Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XGnK3nRD5_dMxHkw7C5UIsWZvQM.roa
File: XGnK3nRD5_dMxHkw7C5UIsWZvQM.roa (raw, json)
Hash identifier: YEotQDl/6PlwzbMRdmO9KdijsUgRBuErjU/pxYaB/jg=
Subject key identifier: 5C:69:CA:DE:74:43:E7:F7:4C:C4:79:30:EC:2E:54:22:C5:99:BD:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183026B30AC019BA3B90846477A700BFA99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XGnK3nRD5_dMxHkw7C5UIsWZvQM.roa
Signing time: Sat 03 Sep 2022 08:15:22 +0000
ROA not before: Sat 03 Sep 2022 08:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:02:6b:30:ac:01:9b:a3:b9:08:46:47:7a:70:0b:fa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 08:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c69cade7443e7f74cc47930ec2e5422c599bd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:a0:21:a2:5d:a1:ef:27:b7:cb:a6:fe:63:
db:ce:3c:55:62:72:64:12:ab:4f:e6:b4:ce:8b:be:
d3:01:21:89:b3:c9:b3:23:07:67:97:4f:9d:28:06:
77:2e:ad:fc:fc:95:6d:16:70:a2:26:c0:f8:7c:2d:
f6:55:bf:11:ef:d9:47:fc:09:f4:1d:6e:3a:33:58:
87:d3:1a:0e:59:15:56:6d:88:02:e7:01:6c:91:ef:
bc:dd:45:b3:a1:c6:50:99:11:16:12:5b:d2:90:42:
04:60:98:c3:0e:cd:5e:3c:cf:37:0e:ec:bd:3f:3f:
6a:28:31:32:35:07:6a:e8:c2:52:02:6e:a5:b1:ee:
ec:d9:63:87:05:6e:cc:3e:a0:45:74:46:17:91:68:
8e:c3:d0:ea:e4:41:b4:ef:45:17:ef:55:36:1f:3f:
fa:b0:ac:51:aa:9b:7e:a3:e2:0f:cf:d2:d0:d3:46:
cd:e1:42:89:73:d1:43:1a:6b:91:7b:f4:04:65:44:
55:03:5a:cc:ba:2b:c8:ee:8b:f0:29:62:96:5b:1d:
36:8b:7d:5a:c7:2a:ed:7a:58:86:a9:f5:74:03:23:
97:1d:f9:98:b6:d3:1a:09:14:ce:2e:dd:16:53:c3:
cc:39:98:fa:69:a5:45:89:73:48:c1:f4:e2:27:66:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:CA:DE:74:43:E7:F7:4C:C4:79:30:EC:2E:54:22:C5:99:BD:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XGnK3nRD5_dMxHkw7C5UIsWZvQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:0d:c2:ad:f6:f8:6b:41:cf:97:85:e6:86:10:a5:69:6e:75:
db:b5:0c:42:1b:e8:81:c7:66:fb:35:2e:8d:21:76:8f:df:0c:
ac:87:bb:11:55:2e:7d:c0:e9:0c:71:40:8a:96:3c:4e:ce:14:
94:f2:66:04:9f:17:11:2d:2f:33:0f:a4:65:22:ae:ab:7a:71:
68:9c:37:20:62:b4:42:ba:10:33:ac:96:35:e9:46:f1:a1:85:
34:13:6b:72:b6:3c:0d:52:0c:0e:7d:cc:19:2b:15:d3:46:3e:
52:0c:36:f7:e8:f0:20:d5:02:9a:f4:9b:ab:58:ac:af:bd:96:
b5:33:20:37:41:43:97:29:f6:0f:43:85:21:43:03:c1:28:98:
11:ef:62:31:4f:93:e7:27:ee:53:78:d8:92:66:fb:20:01:a9:
e3:e5:9a:ee:9e:f4:b1:1e:f6:be:c0:53:a1:4f:a9:39:3a:7d:
cf:55:bd:6e:94:f5:73:64:88:50:02:74:95:25:f5:d3:ff:3c:
c0:da:48:b7:e6:88:88:2c:ce:75:6d:61:dc:10:a2:2a:d9:f3:
74:f5:43:e4:2c:a4:1f:02:fb:31:7d:73:3b:1f:e3:92:96:62:
2c:ed:37:f3:6d:4c:43:3d:cf:18:fc:55:88:fe:49:8c:ea:1c:
9a:9f:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:56 2025 by rpki-client