Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XIt08whRhCYEFiagQFx1JO2N6Xo.roa
File: XIt08whRhCYEFiagQFx1JO2N6Xo.roa (raw, json)
Hash identifier: u2NPWH3xgAnmWa42VW2AOSkUGk8gAAxxJTwz+06bWSw=
Subject key identifier: 5C:8B:74:F3:08:51:84:26:04:16:26:A0:40:5C:75:24:ED:8D:E9:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E6DE09A29DD7912AAAD0EA845975112E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XIt08whRhCYEFiagQFx1JO2N6Xo.roa
Signing time: Fri 11 Aug 2023 23:10:58 +0000
ROA not before: Fri 11 Aug 2023 23:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:de:09:a2:9d:d7:91:2a:aa:d0:ea:84:59:75:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 23:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c8b74f308518426041626a0405c7524ed8de97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:e7:6e:b2:25:90:bc:1e:07:44:e4:25:42:
52:ee:26:56:99:68:78:c2:f8:e6:6b:da:08:c4:82:
a3:ab:a8:34:46:cf:ff:bc:90:67:e5:da:58:dd:19:
d5:d3:bb:df:ec:38:3c:df:f9:11:a3:dc:db:c8:2a:
ec:5e:4c:00:50:da:59:f5:23:30:df:f4:cc:21:fc:
23:7b:c4:f8:da:f8:8b:78:32:a0:b7:27:f9:2d:7c:
a3:a9:88:43:85:62:7a:12:c7:88:f0:0c:22:e5:04:
47:e6:09:18:ab:56:5a:78:03:87:04:57:bd:3e:b5:
7f:50:9e:0c:0f:c4:be:32:6a:c5:d0:89:a5:dc:64:
1a:15:d9:db:a3:af:06:18:a3:d6:ea:f5:41:1f:cb:
d7:27:38:30:ac:77:d3:60:19:f0:3c:70:a5:fc:f0:
4b:1f:1e:f8:60:1d:74:38:49:08:92:05:46:ad:fe:
ed:8b:b5:90:93:50:fe:73:74:41:c6:bf:11:d2:fe:
10:b2:c2:81:d6:41:bb:09:ab:7e:c6:80:fd:0e:2c:
34:5f:22:95:4f:27:59:8a:bf:9b:d4:cb:04:80:fc:
a5:42:1d:e9:ad:27:60:68:4b:0d:55:1d:9a:cf:6f:
cf:72:60:17:08:0d:ac:96:24:ce:b8:08:76:56:c0:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:74:F3:08:51:84:26:04:16:26:A0:40:5C:75:24:ED:8D:E9:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XIt08whRhCYEFiagQFx1JO2N6Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:4e:7c:c0:56:69:a2:80:40:5c:64:0d:a7:c2:44:54:ca:27:
20:47:15:d8:ec:cf:15:96:36:0a:c8:ff:3a:e1:52:c3:d1:85:
15:ee:21:f0:f3:09:09:79:c3:f8:c9:6d:49:46:08:c9:4e:c8:
ab:e5:eb:79:95:08:99:e4:cd:00:5d:71:8a:f2:24:62:a2:bc:
e1:6a:d8:cf:1a:08:98:2c:4c:94:9e:ab:d4:93:c0:e9:15:07:
8c:3c:7d:36:85:7f:5e:09:3a:49:17:a3:6c:b1:38:06:ef:e6:
e9:a9:e2:24:37:d1:5e:f0:00:0a:67:0b:fd:80:3d:7e:2e:ee:
35:21:64:90:63:fc:81:2c:ea:ed:6e:e4:00:e6:38:4c:56:69:
18:ea:e5:87:d8:6e:2c:e5:a0:47:28:65:28:10:2e:e8:bd:38:
0b:78:b4:82:25:75:44:6c:10:61:b7:9c:f0:7a:7b:d6:ae:4f:
80:32:36:47:eb:e3:81:70:f5:54:5a:32:95:93:34:db:19:f1:
49:4c:f5:1b:12:24:e1:12:6a:58:dc:ec:f0:6c:3b:28:72:65:
a9:19:9a:a8:99:75:f5:b4:62:a4:88:8d:e7:f9:8e:a6:4f:6e:
6c:04:a8:9a:3c:18:44:6c:77:1c:a5:06:c6:fc:fd:ef:8c:09:
5c:75:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:02 2025 by rpki-client