Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XcCG6Dn0H82tehAE5wwASYOr3Fg.roa
File: XcCG6Dn0H82tehAE5wwASYOr3Fg.roa (raw, json)
Hash identifier: zk8irPWF1BI2w/dc0Cv9hfV336o/0621NtXF93FYtIA=
Subject key identifier: 5D:C0:86:E8:39:F4:1F:CD:AD:7A:10:04:E7:0C:00:49:83:AB:DC:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DBDBA66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XcCG6Dn0H82tehAE5wwASYOr3Fg.roa
Signing time: Sat 18 Jun 2022 08:09:44 +0000
ROA not before: Sat 18 Jun 2022 08:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378021478 (0x8dbdba66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 08:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dc086e839f41fcdad7a1004e70c004983abdc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:03:9d:17:c4:f3:dd:af:b0:a2:31:b2:52:
73:c5:90:d0:31:23:b3:10:f2:8b:a5:a1:62:64:e2:
d0:ec:b2:1f:fd:df:8d:ae:9b:a0:de:df:53:22:2f:
0d:58:1f:18:34:19:44:b3:12:97:e8:b8:91:94:4f:
37:3f:d7:81:e9:f5:e3:b6:75:f8:af:82:a0:5a:9f:
63:a2:7e:86:ff:5f:be:0e:1c:1f:91:c6:58:0f:e0:
30:75:a2:a4:b0:fc:89:a4:c2:b4:2a:da:27:c9:c2:
73:b0:52:0a:96:db:c4:5b:ad:b9:e0:c9:58:94:e9:
d8:29:b4:d9:8e:eb:63:25:57:32:c5:34:91:22:6a:
44:f5:b2:b0:fe:e3:dc:b7:cd:c4:f5:a7:6f:14:33:
61:d5:d9:0e:7f:6d:0a:b9:a5:6c:99:be:39:ab:42:
98:af:db:49:32:69:75:a8:53:f0:fa:ea:1d:a5:a7:
f0:68:0d:e1:00:d6:ca:ee:ec:36:63:6e:7e:a8:51:
80:ea:f6:4d:1f:e1:19:55:e1:a4:5e:a9:50:1b:1f:
9c:87:99:3e:b0:a0:21:d2:4b:c6:51:32:5e:33:b5:
66:36:1f:0f:ba:61:0e:a9:c7:2d:4d:54:df:ad:a0:
96:61:e4:93:a7:b4:0e:72:ba:ef:af:86:fe:6e:a1:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:86:E8:39:F4:1F:CD:AD:7A:10:04:E7:0C:00:49:83:AB:DC:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XcCG6Dn0H82tehAE5wwASYOr3Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:45:fe:e9:a9:7c:ec:da:f5:71:a2:ee:51:4b:02:ec:40:1d:
b7:4b:12:a2:ea:88:43:a6:35:27:17:53:94:17:cd:b7:35:ff:
d2:6e:f1:b2:89:f9:a1:d7:5a:d5:2b:51:59:b4:6a:f5:94:ea:
7f:4d:84:6c:09:c3:ed:fc:ad:43:66:a6:9b:fb:0e:93:72:fa:
cb:e6:df:cd:2e:bb:13:f4:94:a0:f0:9f:d5:05:78:3e:7a:3c:
5d:76:fa:bd:dd:cd:e6:90:9c:6c:d3:be:e5:f1:73:2c:8c:40:
2c:b3:5b:d0:5d:a5:6e:0b:fc:01:c2:6c:0f:ba:60:34:9e:a4:
3a:58:74:32:ab:0e:7e:11:94:01:e4:ee:87:9e:97:23:58:e8:
eb:d4:65:1b:0f:05:bd:13:a5:28:25:a8:7e:c4:2e:77:b3:65:
52:5e:ce:62:9d:00:49:25:af:e2:4d:40:06:ae:22:b6:b3:f2:
96:e5:44:f3:38:13:fc:91:e1:db:4c:06:ea:1f:d4:c0:ea:74:
be:a0:dc:d2:1d:80:7c:4f:6d:83:68:fd:a5:dd:06:0d:c3:ba:
62:50:85:d2:bf:a1:5f:b2:0c:f0:a4:49:41:df:3d:57:2f:c3:
25:41:05:28:4b:c6:7c:b5:14:0d:d8:3a:a3:da:46:07:96:ef:
1d:5d:5e:50
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI29umYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTgwODA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVkYzA4NmU4Mzlm
NDFmY2RhZDdhMTAwNGU3MGMwMDQ5ODNhYmRjNTgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGRQOdF8Tz3a+wojGyUnPFkNAxI7MQ8ouloWJk4tDssh/9
342um6De31MiLw1YHxg0GUSzEpfouJGUTzc/14Hp9eO2dfivgqBan2Oifob/X74O
HB+RxlgP4DB1oqSw/ImkwrQq2ifJwnOwUgqW28RbrbngyViU6dgptNmO62MlVzLF
NJEiakT1srD+49y3zcT1p28UM2HV2Q5/bQq5pWyZvjmrQpiv20kyaXWoU/D66h2l
p/BoDeEA1sru7DZjbn6oUYDq9k0f4RlV4aReqVAbH5yHmT6woCHSS8ZRMl4ztWY2
Hw+6YQ6pxy1NVN+toJZh5JOntA5yuu+vhv5uodUjAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUXcCG6Dn0H82tehAE5wwASYOr3FgwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9YY0NHNkRuMEg4MnRlaEFFNXd3QVNZT3IzRmcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAQ0X+6al87Nr1caLuUUsC7EAdt0sSouqIQ6Y1
JxdTlBfNtzX/0m7xson5odda1StRWbRq9ZTqf02EbAnD7fytQ2amm/sOk3L6y+bf
zS67E/SUoPCf1QV4Pno8XXb6vd3N5pCcbNO+5fFzLIxALLNb0F2lbgv8AcJsD7pg
NJ6kOlh0MqsOfhGUAeTuh56XI1jo69RlGw8FvROlKCWofsQud7NlUl7OYp0ASSWv
4k1ABq4itrPyluVE8zgT/JHh20wG6h/UwOp0vqDc0h2AfE9tg2j9pd0GDcO6YlCF
0r+hX7IM8KRJQd89Vy/DJUEFKEvGfLUUDdg6o9pGB5bvHV1eUA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:10:04 2025 by rpki-client