Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XbUgMHKmWPNgPyprJdzWMZPFucQ.roa
File: XbUgMHKmWPNgPyprJdzWMZPFucQ.roa (raw, json)
Hash identifier: Pw280fFLoz92Ofs1F53Gwgbz4lkSuT+CxSoNm7s5qmE=
Subject key identifier: 5D:B5:20:30:72:A6:58:F3:60:3F:2A:6B:25:DC:D6:31:93:C5:B9:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185ADD30E96C3BE969CC2D2B6BFC8920A52
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XbUgMHKmWPNgPyprJdzWMZPFucQ.roa
Signing time: Sat 14 Jan 2023 01:09:28 +0000
ROA not before: Sat 14 Jan 2023 01:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ad:d3:0e:96:c3:be:96:9c:c2:d2:b6:bf:c8:92:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 01:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5db5203072a658f3603f2a6b25dcd63193c5b9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:d8:0d:2f:e8:02:4b:02:6b:cb:cd:55:db:
85:ec:69:c3:ed:dd:2b:1a:21:0d:34:a7:26:84:43:
9d:ed:56:b3:c0:6a:57:1b:c2:af:96:6b:0a:d5:d3:
f7:bf:b6:5c:d8:be:b1:ff:0c:2c:f1:46:4a:45:91:
c1:9a:48:c1:f6:d0:40:3b:3c:e5:45:4a:97:c0:d3:
80:bd:64:93:2a:08:43:ab:bb:6e:d2:2b:63:c3:36:
43:c4:07:a7:e6:d4:e9:44:df:c9:23:6c:c5:64:f3:
b8:dc:86:a0:d1:45:3b:93:4f:0b:cd:44:c2:f0:58:
ad:0d:c1:26:ae:90:62:97:9e:71:fc:28:f0:45:ec:
4c:85:f8:32:41:8d:6c:ff:03:4b:5c:1f:ae:74:01:
5e:1f:bb:a6:65:77:c6:98:98:89:c7:cb:5c:b3:7f:
4d:aa:98:c0:9b:d3:92:5c:5d:53:9a:99:ce:9f:00:
63:0e:15:de:6d:cf:87:16:85:fb:37:01:84:5f:d8:
28:39:21:e9:0d:ee:7a:0e:58:31:1e:00:79:e6:d7:
f5:b6:68:58:0c:67:9e:06:ff:39:0b:ba:b6:20:e1:
33:61:6e:79:dd:ba:da:3c:4f:f0:98:77:92:37:1e:
e5:62:91:94:c5:e7:2a:a5:c0:1c:f7:e5:76:79:aa:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:20:30:72:A6:58:F3:60:3F:2A:6B:25:DC:D6:31:93:C5:B9:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XbUgMHKmWPNgPyprJdzWMZPFucQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:61:ea:ba:83:fd:c5:93:50:f8:9b:06:5b:95:7b:9e:af:57:
4a:7e:8a:2c:6b:ef:c9:32:5a:90:07:7b:ad:ab:19:a6:82:2d:
06:c9:bd:56:11:95:2f:01:e5:65:a9:45:24:82:59:e2:9c:d4:
ad:60:a0:82:ba:e0:5a:53:4a:e1:f6:30:42:dc:d1:1d:6e:b5:
f6:d3:0d:ea:f9:85:08:9a:59:b1:79:31:4d:3e:13:da:07:ca:
3b:81:3d:27:4f:fa:60:b2:29:14:f4:51:62:53:27:e4:8f:ce:
1b:56:61:a3:fc:85:20:5a:30:85:e2:3c:a0:19:b2:61:fe:68:
8b:e8:b8:06:5e:48:49:4f:fb:55:9e:65:75:79:44:d6:4e:21:
91:85:06:0f:21:69:e8:1e:31:07:1b:7d:78:06:d7:61:1a:28:
c1:a4:77:70:ab:ec:4a:3f:7f:88:65:ca:e7:a9:6c:a7:86:b8:
dc:77:d0:8d:86:e7:31:a2:07:f1:12:35:c6:e3:50:58:af:a9:
36:96:ef:3e:82:67:7b:da:67:a1:86:56:29:37:ec:cd:1a:ed:
d3:62:87:9f:4e:17:e1:90:58:29:e3:88:a4:b3:2c:00:1f:5a:
8f:96:35:45:4d:16:dc:84:c3:51:10:eb:7d:50:0b:13:36:5e:
a2:50:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:07:47 2025 by rpki-client