Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOVtbzq20eVT4KDBvbSvvpj79Co.roa
File: XOVtbzq20eVT4KDBvbSvvpj79Co.roa (raw, json)
Hash identifier: DNU82fDvyDZL7oyJxjOEv/KZi5ZuBN/gIa/JpvvTj3M=
Subject key identifier: 5C:E5:6D:6F:3A:B6:D1:E5:53:E0:A0:C1:BD:B4:AF:BE:98:FB:F4:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018626A40877C7961B98A54C007DA27CB142
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOVtbzq20eVT4KDBvbSvvpj79Co.roa
Signing time: Mon 06 Feb 2023 12:12:09 +0000
ROA not before: Mon 06 Feb 2023 12:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:a4:08:77:c7:96:1b:98:a5:4c:00:7d:a2:7c:b1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 12:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce56d6f3ab6d1e553e0a0c1bdb4afbe98fbf42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:4f:9c:19:50:6e:7e:ee:85:c9:c0:a5:c6:
8e:b7:7b:00:82:e2:e9:52:c6:aa:4a:31:3d:e1:2c:
82:68:6a:24:fd:57:87:ac:81:ee:43:88:2e:5e:b7:
33:da:4f:d9:f8:69:3e:9b:7a:e9:b7:ca:5d:7f:05:
56:f5:2d:fe:82:67:28:8b:e6:29:35:32:a7:42:8c:
88:ab:e1:ae:9c:1b:2a:79:7c:97:84:f5:06:24:8a:
ce:51:f9:e8:e4:64:a4:d0:2f:e6:c9:a8:b7:b3:7f:
94:28:0b:b3:8e:cf:73:f7:67:73:f9:3d:87:27:3a:
93:7d:ab:85:44:b4:8d:ea:7f:6a:fe:7c:da:5b:c5:
a7:72:21:69:c3:b2:25:3f:ce:53:90:19:72:51:76:
37:87:be:5f:91:28:ea:39:dd:2c:c6:82:74:a8:89:
c9:67:b1:17:19:c9:14:50:5c:82:05:49:6e:f3:60:
a9:30:83:ba:17:07:9c:14:9a:4e:6f:13:2b:b8:99:
da:a9:0d:88:fd:66:50:bd:ea:96:d5:78:6d:e6:8d:
26:2a:24:ee:35:99:fd:be:a2:35:b4:ec:e0:03:19:
33:00:e6:c0:76:2a:35:98:9b:76:bf:66:12:b9:d4:
48:73:25:14:da:ed:7b:db:ac:0e:39:06:cf:d8:27:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:6D:6F:3A:B6:D1:E5:53:E0:A0:C1:BD:B4:AF:BE:98:FB:F4:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOVtbzq20eVT4KDBvbSvvpj79Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:61:28:7a:55:1a:bf:77:8c:df:53:e7:a7:69:9b:56:3c:cd:
0f:02:a8:b1:e8:a2:10:a8:67:ca:3c:26:f3:32:06:d3:82:69:
6a:b3:0e:b8:2d:bc:22:db:90:b2:11:93:2b:01:1d:d4:06:8d:
5e:96:95:f8:65:0b:1a:d0:50:08:49:4b:3e:13:05:33:53:76:
27:1f:12:cf:4a:97:62:a4:15:16:33:1b:91:32:84:32:3e:e6:
eb:a3:96:13:12:92:0e:0c:dc:96:12:6f:2f:ee:43:dd:ac:67:
fe:40:64:3b:b9:6a:c2:58:3a:c8:8d:c5:8f:ce:c1:ed:57:15:
14:e2:ef:c2:fd:f9:ca:11:34:eb:bb:02:e7:2a:c6:1a:12:14:
24:73:23:1d:7b:93:4c:e4:2b:67:8c:9a:53:78:d5:8d:e7:10:
86:fc:ba:4d:47:d3:53:0c:da:b9:f9:da:41:99:47:36:04:38:
2e:71:d0:be:8d:a3:26:13:3f:a9:57:44:9f:ad:fe:d4:93:c9:
53:17:95:bf:28:1e:f2:39:52:18:b5:4f:77:84:91:c7:77:21:
a2:96:54:0c:67:18:4a:b6:2c:34:32:08:c9:7d:5a:0b:d9:7c:
7f:e3:b1:e0:b2:5e:a6:46:56:78:8f:93:eb:fa:54:58:ee:fe:
a4:22:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:38 2025 by rpki-client