Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XUDf-8a99_pzdx6KOYVfJ7XOZRw.roa
File: XUDf-8a99_pzdx6KOYVfJ7XOZRw.roa (raw, json)
Hash identifier: jeXKSy3LFWdn5/5xZwj/wBQP8HnLmX7MehauSIqFFZc=
Subject key identifier: 5D:40:DF:FB:C6:BD:F7:FA:73:77:1E:8A:39:85:5F:27:B5:CE:65:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DBEF465C54BB3EC5B768E8E5CD15BF18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XUDf-8a99_pzdx6KOYVfJ7XOZRw.roa
Signing time: Wed 09 Aug 2023 20:13:58 +0000
ROA not before: Wed 09 Aug 2023 20:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:ef:46:5c:54:bb:3e:c5:b7:68:e8:e5:cd:15:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 20:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d40dffbc6bdf7fa73771e8a39855f27b5ce651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:eb:3d:50:15:8c:2d:42:9b:1e:45:8d:cc:
da:00:1c:6f:d7:b8:24:82:51:c1:6e:34:26:da:09:
62:9a:ea:4e:76:e7:f1:32:5a:3e:36:27:64:14:67:
e8:a4:ac:2b:9a:18:f0:df:11:a9:82:6e:ad:82:ec:
eb:43:e7:6d:75:89:ac:0c:c2:ff:21:52:9a:3b:5b:
18:00:c1:c8:3d:1c:8d:92:d2:e5:5d:46:22:5c:64:
5a:e0:98:35:e3:2e:2c:70:5a:98:6d:0e:d3:aa:16:
88:89:c5:e4:73:48:c2:3c:6a:10:2d:e0:3d:fd:f8:
f8:74:cb:13:1f:68:40:55:12:f5:0a:03:e5:20:b3:
63:e1:e2:7a:d1:12:7f:b9:18:4a:57:c7:30:77:0b:
e9:8a:e5:7d:b1:12:2a:7f:86:32:6a:08:87:2d:01:
81:b8:af:a4:d2:43:ff:71:df:d3:2d:5a:92:28:3f:
12:72:99:ed:3d:91:57:86:b2:9f:a3:b1:95:2a:5b:
74:8b:d1:28:52:97:0a:55:ed:03:db:29:41:ac:2f:
b8:a4:45:62:65:e1:a1:86:e4:ae:38:cb:9d:14:be:
e6:8f:8c:ff:34:e1:32:76:40:9d:c0:00:4e:3c:3e:
a7:2e:dc:26:52:22:e0:bd:10:f0:44:40:ca:6f:38:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:DF:FB:C6:BD:F7:FA:73:77:1E:8A:39:85:5F:27:B5:CE:65:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XUDf-8a99_pzdx6KOYVfJ7XOZRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:6d:26:6e:30:8e:c7:6c:53:40:45:c6:cf:df:76:f3:ec:e6:
f4:f4:8a:e0:4d:f5:c2:24:fa:16:39:77:ee:dd:51:13:f7:68:
86:6a:3d:a5:76:76:b2:c3:82:41:44:a1:00:eb:10:5a:e8:d5:
72:af:5d:6e:c0:1f:8d:d6:e7:a3:a4:48:c7:86:e0:57:c8:84:
ef:4d:27:b9:15:d9:ff:70:f2:11:8f:2a:20:0e:25:1b:0a:63:
6b:9a:a2:34:88:b2:be:e8:bd:de:10:4f:d0:c4:55:fc:8f:59:
fa:e0:d8:45:ba:cf:fc:96:af:2c:da:25:03:65:3b:db:e0:a6:
ad:87:89:4a:7b:60:16:d9:63:ee:0a:ed:90:0c:2a:28:11:42:
65:db:6f:74:6d:7c:78:43:f3:dc:4d:65:64:81:05:0a:da:7a:
0c:e1:e3:33:65:90:6b:fb:1c:6c:09:07:50:dc:18:70:bf:c5:
7b:67:6e:ac:5c:29:99:60:22:96:69:f3:e1:3d:7e:af:09:c1:
10:c5:7a:5f:ef:15:10:11:de:6e:e7:cb:64:c7:4d:91:24:89:
78:c0:23:7f:62:47:47:92:9c:24:fe:c6:84:ab:5d:d5:e1:35:
a3:05:fc:aa:6c:da:b4:ce:21:01:93:84:8c:4c:76:81:07:da:
0b:f9:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:31 2025 by rpki-client