Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XQrOXvNI3uyEITTh6Wngev5gYNA.roa
File: XQrOXvNI3uyEITTh6Wngev5gYNA.roa (raw, json)
Hash identifier: XLkPzedqkyg+vS03jZmpuQgNE3TRrX6M2evVbbQUztg=
Subject key identifier: 5D:0A:CE:5E:F3:48:DE:EC:84:21:34:E1:E9:69:E0:7A:FE:60:60:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878E441EC0DA4A595A0EA3B3161FE1AFB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XQrOXvNI3uyEITTh6Wngev5gYNA.roa
Signing time: Mon 17 Apr 2023 08:10:41 +0000
ROA not before: Mon 17 Apr 2023 08:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:44:1e:c0:da:4a:59:5a:0e:a3:b3:16:1f:e1:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 08:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d0ace5ef348deec842134e1e969e07afe6060d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:a8:4a:1c:d0:74:d3:9e:f8:32:79:ec:6a:
51:a8:f5:f2:a9:1d:73:e8:3b:5e:7c:37:ca:5b:ae:
57:5f:cf:ea:78:ee:00:37:cd:ba:dd:37:58:a9:1b:
37:1c:3a:bd:08:59:bf:92:5a:e2:e8:fe:3e:6a:bb:
15:10:9b:88:47:0a:32:76:11:c6:85:97:4a:e1:e5:
01:7e:8f:87:67:eb:03:f8:16:ff:21:38:99:4e:12:
1d:42:50:e0:d8:01:17:64:01:e3:36:c7:ac:76:98:
a1:02:a6:03:7d:79:7e:7c:3b:79:e7:db:36:d9:3c:
e1:34:48:4a:83:ca:3f:57:37:d4:3f:d1:37:33:1f:
a3:08:60:a5:fc:aa:c0:1e:de:3d:4f:3c:db:d3:18:
49:f9:04:a2:4c:5f:a9:21:4a:cc:75:7f:b7:f9:3a:
b1:03:07:41:08:08:53:2b:83:fb:96:6b:a8:16:df:
6d:1b:ff:a9:27:05:96:63:e5:b8:84:62:01:39:58:
54:24:95:6e:73:0e:3e:e9:f9:47:02:f5:d8:31:10:
eb:01:cd:bc:5b:d4:2f:da:3c:be:83:58:da:d7:0d:
24:35:5c:66:05:15:9d:01:f2:1d:eb:37:5f:61:45:
d0:69:8a:f5:1a:46:09:ff:2f:8f:8d:dc:f8:c7:98:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:CE:5E:F3:48:DE:EC:84:21:34:E1:E9:69:E0:7A:FE:60:60:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XQrOXvNI3uyEITTh6Wngev5gYNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:7d:7b:70:90:23:f6:92:b3:5c:71:2f:13:41:b6:bc:5d:d5:
56:ce:ee:58:28:88:00:17:93:06:36:70:51:d1:b6:f6:01:66:
df:a6:f5:5b:2b:90:ac:82:c1:95:57:ee:c2:92:89:0c:3d:d5:
e4:5c:bf:39:40:bb:2c:49:d1:9e:11:1c:58:5c:0b:4f:e4:2e:
a7:f4:72:c9:91:a0:43:37:23:7d:10:0c:f5:e4:af:b6:c2:28:
b3:a1:03:7b:f3:86:e6:a4:a5:13:75:9a:16:8b:5d:5a:54:60:
b0:90:6a:23:fb:a6:fb:ea:af:19:68:8a:47:2f:1d:05:37:c4:
f6:17:3e:06:b8:62:05:b4:fb:33:75:39:bb:2a:cf:bf:ed:58:
7c:f0:f7:ac:07:10:6e:50:37:d7:e6:60:1f:9a:61:20:90:a9:
c7:fd:a6:9a:56:10:ce:4f:54:38:37:fe:f8:c3:7b:43:e7:78:
11:49:16:a1:e5:2e:a4:15:d0:9a:ba:7a:f5:53:6a:83:ed:1c:
25:1b:78:7a:eb:d6:01:1b:76:3e:cd:2f:e6:d9:89:b8:41:59:
93:a4:8a:d0:6e:f4:93:26:f3:cb:f4:7e:f7:90:0f:34:60:0b:
f7:4c:09:12:1b:e3:91:ee:64:13:34:2e:a3:00:6b:40:32:36:
2e:f0:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:31 2025 by rpki-client