Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XS2p10-9uIqPTIIPSLqXGiI6Xu0.roa
File: XS2p10-9uIqPTIIPSLqXGiI6Xu0.roa (raw, json)
Hash identifier: gEfdBNoHTiO5YEd25bkxiRkDWuet6ZyqEsjC7Rt5z2Q=
Subject key identifier: 5D:2D:A9:D7:4F:BD:B8:8A:8F:4C:82:0F:48:BA:97:1A:22:3A:5E:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852B95A74D784679D65BFC592E90B3CE17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XS2p10-9uIqPTIIPSLqXGiI6Xu0.roa
Signing time: Mon 19 Dec 2022 18:11:45 +0000
ROA not before: Mon 19 Dec 2022 18:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:95:a7:4d:78:46:79:d6:5b:fc:59:2e:90:b3:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 18:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d2da9d74fbdb88a8f4c820f48ba971a223a5eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:e5:1a:ba:80:4a:6c:a9:42:e5:55:b0:8a:
b9:b8:6e:36:5e:ad:76:53:55:b0:a1:a9:e6:8d:24:
02:1d:11:48:26:15:b0:0e:c5:ce:8b:8a:d8:a6:04:
7d:23:88:4b:30:32:5a:34:f2:63:61:4a:ca:c6:22:
51:9a:b5:18:18:23:6c:59:95:67:dd:e2:41:8d:88:
79:92:a4:c9:44:26:0f:65:2b:f5:6f:e1:b1:4a:61:
91:34:2d:c6:65:0b:39:34:fb:eb:9e:b3:86:24:f5:
0c:e7:6f:ca:8f:70:55:ff:88:a7:08:6e:82:93:58:
f1:c3:fd:73:8e:d3:65:3e:07:d0:14:0f:87:5d:68:
06:b3:0d:c0:ad:14:fd:aa:1b:dd:98:c0:da:6c:84:
47:3c:60:b1:ba:8f:db:37:98:1a:0d:04:7e:7b:2e:
1d:54:43:d3:54:56:14:2a:8c:e6:89:46:e5:17:63:
e2:51:7c:29:76:04:c1:28:2d:65:0d:66:ba:15:48:
90:64:9d:f3:f6:14:11:bd:a2:89:06:f6:b8:0c:13:
c0:38:af:dd:4b:d0:83:14:70:7d:21:91:9d:4d:56:
fd:2a:ba:f6:1f:64:ab:f4:cc:f4:1e:46:39:29:d8:
af:a1:76:02:fb:34:25:20:86:90:ef:d5:7a:9f:12:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:A9:D7:4F:BD:B8:8A:8F:4C:82:0F:48:BA:97:1A:22:3A:5E:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XS2p10-9uIqPTIIPSLqXGiI6Xu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e2:8f:96:28:78:55:64:34:19:47:24:8a:97:d0:38:77:a6:
9f:a1:e3:37:d5:ab:26:6d:e8:56:f6:27:61:b0:d4:e8:d8:89:
59:a7:e0:f9:27:35:98:1f:f8:ef:dc:b1:05:37:90:f2:f8:85:
79:ee:f1:40:49:50:fe:08:3a:b0:f6:42:02:28:75:5b:66:bd:
b1:1e:0f:c6:45:45:03:33:e7:f9:92:b3:33:45:62:46:de:87:
96:c8:96:5e:e5:24:8e:85:35:e5:5f:6e:c4:9e:ef:66:9d:8d:
7d:05:93:24:78:65:9a:9f:11:72:b1:12:1b:fe:06:90:1c:7c:
5d:55:99:33:7e:5c:d1:4a:e4:bc:3f:18:a1:95:68:af:47:da:
5b:1d:37:b5:9b:ed:bf:1a:0b:da:57:f6:e4:60:f1:e4:56:e7:
57:4d:4f:e3:34:ac:03:57:4f:ec:cd:ea:64:c6:4a:cb:66:ba:
5a:b7:86:df:ec:68:bf:02:c5:09:3d:89:f1:50:9b:04:5a:5d:
9f:58:8f:31:1f:d6:22:1c:9c:34:de:46:64:23:ea:6b:f9:c5:
b6:82:06:ca:e0:6e:09:c8:23:98:7e:75:fa:c2:7d:68:82:a2:
88:26:9b:30:69:de:17:40:4d:47:4c:a9:23:d7:b7:94:25:13:
50:9c:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:55 2025 by rpki-client