Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XL1AcLGMh6gwHcq5wVoeuwa8FSg.roa
File: XL1AcLGMh6gwHcq5wVoeuwa8FSg.roa (raw, json)
Hash identifier: zvrLlUEJJW9c/5xzGJ9yULxp81Xf1m4+ZKdJI3JTSg4=
Subject key identifier: 5C:BD:40:70:B1:8C:87:A8:30:1D:CA:B9:C1:5A:1E:BB:06:BC:15:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187714B3B01BC1F7D0B8E0CD5457A9B4A90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XL1AcLGMh6gwHcq5wVoeuwa8FSg.roa
Signing time: Tue 11 Apr 2023 17:09:28 +0000
ROA not before: Tue 11 Apr 2023 17:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:4b:3b:01:bc:1f:7d:0b:8e:0c:d5:45:7a:9b:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 17:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cbd4070b18c87a8301dcab9c15a1ebb06bc1528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:00:9f:e9:be:b5:8c:ed:49:bc:39:2f:dc:
69:9b:70:00:bb:b5:b9:3f:3a:7c:be:93:3c:94:bb:
0e:d8:13:fb:68:4c:99:ab:30:6f:b2:6f:4e:49:dd:
7d:96:55:52:d1:51:bc:0a:7d:ab:72:6b:1b:27:17:
56:9d:98:87:7b:84:36:46:dd:ae:15:18:5f:c9:d2:
01:5b:d6:8c:0c:3f:83:7d:0d:5c:7f:75:74:8e:64:
e6:30:a0:9c:cf:1f:64:26:28:38:dd:ed:68:f7:b8:
31:31:b7:74:64:e5:41:eb:b5:2e:21:72:8c:42:f2:
73:9f:7b:40:89:f7:2d:c6:a3:8f:32:cb:44:fe:91:
ac:ba:21:7f:77:66:14:d4:b1:d6:05:93:5b:c4:aa:
10:5c:5b:86:b5:b3:08:16:ca:d2:24:44:ac:4d:a5:
bc:fb:df:8e:ca:6a:95:89:f6:51:1f:75:12:c1:83:
ba:c3:94:84:e1:cc:d3:78:ca:f9:e0:fc:b7:5d:08:
34:f1:94:26:44:f7:2f:bc:88:9a:67:16:f5:6f:49:
f9:56:83:a4:4a:d4:a1:8f:b7:c8:34:a3:f2:a1:b4:
36:a2:cd:16:77:c6:f4:88:35:01:81:49:f4:53:d1:
76:81:9c:e8:05:89:ed:8b:7c:a6:3b:5d:44:06:ef:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:40:70:B1:8C:87:A8:30:1D:CA:B9:C1:5A:1E:BB:06:BC:15:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XL1AcLGMh6gwHcq5wVoeuwa8FSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:1d:38:a7:96:ab:0f:47:73:9a:ae:8b:f0:f9:61:75:e2:a7:
9f:7f:68:93:14:5d:9a:07:96:7d:e9:03:8d:5e:18:e9:7b:5b:
5c:8e:de:8a:0f:6b:da:82:ff:ac:e4:01:c9:60:c3:0d:8d:38:
f8:06:32:4f:3e:d7:90:25:78:ed:26:8b:f2:f9:62:7a:f8:69:
00:c1:44:4f:12:24:06:aa:cd:c2:37:06:08:66:46:a7:5a:38:
9a:3f:da:4e:f7:cf:b2:b3:61:39:5a:17:66:8a:0d:ab:28:ad:
08:4a:65:d0:8e:d9:cf:9e:ce:c8:e6:89:0c:47:43:36:58:c4:
f7:7d:ea:44:7c:d1:cf:66:40:6e:47:88:71:2e:b4:aa:07:63:
af:35:53:6c:f0:e7:bc:26:44:c3:0e:ec:8d:9b:4c:27:64:3d:
df:7b:94:15:dc:a0:fc:92:ef:b3:50:26:31:3a:3c:04:02:2f:
08:f5:3b:99:83:c1:03:d2:56:80:20:75:56:85:a4:d9:4e:36:
32:8e:1f:91:48:da:74:0d:2b:fa:7f:e5:4f:40:d7:0f:1c:20:
cb:b6:d2:e4:dd:30:2c:8a:4d:c8:42:3c:3f:3b:43:2a:62:c2:
c5:5e:37:86:2f:59:cf:6c:5b:84:f2:8a:12:ce:ca:df:d9:61:
90:26:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:22:31 2025 by rpki-client