:e3:c5:6f:a1:de:c7:1c:bb:
0e:c5:af:a0:99:83:eb:8e:5d:83:92:b0:68:46:74:2c:23:85:
b2:15:0a:d7:0a:91:84:45:17:f3:47:17:22:28:33:9d:15:49:
04:ae:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:30:00 2025 by rpki-client