Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjVkZqKlaIEoVEjrLrxcafFW7lI.roa
File: XjVkZqKlaIEoVEjrLrxcafFW7lI.roa (raw, json)
Hash identifier: ntRCg7DU7n71W9KQh5DrqjL4UrUHiYeUcA59WuZzBQg=
Subject key identifier: 5E:35:64:66:A2:A5:68:81:28:54:48:EB:2E:BC:5C:69:F1:56:EE:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865948DE6E5002892BDCE631A0896547AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjVkZqKlaIEoVEjrLrxcafFW7lI.roa
Signing time: Thu 16 Feb 2023 08:13:13 +0000
ROA not before: Thu 16 Feb 2023 08:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:48:de:6e:50:02:89:2b:dc:e6:31:a0:89:65:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 08:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e356466a2a56881285448eb2ebc5c69f156ee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:7b:02:9c:b8:37:b4:e0:08:14:30:d5:38:
d2:76:5b:94:d8:03:96:62:9b:c1:08:11:3a:86:a7:
f3:78:15:a7:49:c5:c8:8b:29:d4:03:0a:5c:c6:10:
7c:b9:d3:fb:f2:ff:43:15:78:37:bc:af:33:07:d1:
91:c3:d3:b1:3c:86:71:21:fe:3a:a8:67:a5:b3:96:
22:e9:13:b8:d8:9b:55:67:75:48:50:1a:fb:94:26:
1c:57:3e:a3:7b:1a:35:7d:cb:44:c8:69:8c:6b:d3:
73:1d:c1:86:44:c7:49:a4:16:b7:08:da:51:22:0a:
cb:e3:3b:0a:f4:86:d5:f6:21:fd:3e:c3:b8:d3:b3:
3d:e5:75:99:93:93:f7:d9:67:ce:9d:4f:51:cf:e6:
85:f1:93:37:54:93:a6:5b:59:30:92:ce:a1:a2:b6:
3a:92:78:ed:5f:ff:9a:f8:d0:ff:34:e5:99:6a:d6:
75:f8:f1:45:60:bc:77:87:b4:3a:89:f1:75:16:27:
06:70:9b:8e:f2:fe:dc:33:ff:c9:69:82:25:3e:7e:
ca:a3:82:02:d4:9a:17:03:4e:cf:a0:ac:f1:f1:13:
27:db:95:d8:b0:85:0f:89:b5:6a:2f:27:93:2c:2b:
0a:1c:2a:34:5f:84:76:bc:30:7a:df:c9:63:88:2b:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:64:66:A2:A5:68:81:28:54:48:EB:2E:BC:5C:69:F1:56:EE:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjVkZqKlaIEoVEjrLrxcafFW7lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:55:93:76:ae:68:fe:ab:5b:cd:1b:44:51:b9:67:37:e1:64:
ae:b7:0f:7f:c8:4e:48:1d:f9:fb:3d:45:e9:ac:c0:d9:b7:c9:
82:7d:f0:bb:e6:b5:49:88:69:67:8c:b1:7d:b0:90:c8:94:a0:
6c:b4:8b:83:f5:95:3e:7a:ad:3d:d0:b0:3f:79:a9:e0:bb:ca:
b2:a7:de:d1:9a:64:78:ce:ad:f5:16:8a:48:00:0f:df:b1:4b:
3a:07:1b:fc:df:6d:d1:75:df:f1:d0:e0:d4:df:e9:02:c0:f1:
3a:11:11:77:11:8c:88:32:ec:f2:09:12:96:b4:41:46:b6:7b:
76:1b:a2:70:84:29:cf:64:e5:91:85:cd:42:2c:07:52:c7:18:
f1:78:b5:da:0a:61:5a:54:c4:9e:38:22:44:5a:e5:c1:92:ce:
53:e4:45:f2:f7:6b:2c:0d:16:72:77:8e:e9:3b:57:1c:01:19:
26:38:20:50:77:6d:7c:c1:6a:b8:a6:bf:b2:84:86:43:c0:89:
25:ed:73:1d:c0:33:2f:da:f3:e6:b7:5f:aa:f5:1b:bf:e5:c6:
74:a6:c5:7d:7d:38:34:1f:8b:ef:9f:9c:49:e4:7d:3d:9e:ee:
8c:a3:cc:f9:67:ee:c5:6b:51:0a:1f:d2:49:09:67:34:c1:ee:
ba:31:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:15:19 2025 by rpki-client