Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XDHSAvr0jP9RWNDosnqWFDRIPnQ.roa
File: XDHSAvr0jP9RWNDosnqWFDRIPnQ.roa (raw, json)
Hash identifier: BjfyR0/g1oapyZbQkV7rShbAGkQQGgh4eGFSd2E3IOE=
Subject key identifier: 5C:31:D2:02:FA:F4:8C:FF:51:58:D0:E8:B2:7A:96:14:34:48:3E:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B6295A2DE5DA171DD11B7A2125AD11CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XDHSAvr0jP9RWNDosnqWFDRIPnQ.roa
Signing time: Tue 13 Jun 2023 19:09:03 +0000
ROA not before: Tue 13 Jun 2023 19:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:29:5a:2d:e5:da:17:1d:d1:1b:7a:21:25:ad:11:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 19:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c31d202faf48cff5158d0e8b27a961434483e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:6f:75:a1:44:4b:e0:9f:20:22:11:9c:03:
40:8b:bd:0c:24:90:b9:b4:6e:e8:53:11:08:1b:07:
cb:47:6c:95:c2:7f:3e:31:68:a0:57:1e:09:cd:82:
ca:54:80:64:04:03:62:c5:1c:d6:20:d4:e9:56:58:
fc:bc:04:7d:cc:33:27:e7:15:d9:3a:b9:a4:c2:00:
99:ba:2b:43:ff:8a:06:13:d1:a2:f5:b4:c7:63:97:
5a:2e:0b:64:f8:30:94:29:37:bc:4c:ba:15:1e:24:
5f:16:35:52:e3:e1:18:cd:14:ac:9f:be:59:70:9c:
1e:73:cd:67:6a:55:4b:07:98:d5:ca:de:0f:bd:0d:
48:23:ad:5e:51:16:e5:d1:15:b5:0f:59:67:a0:75:
56:0c:ab:af:d8:2b:14:f5:14:bb:2f:87:2c:e4:50:
0d:bd:99:74:cc:8d:79:e2:5e:75:72:a1:9f:13:34:
a7:b8:54:14:95:19:57:86:98:24:99:ee:8f:61:62:
20:5f:b3:fe:83:ba:b5:76:86:4e:d6:b8:99:29:a0:
70:6c:19:91:f3:7f:78:95:27:c5:de:9a:88:42:b7:
14:06:b0:40:bf:30:41:c2:31:57:7a:bb:e6:8b:ba:
24:c0:70:07:0b:3b:35:f8:ac:d1:01:7e:79:bb:72:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:D2:02:FA:F4:8C:FF:51:58:D0:E8:B2:7A:96:14:34:48:3E:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XDHSAvr0jP9RWNDosnqWFDRIPnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:6e:12:71:47:64:d6:bc:f6:72:3f:5a:73:1c:41:fc:53:87:
e6:c9:58:d6:eb:e0:23:4c:7e:ac:45:4c:43:7e:ff:74:a3:79:
fd:41:46:c0:e0:c8:d4:52:31:d7:3d:1f:bd:e3:1f:5b:6c:cd:
fe:93:ed:57:25:4e:7b:c3:a8:d9:dd:59:61:f7:ca:59:d7:41:
54:ea:eb:2f:a5:d4:34:e0:ea:93:dd:9b:dc:52:79:c0:f6:e8:
9f:23:eb:b3:8f:58:6c:68:73:66:71:ad:c3:f0:0e:6f:7a:39:
56:12:00:a6:6c:d8:69:8a:f9:c7:36:85:96:2f:6d:83:e8:31:
35:53:3c:d3:b9:62:43:e1:fa:f4:56:af:c3:d9:c3:82:93:54:
90:f2:d8:d2:80:93:a8:06:52:ac:3a:0b:4b:49:fe:a5:65:cb:
16:bb:f7:9b:6d:0c:aa:bf:f6:f9:fd:12:f1:0f:f8:96:b2:c8:
38:55:90:f3:fa:37:eb:40:a8:e9:1b:67:65:00:df:2c:95:f4:
4d:04:dd:1d:0d:37:5c:21:15:3e:c0:e9:ef:ac:ce:68:ac:0a:
f1:5f:4f:c9:68:75:32:ef:22:c2:2f:37:ce:8a:e0:a3:a4:68:
c2:e3:79:4c:3a:2a:34:29:66:fd:62:5a:8e:64:ca:31:9c:9d:
f8:fe:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:39 2025 by rpki-client