Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XhAKbbJrrLJFLsIzsFXgDkfPY5U.roa
File: XhAKbbJrrLJFLsIzsFXgDkfPY5U.roa (raw, json)
Hash identifier: 0dbi3XYP5GgDqwnPpk83ZUaOnZhfpMI2bwfXy3UKcy8=
Subject key identifier: 5E:10:0A:6D:B2:6B:AC:B2:45:2E:C2:33:B0:55:E0:0E:47:CF:63:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AEDC662A906E3022D13DA48548572582
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XhAKbbJrrLJFLsIzsFXgDkfPY5U.roa
Signing time: Tue 01 Aug 2023 02:10:26 +0000
ROA not before: Tue 01 Aug 2023 02:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ae:dc:66:2a:90:6e:30:22:d1:3d:a4:85:48:57:25:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 02:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e100a6db26bacb2452ec233b055e00e47cf6395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:06:0a:f9:17:70:68:18:07:b7:79:a8:2b:f4:
94:51:f6:3f:ed:be:06:a8:bc:ee:68:eb:89:1e:12:
f3:19:4d:61:b4:d6:1e:9b:ac:37:b8:3a:cf:c4:73:
c6:84:2e:a5:72:4a:5e:b5:24:4b:56:42:12:50:f8:
f6:2a:92:17:38:ed:01:85:17:9a:e2:61:ae:e8:72:
c1:34:cf:62:df:37:40:a0:f1:3d:32:53:74:ef:d3:
68:dc:94:a5:d6:13:d5:dd:8d:6e:b1:e1:c0:d9:ff:
2d:fe:74:df:06:3c:76:c8:de:87:7c:c1:56:10:cc:
a7:65:77:fa:90:1f:ff:23:cc:10:e2:f9:69:4d:2c:
35:e6:8e:5b:6e:cd:2c:62:20:21:be:e2:df:1b:ee:
10:df:31:97:f7:a5:fd:42:19:ae:de:8d:b8:9e:bb:
86:44:14:d5:6f:1e:44:ea:82:57:c1:c3:79:c8:d5:
b5:71:39:ba:5a:85:98:53:70:92:8b:1e:7f:e8:d8:
9a:b0:ac:6b:01:4b:6e:01:eb:12:a7:c0:21:b3:fe:
8a:ff:0a:c7:97:dc:05:d2:f1:aa:ec:12:70:9b:a4:
6d:4d:a0:fd:67:e5:e3:c3:11:d7:ed:88:14:e7:33:
d6:72:dc:6e:eb:ca:61:1f:fb:9a:1e:54:53:77:c1:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:0A:6D:B2:6B:AC:B2:45:2E:C2:33:B0:55:E0:0E:47:CF:63:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XhAKbbJrrLJFLsIzsFXgDkfPY5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:71:3f:6a:df:06:c3:f4:e7:aa:8d:35:65:81:50:5b:8f:2a:
99:a1:3d:16:78:fe:01:61:43:9d:da:24:47:97:57:64:68:27:
9b:8d:1d:2a:e0:d6:9f:0a:0e:11:72:09:13:ea:5e:87:e7:86:
7d:3b:d5:d0:58:e5:cb:bd:26:65:4c:d2:e8:c5:cd:ba:e3:e3:
42:a0:1b:c3:6c:6b:b7:14:99:fc:54:a0:29:56:b8:84:be:d9:
70:2a:4b:3a:12:02:23:2f:e6:b5:59:55:25:be:15:8e:57:37:
13:8b:63:8e:e4:15:4f:76:8a:ee:ce:c7:37:b2:2e:3c:da:79:
77:69:61:24:c6:1f:ff:b2:00:38:b4:dc:f8:b8:f5:11:ad:54:
27:68:79:b0:66:3f:83:2a:b4:69:aa:2e:c4:7f:2e:66:59:98:
84:a3:8e:56:f8:a3:85:eb:52:08:d0:c4:a9:05:db:72:93:12:
ac:d6:ae:0c:e1:e3:26:02:a5:0f:f7:ea:a2:a5:e7:f1:43:9f:
34:94:c2:ec:39:e4:25:51:62:31:4c:a9:86:7e:f5:70:e3:6d:
c7:b7:38:71:eb:9e:26:7e:87:39:0b:10:7d:cd:60:7d:44:57:
61:3c:40:1a:3f:7a:4b:b5:9f:6e:8f:ea:2e:09:37:29:a1:3d:
f2:81:d3:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmu3GYqkG4wItE9pIVIVyWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAxMDIxMDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTEwMGE2ZGIyNmJhY2IyNDUyZWMyMzNiMDU1ZTAwZTQ3Y2Y2Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggYK+RdwaBgHt3moK/SUUfY/7b4G
qLzuaOuJHhLzGU1htNYem6w3uDrPxHPGhC6lckpetSRLVkISUPj2KpIXOO0BhRea
4mGu6HLBNM9i3zdAoPE9MlN079No3JSl1hPV3Y1useHA2f8t/nTfBjx2yN6HfMFW
EMynZXf6kB//I8wQ4vlpTSw15o5bbs0sYiAhvuLfG+4Q3zGX96X9Qhmu3o24nruG
RBTVbx5E6oJXwcN5yNW1cTm6WoWYU3CSix5/6NiasKxrAUtuAesSp8Ahs/6K/wrH
l9wF0vGq7BJwm6RtTaD9Z+XjwxHX7YgU5zPWctxu68phH/uaHlRTd8H+jQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF4QCm2ya6yyRS7CM7BV4A5Hz2OVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWGhBS2JiSnJyTEpGTHNJenNGWGdEa2ZQWTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHNxP2rfBsP056qNNWWB
UFuPKpmhPRZ4/gFhQ53aJEeXV2RoJ5uNHSrg1p8KDhFyCRPqXofnhn071dBY5cu9
JmVM0ujFzbrj40KgG8Nsa7cUmfxUoClWuIS+2XAqSzoSAiMv5rVZVSW+FY5XNxOL
Y47kFU92iu7OxzeyLjzaeXdpYSTGH/+yADi03Pi49RGtVCdoebBmP4MqtGmqLsR/
LmZZmISjjlb4o4XrUgjQxKkF23KTEqzWrgzh4yYCpQ/36qKl5/FDnzSUwuw55CVR
YjFMqYZ+9XDjbce3OHHrniZ+hzkLEH3NYH1EV2E8QBo/eku1n26P6i4JNymhPfKB
0xs=
-----END CERTIFICATE-----
Generated at Thu May 1 06:48:52 2025 by rpki-client