Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XEntosXCw88LhNgc7H5Dy1r-9og.roa
File: XEntosXCw88LhNgc7H5Dy1r-9og.roa (raw, json)
Hash identifier: V4/k4C2jEXGxMw0Q8ktwNUAXUVZCNCdT88IEe/hfISo=
Subject key identifier: 5C:49:ED:A2:C5:C2:C3:CF:0B:84:D8:1C:EC:7E:43:CB:5A:FE:F6:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183ED273078EC82102D7A419D26F4DD3EE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XEntosXCw88LhNgc7H5Dy1r-9og.roa
Signing time: Tue 18 Oct 2022 22:11:51 +0000
ROA not before: Tue 18 Oct 2022 22:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ed:27:30:78:ec:82:10:2d:7a:41:9d:26:f4:dd:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 22:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c49eda2c5c2c3cf0b84d81cec7e43cb5afef688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:cc:5b:bd:fe:1b:63:ce:cc:68:94:30:e5:
99:62:64:90:e8:29:c5:70:07:74:bb:b3:bc:a6:d7:
9b:43:09:cf:d3:1f:ea:c0:25:ab:2b:0c:72:03:f9:
3a:d4:1e:f5:0f:d7:b6:28:62:d7:fc:e6:c5:66:9c:
4a:57:a1:b7:f7:ad:10:0f:d3:1f:42:29:7b:6f:77:
6c:e1:e0:93:f1:83:a8:61:67:b2:94:4c:55:d1:b3:
8b:4e:ea:b3:d2:18:0e:0d:81:4f:e1:76:9f:31:23:
5c:e9:24:14:59:ba:32:f2:0d:0e:76:5d:5b:62:57:
af:ff:d1:0c:c9:5e:04:0e:84:44:1e:9a:2b:fc:99:
81:12:24:91:88:44:56:0b:ee:7d:20:d2:ba:85:d3:
f0:ff:32:54:9c:3c:0a:bf:72:b2:37:b7:2e:91:7a:
ed:2b:e8:96:1a:fc:f6:50:21:62:18:24:f1:c2:50:
b7:e9:5e:bd:83:7d:61:ca:a3:a0:c2:87:f5:f7:bf:
8e:e3:2b:27:21:15:16:02:ec:e7:92:64:c0:f3:7f:
e3:fa:77:14:9a:01:05:01:4c:7e:2d:7b:7d:8b:34:
95:0c:c7:76:d1:b8:f3:82:b1:f7:3c:cd:5e:17:ca:
fa:3c:9d:72:a7:52:35:d9:ab:51:f3:9d:96:4f:e5:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:ED:A2:C5:C2:C3:CF:0B:84:D8:1C:EC:7E:43:CB:5A:FE:F6:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XEntosXCw88LhNgc7H5Dy1r-9og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:3a:60:d7:a1:27:b4:15:94:48:24:94:92:26:c1:0f:31:45:
d4:d9:76:17:81:4b:bc:f2:04:2d:fd:6e:7a:78:8e:66:03:16:
17:95:38:79:f2:af:95:91:cc:61:3d:68:59:28:61:d1:2c:52:
87:62:ea:ee:8e:c9:72:46:9f:5f:c8:86:29:50:5f:29:9a:6a:
8a:98:9a:f0:74:0e:3b:34:15:3a:43:d7:03:0e:dd:ba:3b:a4:
c8:f5:86:38:33:e4:43:77:53:4c:bd:c0:de:9c:cc:4f:db:db:
a8:9c:89:c8:03:df:50:08:5a:0f:32:60:ae:cf:7f:d6:01:e8:
15:68:26:8a:ce:bb:81:e8:18:6f:84:18:26:1e:f0:bf:55:0b:
de:ef:ba:3c:98:08:8a:76:92:0d:dd:6e:b8:9c:c6:75:66:5f:
6e:18:c4:c2:e6:fc:e5:b4:a6:ec:47:e8:70:79:19:5f:99:1b:
a2:5f:c9:23:ec:e8:ca:5d:d1:0d:5d:00:a8:26:0f:18:e4:9e:
4e:95:1e:8c:2a:0d:2a:6d:36:3f:fd:cb:48:76:e1:6f:50:dc:
43:5c:51:05:31:d4:d5:ad:28:f6:7b:08:0b:fd:61:c7:c4:a3:
d2:61:8f:2b:ae:78:e6:72:6a:ab:b4:7e:8e:68:e3:4e:3c:db:
db:c9:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:34 2025 by rpki-client