Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XSyTE1OihFYJAQpM80Xx__EMriI.roa
File: XSyTE1OihFYJAQpM80Xx__EMriI.roa (raw, json)
Hash identifier: ZewNCsMP6+SonqAhL4S1AO205kXvHOLIlMx21Vuvi7E=
Subject key identifier: 5D:2C:93:13:53:A2:84:56:09:01:0A:4C:F3:45:F1:FF:F1:0C:AE:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882F647A91AD1098851A495F60A652C16E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XSyTE1OihFYJAQpM80Xx__EMriI.roa
Signing time: Thu 18 May 2023 15:04:54 +0000
ROA not before: Thu 18 May 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:188:2f63:df03/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:64:7a:91:ad:10:98:85:1a:49:5f:60:a6:52:c1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d2c931353a2845609010a4cf345f1fff10cae22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:77:54:b6:bb:89:1e:0c:3e:13:79:97:6c:
41:ce:ff:cb:0a:ae:48:29:07:1a:46:1b:ea:8b:72:
df:5d:19:f6:31:9e:8c:5b:75:99:d4:aa:47:fc:ae:
f4:52:35:a8:e3:2b:b0:d1:26:43:cb:fb:50:d6:33:
35:8d:c4:5a:3f:24:08:9a:ed:62:9c:05:94:33:f3:
57:b4:67:69:1d:7a:f2:4b:06:46:ce:4c:35:ac:b1:
28:50:67:e3:30:e2:f8:d4:5f:59:1b:6b:c6:66:8d:
d7:46:4d:ab:be:51:08:07:3e:36:36:fe:75:19:0e:
57:3b:a3:a2:fe:84:13:e4:96:cb:d6:33:62:88:ac:
93:da:e0:7e:e3:e7:c4:a9:e1:d8:32:20:7b:d5:ee:
63:ab:cb:b0:53:47:5c:19:67:66:07:71:88:45:70:
a7:87:b0:cc:ff:df:8d:1d:fa:a9:a4:4a:7e:62:e4:
5b:2b:26:71:61:6b:37:f6:08:2e:07:0b:8d:8e:17:
9e:52:1f:ca:ac:23:23:c2:4a:4e:d0:c2:8b:f3:93:
44:a1:cf:f2:a1:72:09:bc:0b:7c:a4:d2:16:1a:bd:
87:0f:35:0e:f7:a0:ef:7f:40:3c:bf:8c:e0:82:ab:
f2:d2:6d:50:8d:26:30:73:0c:26:7c:b9:e6:1f:ec:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2C:93:13:53:A2:84:56:09:01:0A:4C:F3:45:F1:FF:F1:0C:AE:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XSyTE1OihFYJAQpM80Xx__EMriI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:93:3b:f3:63:22:22:3d:69:b4:07:17:7a:b7:88:34:0b:5d:
67:c3:3c:be:5b:eb:a3:fd:7b:02:14:df:c6:01:1b:64:0b:9d:
dd:7f:c6:8a:96:e5:01:a9:22:24:5f:ae:46:5a:07:c9:15:14:
f2:c8:c3:f0:19:7e:d6:e3:25:15:97:2b:0e:7f:4c:8b:b7:55:
c7:0d:16:91:5e:ce:83:42:71:c3:75:6c:cb:7c:21:3b:6f:06:
22:8d:6b:80:0c:27:26:cd:df:9b:0b:ec:d5:01:66:66:87:a1:
e9:a0:a3:7e:a2:f1:d9:e1:3e:71:74:5b:be:05:82:f1:47:b2:
2d:45:62:06:69:6a:bd:5a:7a:49:0b:3c:b3:bd:fd:13:d6:dd:
81:96:11:ce:0f:f7:3b:5b:f0:5b:11:b7:d7:c1:cb:70:0c:1c:
21:1d:59:e6:91:7b:53:73:8b:b0:88:f4:d6:f9:62:cc:64:dc:
0b:b3:6b:fe:5f:95:02:b9:ed:6c:be:36:8b:5c:a0:cb:ed:97:
81:36:d8:9c:3f:9e:a5:fb:f9:f0:71:54:2d:d0:a6:d4:84:ae:
dc:ad:c0:b5:0c:7c:4f:c1:54:6f:5c:5e:da:fa:50:61:8b:64:
ca:73:e7:65:f2:8e:29:d9:e3:81:d5:a4:2c:9a:58:e8:2a:74:
dd:f7:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:15:17 2025 by rpki-client