Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XLmfXqneGV3gSQlCSfph7_i7gCw.roa
File: XLmfXqneGV3gSQlCSfph7_i7gCw.roa (raw, json)
Hash identifier: iRmcjtUSAIoKn6wD71dxnRVCwHxPMA6N4LOTezMoNbU=
Subject key identifier: 5C:B9:9F:5E:A9:DE:19:5D:E0:49:09:42:49:FA:61:EF:F8:BB:80:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898949DF270960DAC256828D8E6297C421
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XLmfXqneGV3gSQlCSfph7_i7gCw.roa
Signing time: Mon 24 Jul 2023 19:04:27 +0000
ROA not before: Mon 24 Jul 2023 19:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:8949:b353/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:89:49:df:27:09:60:da:c2:56:82:8d:8e:62:97:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 19:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb99f5ea9de195de049094249fa61eff8bb802c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:89:fe:e1:bf:35:1b:60:a0:7d:61:11:18:
15:5d:1c:38:43:1d:6d:52:3f:0c:b2:1f:f6:a2:aa:
e6:f3:8a:81:59:3f:ef:da:2a:a4:30:5a:19:0f:a5:
ad:a7:81:7a:4c:3a:01:bc:9e:32:9f:e4:ab:5d:d9:
fd:cb:cf:00:ac:f7:0e:a5:4b:e0:70:24:dc:37:54:
57:15:c6:1c:e3:83:9a:e3:af:9e:40:70:27:7f:51:
68:0d:1b:b1:b5:96:5f:b3:1f:39:5d:64:4e:cd:55:
db:2c:af:f1:c8:eb:d0:55:fe:d8:7a:20:22:07:56:
2b:33:bd:53:5e:0b:29:b2:4e:df:26:a0:5e:62:9c:
77:12:3e:fb:99:e7:3f:0e:fe:84:c3:dd:e1:96:32:
12:c6:cf:71:dc:6a:df:8d:9a:51:5c:57:09:92:a2:
d4:ba:2f:b4:2c:50:7d:6a:95:88:79:19:5d:a2:b8:
38:c6:07:4e:88:89:7d:88:4b:a5:a0:ea:6a:5b:54:
fc:fc:7b:20:f4:44:87:fd:57:81:9a:36:1f:97:62:
54:6e:f3:ee:26:17:77:50:a8:b9:af:b4:5b:82:95:
28:fc:23:27:78:f2:75:79:c3:51:eb:ea:15:08:7f:
50:4f:c2:14:4a:f6:5b:c6:67:d5:62:fa:91:e4:3b:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:9F:5E:A9:DE:19:5D:E0:49:09:42:49:FA:61:EF:F8:BB:80:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XLmfXqneGV3gSQlCSfph7_i7gCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:a4:ac:35:f4:27:f1:e9:46:88:c3:f9:cc:06:ef:e9:8a:7c:
5e:9e:68:11:8e:53:eb:60:5f:6f:10:72:e7:e4:6b:de:fc:a1:
1f:98:44:56:85:2a:39:df:2a:33:eb:7c:2b:46:9d:4f:6f:38:
71:12:0c:07:81:82:a5:4b:42:89:ad:7c:33:7f:ca:54:01:77:
f1:24:59:a0:b5:7a:ff:f5:1b:9a:87:1c:77:37:99:74:2e:96:
44:7c:92:8b:98:65:cf:0c:32:51:45:ee:be:e7:0a:78:ee:b9:
10:0c:83:6f:91:43:ba:c0:16:00:bc:a4:a0:af:a2:b2:21:6f:
73:8f:df:15:5f:56:fe:80:21:e0:14:b7:50:9d:23:73:5a:12:
f3:a3:12:98:91:53:fb:5a:ea:21:30:e1:19:dd:46:c7:5c:20:
17:81:e3:18:cd:45:7d:9d:df:85:17:5e:c4:95:58:8b:c7:4b:
9a:60:5f:14:93:0b:2e:46:10:f2:49:6e:da:72:08:a9:13:08:
de:5b:21:20:7f:c4:84:63:c3:0c:1e:e6:2f:cf:9b:5e:a9:d6:
ce:8a:e7:c0:11:a7:b4:a8:5c:b1:71:94:5d:ce:21:d0:da:8b:
46:6f:43:dc:4c:1f:24:bc:b7:9f:c6:a8:c8:b3:98:ee:de:c0:
9c:b9:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:37:22 2025 by rpki-client