Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XglKX_i1c6P1Xkz3R81WOnh1JEc.roa
File: XglKX_i1c6P1Xkz3R81WOnh1JEc.roa (raw, json)
Hash identifier: sj/pdTfCceQ38ik/HyVUZ+2ErrssVAeN7I1bSBvfnX0=
Subject key identifier: 5E:09:4A:5F:F8:B5:73:A3:F5:5E:4C:F7:47:CD:56:3A:78:75:24:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847568F7157F246A59C68E3434E016865E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XglKX_i1c6P1Xkz3R81WOnh1JEc.roa
Signing time: Mon 14 Nov 2022 09:12:04 +0000
ROA not before: Mon 14 Nov 2022 09:12:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:68:f7:15:7f:24:6a:59:c6:8e:34:34:e0:16:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 14 09:12:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e094a5ff8b573a3f55e4cf747cd563a78752447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:38:19:bd:ba:e5:e6:b5:73:e3:59:9f:32:
1e:6f:f5:57:57:15:7d:02:50:d5:d8:17:80:54:14:
b8:81:8b:60:9c:3c:35:01:21:0d:05:e4:46:12:21:
b2:d7:a9:bb:9a:ae:76:1d:af:f2:0f:d2:6b:11:c9:
8d:52:e9:64:c0:54:6a:64:c6:ef:bc:06:f1:6d:0f:
01:60:6e:2a:3c:b0:b3:63:4b:8f:ca:fa:3d:a3:49:
78:58:0e:80:2c:62:34:ae:3e:2c:b5:4f:1f:e0:7d:
01:88:b3:3e:3e:a0:ae:22:06:9e:63:42:83:f8:6d:
fc:bf:b3:f6:57:5e:66:ad:28:e7:c5:d1:d5:3a:e6:
9c:a6:de:18:66:1c:4a:2d:9b:fe:d9:4a:ba:1a:b8:
62:13:00:21:8e:c6:38:83:f0:26:f2:e9:aa:1c:0a:
cb:e1:a4:6f:17:d0:9c:15:4d:6b:ca:cf:17:d7:57:
c8:97:85:59:4c:f2:af:fb:7f:cb:94:31:2f:8b:53:
50:7c:40:03:1f:16:98:58:30:01:d5:fe:85:1f:75:
fb:a2:c8:59:fe:2a:ae:99:6d:5a:8f:c3:6f:04:35:
5b:88:07:a4:b1:b3:3a:a4:3b:c7:3a:3e:5d:f5:3e:
4a:5d:e0:41:25:1d:49:98:6c:90:86:bc:db:ff:09:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:09:4A:5F:F8:B5:73:A3:F5:5E:4C:F7:47:CD:56:3A:78:75:24:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XglKX_i1c6P1Xkz3R81WOnh1JEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:64:13:be:b8:08:15:d0:67:c2:37:20:c5:ef:7c:0c:a8:ac:
22:d7:ff:70:f0:8f:8a:08:9c:c9:13:02:71:8f:be:5e:ff:17:
a9:48:65:6f:47:7d:76:8d:f0:bf:e5:de:1f:e7:ce:42:77:0c:
d3:a4:23:fd:86:69:70:a9:ac:c4:d8:ae:cf:70:c8:51:90:e4:
c4:f4:c5:45:05:69:c9:2a:fb:1c:76:61:3c:87:92:c8:18:6e:
12:66:a0:cd:fb:44:d8:d1:96:7c:24:ba:1f:62:01:28:f8:b0:
1f:c5:92:87:d2:28:6a:3b:ca:0b:eb:ee:7f:08:cc:b3:0c:67:
ea:0a:50:af:b7:9f:b3:94:c9:48:4a:1e:b0:7a:30:43:f0:33:
a9:7b:a0:69:66:97:f2:32:aa:9a:51:7c:28:0d:6a:4a:b5:16:
f3:04:4d:67:e7:a3:fb:8b:42:79:a3:8e:82:cc:a7:a0:4a:84:
17:28:e3:e4:ec:d0:bd:e0:6c:0f:36:31:3d:93:cd:32:07:e7:
18:b7:f8:2c:28:73:92:61:6b:b3:c6:76:a2:67:56:92:ea:ed:
fc:da:00:64:5e:ec:4c:0e:35:1e:fd:93:b2:b9:0d:9d:b2:cb:
0c:8e:12:24:7c:9e:74:ab:91:b9:75:78:5c:21:1b:8e:2c:e1:
27:10:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:22 2025 by rpki-client