Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XI41vGMPKHs1KK48DP3YxzHYZgs.roa
File: XI41vGMPKHs1KK48DP3YxzHYZgs.roa (raw, json)
Hash identifier: tK66rtc6J2XhOSZiYwura7Vct0KDRdiWLMzXi4HhLjw=
Subject key identifier: 5C:8E:35:BC:63:0F:28:7B:35:28:AE:3C:0C:FD:D8:C7:31:D8:66:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843990721C59296DE62DEC09EF75872A69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XI41vGMPKHs1KK48DP3YxzHYZgs.roa
Signing time: Wed 02 Nov 2022 18:17:58 +0000
ROA not before: Wed 02 Nov 2022 18:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:90:72:1c:59:29:6d:e6:2d:ec:09:ef:75:87:2a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 18:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c8e35bc630f287b3528ae3c0cfdd8c731d8660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:04:f4:04:90:7f:a0:71:5c:3f:28:f0:8a:
cc:6d:35:1c:1d:7b:6d:88:0a:e8:02:5d:bd:90:2f:
c1:4b:7d:80:a6:98:d3:83:9d:a0:7f:48:1e:84:ca:
ce:96:d5:df:eb:0f:f9:c8:34:17:5c:a7:e7:87:d0:
be:4e:c9:0d:41:51:da:c6:1c:c0:dc:d1:b3:ee:19:
66:aa:e2:2b:06:f0:e8:8b:32:e6:45:e3:af:d8:4f:
bd:5d:33:e0:e9:9c:b8:f6:c6:ca:13:ed:fb:a1:aa:
09:5e:2e:0f:8f:fb:53:7b:19:0f:67:02:47:f8:6d:
8d:f4:b8:cc:b9:5c:91:18:8f:fc:04:9d:32:54:f4:
5d:bd:7d:3a:1d:8c:63:d5:24:1f:6d:c7:b0:6a:8a:
0a:47:31:5f:54:1c:8f:69:27:23:82:5f:6a:d9:d2:
c8:7b:5f:71:5c:67:0b:f8:c4:67:31:6c:a3:9b:5e:
d1:50:77:af:d1:25:d2:3f:b5:c8:9c:a1:34:27:b7:
29:7c:2e:31:9b:89:b2:e2:38:d8:3a:45:51:f9:51:
fd:bf:0a:5c:63:20:8d:f5:0b:8c:ab:f0:3a:a9:f7:
31:5f:ce:55:e0:2e:21:97:b0:a3:22:f0:1c:54:d8:
94:ec:a9:11:47:4d:5b:83:a2:8b:f3:11:ba:f6:67:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8E:35:BC:63:0F:28:7B:35:28:AE:3C:0C:FD:D8:C7:31:D8:66:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XI41vGMPKHs1KK48DP3YxzHYZgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:47:7e:c1:65:2f:62:fd:2f:90:24:62:d5:65:10:79:a9:c7:
cd:e8:29:33:bc:20:e3:ad:bc:2a:83:34:28:fe:12:9e:2d:96:
80:37:f8:25:0a:5b:8b:56:69:19:9a:c7:ea:45:54:18:76:70:
49:83:bb:be:51:38:08:bb:6b:bd:d5:68:71:1e:8e:ac:48:40:
f5:6e:27:c0:79:e6:11:7b:0a:f3:fc:c9:fc:0b:88:c6:6c:e3:
52:03:c6:59:7a:05:38:f8:42:00:31:fa:54:73:f3:7b:0d:b1:
03:07:1a:c3:0d:f7:fb:d6:64:60:76:92:bb:29:fe:8d:f0:d6:
47:49:52:7e:43:15:fd:dd:a6:55:8c:0d:39:b5:93:91:de:8d:
16:3f:12:19:52:ca:80:c1:2a:5b:5f:b9:24:31:cf:d5:34:8f:
fd:da:ef:59:06:74:35:0d:cb:fe:79:c7:f1:de:06:26:d5:29:
63:37:c7:fc:c1:04:dd:16:10:c7:94:5a:5d:10:28:34:fc:46:
68:2e:fd:a7:3c:35:50:70:cf:52:e4:65:05:e9:5e:78:e3:3a:
91:6c:21:84:4a:5d:72:c6:57:da:6c:10:f9:bf:82:7e:79:87:
ab:bf:f3:33:fb:2c:88:df:77:fb:6b:d3:3a:e8:9a:d1:39:2d:
69:47:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:49 2025 by rpki-client