Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xiky5OwFMq_rMTrbozqdlt3LMS8.roa
File: Xiky5OwFMq_rMTrbozqdlt3LMS8.roa (raw, json)
Hash identifier: WqqGAODauVsP/vsVruKyx6QI/Q1RQuZ52W7F9if7t1M=
Subject key identifier: 5E:29:32:E4:EC:05:32:AF:EB:31:3A:DB:A3:3A:9D:96:DD:CB:31:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879A475FBE570F445BB8B365C20D3FF883
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xiky5OwFMq_rMTrbozqdlt3LMS8.roa
Signing time: Wed 19 Apr 2023 16:09:41 +0000
ROA not before: Wed 19 Apr 2023 16:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:47:5f:be:57:0f:44:5b:b8:b3:65:c2:0d:3f:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 16:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e2932e4ec0532afeb313adba33a9d96ddcb312f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:d0:da:2c:76:13:30:3c:73:7d:ee:7e:6b:
4d:f4:cf:93:da:59:93:c3:62:89:11:c2:73:bd:40:
60:5a:25:dd:0f:d8:10:00:dd:f7:a1:aa:96:90:50:
bd:c8:bc:79:ae:d4:ba:7e:35:3a:ce:8a:24:9a:b4:
f3:8a:10:c4:a0:5a:39:d4:36:cb:94:ed:f4:6b:b6:
29:ed:33:3c:7b:7e:fa:36:01:dd:af:5b:cf:68:39:
73:ec:30:bc:13:7c:86:c6:a6:6d:b2:54:27:2f:10:
69:f8:b5:c5:56:08:ee:3f:35:8b:5c:a8:a5:93:c4:
f1:0a:8e:11:91:22:fa:75:ce:b7:23:18:26:b0:d3:
d9:36:80:64:d4:3e:48:69:0d:8f:b1:22:99:cc:ae:
f9:f8:ca:de:cf:20:08:92:f9:db:35:ee:64:76:94:
38:50:49:1b:f8:fe:0d:b2:e4:5a:0c:e6:42:a3:85:
af:f4:2f:a9:8f:ac:bd:d0:5c:eb:d1:c1:cc:dc:92:
48:36:8b:2c:13:05:be:93:df:a3:35:49:ff:a2:74:
6b:86:5c:f7:a8:ec:51:d3:5b:1e:7d:d3:75:ab:b5:
26:6d:a6:5d:99:fa:de:b3:b5:27:48:7c:a8:79:62:
ce:ba:fa:90:da:85:80:43:dc:a6:c7:50:32:b1:ff:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:32:E4:EC:05:32:AF:EB:31:3A:DB:A3:3A:9D:96:DD:CB:31:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xiky5OwFMq_rMTrbozqdlt3LMS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:9b:8a:19:5e:16:41:e6:9b:a6:83:ba:2d:17:1d:a4:80:00:
f6:5c:b8:5e:08:e5:d6:05:68:95:ff:e2:ad:32:7f:53:0e:b1:
d1:b1:df:2e:6f:59:a6:e7:ec:57:2f:a0:70:45:70:9e:76:42:
77:a5:24:40:d4:e9:c3:3c:95:b6:b1:20:76:ae:92:6e:51:cf:
8c:af:f0:ad:bf:38:88:7d:00:b5:29:c0:b6:0d:14:8a:bc:63:
89:1d:38:39:8d:6d:58:e0:3d:b4:01:9b:c0:42:c5:75:b8:10:
3f:53:2f:ae:54:87:0e:86:ae:19:25:4e:bf:58:8e:5d:03:c1:
aa:4f:b4:e0:b7:f0:ff:60:19:77:ff:26:a9:68:94:a3:2a:26:
93:7c:73:a6:82:c5:2d:f3:c8:8d:78:8b:81:47:7d:44:54:9f:
71:95:4b:bb:c5:c3:1c:57:c9:33:f7:7a:39:d1:cd:b3:ed:e6:
32:f7:2d:6b:ca:96:b3:76:72:38:c8:97:1e:f0:1e:38:01:3e:
40:9b:54:7b:03:56:a4:4d:4f:a8:b8:0b:07:74:74:9f:2f:fc:
28:6b:9a:70:f1:bb:bc:0c:ca:7c:e9:a9:fd:90:b1:59:42:1b:
61:33:f3:cc:89:10:39:dc:ab:38:ae:ee:71:48:89:fe:ee:4c:
4f:54:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:47:27 2025 by rpki-client