Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xeitadds__FxbD9zwtyXW7JvsB4.roa
File: Xeitadds__FxbD9zwtyXW7JvsB4.roa (raw, json)
Hash identifier: Tn7JUdu0HccdEvxrmqFnqutb67pylfFY0aLSex+PYtA=
Subject key identifier: 5D:E8:AD:69:D7:6C:FF:F1:71:6C:3F:73:C2:DC:97:5B:B2:6F:B0:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B96F68D9873B5DB33BC62496371D0CD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xeitadds__FxbD9zwtyXW7JvsB4.roa
Signing time: Sun 27 Nov 2022 14:13:16 +0000
ROA not before: Sun 27 Nov 2022 14:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b9:6f:68:d9:87:3b:5d:b3:3b:c6:24:96:37:1d:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 14:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5de8ad69d76cfff1716c3f73c2dc975bb26fb01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:8b:b1:16:f1:04:f9:6c:a3:cc:3c:cc:08:
8d:b7:80:a0:b6:4b:e5:ae:3f:ef:1a:0e:f5:51:05:
d6:d3:1a:78:fe:02:23:31:c9:db:1f:84:c5:ad:30:
d2:cc:83:76:b0:ef:c3:83:f1:bb:e0:02:cb:83:29:
81:2d:89:ca:d0:ca:7e:0e:7a:fa:b5:94:da:a5:e3:
8b:d6:ce:e8:fa:42:ce:1b:c4:1e:57:b9:0a:aa:60:
29:a1:54:45:79:e1:7d:f6:4c:67:db:d8:5f:b6:04:
12:f2:d8:33:6a:84:e7:69:bb:a6:4d:b6:8f:81:9e:
f7:f1:32:eb:33:29:11:43:b7:dc:05:73:a3:48:17:
8d:43:58:20:39:98:c8:7f:53:45:2d:44:98:5c:57:
8e:21:a9:ca:7c:36:a5:72:89:bf:52:5e:60:cc:14:
d9:76:69:02:d7:34:2d:dc:fe:26:f6:c2:67:e2:96:
3d:c0:de:46:bc:54:e7:e5:07:72:a7:7c:fa:4c:da:
d8:23:1b:8e:f4:0f:e7:bc:3e:3e:a4:c6:76:38:fc:
f5:50:25:0c:ae:31:8f:d5:15:22:05:85:f9:48:a6:
0c:27:b0:11:9a:07:b4:31:09:af:b1:02:26:8f:2f:
ba:a8:79:5e:46:39:77:dc:32:3e:a3:e5:7c:c6:d3:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:AD:69:D7:6C:FF:F1:71:6C:3F:73:C2:DC:97:5B:B2:6F:B0:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xeitadds__FxbD9zwtyXW7JvsB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:73:1b:c6:47:a7:1e:52:4c:b5:ca:8c:27:c3:80:02:f5:93:
f1:c2:44:3d:6a:98:e4:f4:ab:56:72:3d:fd:97:7b:e5:de:74:
81:00:48:c3:40:8a:51:4c:51:9f:c4:52:97:ee:1f:cf:70:75:
4c:62:50:97:a2:0c:85:e9:7d:ad:fa:72:c9:ab:0b:69:ca:29:
22:2b:c6:85:35:b4:4d:f9:fb:a3:73:1a:79:30:81:87:55:ce:
b3:6c:5c:bd:d7:18:e0:fa:37:e5:20:bc:a6:57:72:66:6c:a9:
e1:a9:95:db:b7:60:55:2b:16:e6:c2:63:3a:dd:27:03:db:5a:
56:64:19:42:8b:e1:c6:44:09:bf:e7:70:57:ce:c2:ad:28:63:
d1:64:05:26:bc:c1:e8:03:a3:47:78:92:bd:a6:26:82:0d:42:
24:be:b2:7d:e4:a5:bf:7c:37:69:21:6c:c3:15:56:2b:82:51:
4b:d4:dc:15:2e:91:44:f1:16:62:1f:ea:4c:93:82:cc:5b:48:
3f:e0:7c:d6:04:51:ea:77:71:d1:bb:f1:f4:be:e7:7e:d7:af:
b0:d9:70:cc:0a:77:a4:00:9a:1b:96:6f:27:dc:44:b2:64:dd:
e3:f9:38:0d:ec:cf:15:d3:0d:3d:aa:23:55:ad:e1:46:68:fb:
12:4b:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:52:50 2025 by rpki-client