Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XbI6eT_621Ka0EusSUZZYQuBSbA.roa
File: XbI6eT_621Ka0EusSUZZYQuBSbA.roa (raw, json)
Hash identifier: E8Gz8y2tldV9kLzfi449n4OKDkgCub5T78pDn6jMDBs=
Subject key identifier: 5D:B2:3A:79:3F:FA:DB:52:9A:D0:4B:AC:49:46:59:61:0B:81:49:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855422C106C16A01CC9D5679CB5FBC6615
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XbI6eT_621Ka0EusSUZZYQuBSbA.roa
Signing time: Tue 27 Dec 2022 15:10:41 +0000
ROA not before: Tue 27 Dec 2022 15:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:22:c1:06:c1:6a:01:cc:9d:56:79:cb:5f:bc:66:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 15:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5db23a793ffadb529ad04bac494659610b8149b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:97:bf:ce:09:c1:e2:13:6a:3a:2b:9d:be:
cb:be:d3:fa:3c:23:fd:9f:84:a5:39:cf:14:bf:c9:
32:60:37:7f:87:30:15:11:2f:ce:28:64:fc:b1:91:
d4:4f:c3:dc:75:c0:6a:e3:44:6b:68:3a:f6:d8:9a:
64:82:f8:e1:35:d5:f6:3a:67:74:9b:2f:7f:ae:95:
d1:12:1b:98:c1:49:21:15:7f:54:af:b1:0e:3f:41:
0e:c7:fe:3f:fc:53:2f:af:d7:1e:62:da:2e:03:5d:
e1:0d:1f:b5:53:58:b5:ac:e6:5a:e5:d4:82:c8:c4:
08:8c:c6:29:06:89:d8:8a:e1:67:5b:49:f8:50:4d:
04:c8:9b:5e:3a:cc:ee:aa:ab:61:28:1b:58:6b:78:
05:2c:a6:97:71:d1:a2:39:52:48:8b:98:de:13:b8:
b6:d3:08:59:34:e5:7f:f6:29:1c:ba:d1:d1:3c:5c:
66:33:af:95:6f:f0:d5:8b:0c:e6:56:bf:2e:e5:31:
d8:4a:0c:2b:e7:25:44:3c:b1:6b:bc:7e:4e:36:38:
00:db:f3:f0:de:66:1c:3e:9f:48:ac:3d:23:fc:44:
34:9a:fb:e0:8e:41:59:83:c5:31:56:8a:72:e4:33:
f7:10:71:c1:32:9c:b6:d3:b0:32:e1:42:53:d4:3c:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:3A:79:3F:FA:DB:52:9A:D0:4B:AC:49:46:59:61:0B:81:49:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XbI6eT_621Ka0EusSUZZYQuBSbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:f9:16:db:f0:d2:f9:bc:ea:b0:f5:7f:cd:12:74:9d:d3:b1:
1f:5e:9f:b8:9a:52:54:b6:4e:2d:f2:6f:22:e4:44:3c:7c:7d:
42:4e:53:b3:09:26:ff:00:b3:8f:52:63:45:61:f9:18:00:69:
f1:1a:26:c6:67:3b:8a:c3:11:e2:81:dc:17:10:95:b2:5b:96:
55:65:3d:0a:b5:22:63:56:12:96:4b:4d:24:f0:8e:77:9c:b5:
5a:36:3e:30:55:51:b2:61:52:9c:e0:91:8f:b9:8f:b1:21:76:
dd:ab:b7:45:97:56:ef:be:49:5a:39:61:a0:08:93:bd:a9:79:
b1:10:41:a3:ba:85:63:1b:ef:54:4a:01:35:a2:c9:27:3c:10:
16:d7:02:b8:3d:69:9a:a5:56:64:84:76:3f:9c:87:6d:35:86:
f0:17:b6:ce:ce:0f:b4:72:fb:32:8e:b4:e8:ad:34:b0:99:d8:
a8:08:c5:5b:a2:9a:b0:7e:1e:11:6b:03:2e:11:af:88:e1:b1:
a4:c1:e7:6d:b1:b2:81:90:46:30:90:54:f3:72:9a:56:c2:28:
4a:6b:1d:45:57:97:c4:20:76:bb:92:9c:9b:34:47:f3:1b:d0:
5d:5f:68:16:2d:c1:7f:4e:ec:d8:53:31:07:f4:56:cc:5e:95:
5f:31:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:09:58 2025 by rpki-client