Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XYEPQHuPQtbpe4vlmf2uFVGbR6w.roa
File: XYEPQHuPQtbpe4vlmf2uFVGbR6w.roa (raw, json)
Hash identifier: xratqc9qoYXT0B0Slxt0TuswJRkFIyQ74g+LbrpkTB0=
Subject key identifier: 5D:81:0F:40:7B:8F:42:D6:E9:7B:8B:E5:99:FD:AE:15:51:9B:47:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885D1DF758DA6FB2A51F78782CFA731B12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XYEPQHuPQtbpe4vlmf2uFVGbR6w.roa
Signing time: Sat 27 May 2023 12:10:24 +0000
ROA not before: Sat 27 May 2023 12:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:1d:f7:58:da:6f:b2:a5:1f:78:78:2c:fa:73:1b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 12:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d810f407b8f42d6e97b8be599fdae15519b47ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:c2:20:9b:69:39:1b:9b:96:3b:4c:e7:16:
eb:54:7b:89:b7:6b:30:ff:5d:99:1c:6c:bc:05:aa:
34:e9:1e:9e:eb:ad:e3:84:d6:ef:ce:fe:b5:8c:ec:
77:2c:27:25:ad:55:3b:16:48:8a:f7:9f:ee:ac:86:
f4:d8:10:a4:36:96:9c:1f:d0:54:9c:81:26:d6:93:
28:75:5b:fb:be:c5:28:b7:3b:bc:ec:ce:28:2d:4b:
22:a6:b2:2a:28:65:64:47:54:41:02:c1:0e:a6:74:
68:44:80:53:26:a3:63:f4:d2:82:bd:bd:db:94:3a:
c0:c6:cf:ed:16:e0:51:3c:f5:d5:6f:10:8f:ba:70:
8f:a0:43:35:a3:18:aa:fa:78:4f:a0:84:d7:ac:fb:
70:dd:e4:38:8d:9a:21:55:3c:6f:29:ff:57:03:6a:
b9:3e:d2:2c:65:0a:f1:7a:d8:71:22:c3:16:0f:b8:
64:d5:52:21:23:a3:1c:6d:fb:42:e2:20:a3:90:1c:
16:b5:4b:ef:c8:41:75:13:e2:c9:ca:f5:2f:0f:f8:
1c:eb:ad:dc:34:3c:a7:24:c7:19:2d:c5:40:f3:f8:
5c:59:36:03:17:64:be:cc:17:94:ee:76:52:87:44:
b5:a8:1e:e5:2c:e6:96:ca:c2:83:e4:a4:13:28:80:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:0F:40:7B:8F:42:D6:E9:7B:8B:E5:99:FD:AE:15:51:9B:47:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XYEPQHuPQtbpe4vlmf2uFVGbR6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:c5:1a:d4:0a:5b:29:87:7b:88:a8:71:c6:bc:16:d5:e9:d5:
89:f8:dc:27:d4:cf:9b:14:78:8f:e1:29:6a:8b:3c:cc:40:23:
54:80:25:6c:9f:e6:1a:a3:34:5d:98:a2:27:32:91:c0:11:75:
54:87:3d:fe:57:b3:3a:cb:4c:e9:96:7d:5e:ee:21:8a:93:92:
a9:89:b6:d4:d4:27:3e:bb:c0:ec:15:60:72:00:ea:01:f8:10:
02:7a:25:f4:09:83:cf:37:47:da:8a:e1:c1:a9:86:61:4f:5a:
5a:58:4c:46:75:0d:50:5b:e0:aa:11:57:a2:0e:75:8b:ca:4c:
69:93:f6:e6:8c:83:b9:b1:90:b5:6c:a1:1d:04:a2:bc:35:96:
b5:0c:37:4c:c4:48:52:94:89:97:c0:8d:da:44:97:f4:c8:bf:
04:bd:45:c5:f9:5b:c5:23:1a:65:58:22:81:92:06:6c:44:cd:
aa:6d:e1:57:74:d2:91:d4:b2:55:c7:7b:ce:67:bb:a2:c8:fb:
7a:92:19:ec:92:28:c6:92:ad:8d:e5:36:59:da:39:e4:7c:e1:
ef:cb:4e:77:fa:98:c9:5a:ea:81:47:b8:7f:1a:a3:20:8a:25:
af:4d:59:73:f5:55:19:81:66:34:b9:c7:76:f0:c2:99:78:79:
2d:b4:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:59 2025 by rpki-client