Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjjC4JwKJAywAGB0dE4x0vQZHKM.roa
File: XjjC4JwKJAywAGB0dE4x0vQZHKM.roa (raw, json)
Hash identifier: d6i/EDujLSKPUCfpLC0fBV5MFmWDOJyjregHb8y5UxE=
Subject key identifier: 5E:38:C2:E0:9C:0A:24:0C:B0:00:60:74:74:4E:31:D2:F4:19:1C:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018567362DFD5ECADCC0D77DD8B83F2474EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjjC4JwKJAywAGB0dE4x0vQZHKM.roa
Signing time: Sat 31 Dec 2022 08:04:42 +0000
ROA not before: Sat 31 Dec 2022 08:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6735:c365/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:67:36:2d:fd:5e:ca:dc:c0:d7:7d:d8:b8:3f:24:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 08:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e38c2e09c0a240cb0006074744e31d2f4191ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:ad:8e:e1:88:fa:3a:52:b5:03:d3:84:bb:
41:b6:b4:60:e6:11:49:74:df:0c:4a:0a:80:cf:5e:
d3:b3:10:e3:2d:a0:70:26:47:2e:6c:1e:d9:ee:32:
69:53:60:1f:71:ab:43:24:fe:81:11:72:be:ff:9c:
36:4e:af:43:fb:34:ca:77:69:ad:8a:c5:e9:4e:7f:
20:19:8e:3d:97:41:48:1b:3f:4d:3a:3a:2c:54:e0:
37:05:c3:08:22:dd:d2:18:82:ee:0e:73:b1:b6:ec:
28:3e:71:cd:ee:bd:0b:e9:ea:8d:58:36:27:34:c0:
3b:b4:21:91:0d:b7:de:6a:0e:9a:b4:4d:d6:cc:da:
b2:e4:26:f9:f0:43:94:6b:7d:dd:3a:ce:4e:80:4c:
ef:b4:f4:40:bb:1e:2f:18:43:a2:cf:46:42:8b:6b:
cc:8c:df:63:46:30:5b:09:f2:dd:31:9f:ba:63:c9:
15:c0:b5:94:2c:eb:cc:d9:40:9b:a8:09:43:ba:f9:
f4:99:63:81:a7:58:14:38:2b:2e:63:99:bf:c1:24:
bf:89:ca:fb:e7:16:14:c8:88:68:86:95:ed:ed:64:
0d:03:f3:90:a9:ea:07:24:15:0b:c3:d3:8a:35:c8:
6b:a9:c3:f4:9a:fa:c0:2a:22:d6:7a:0b:09:c0:87:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:C2:E0:9C:0A:24:0C:B0:00:60:74:74:4E:31:D2:F4:19:1C:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjjC4JwKJAywAGB0dE4x0vQZHKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:e2:9a:91:e5:eb:d7:66:e8:0b:c9:a1:8c:7a:b0:dd:f6:fe:
1a:39:1a:fd:8d:b6:59:ca:90:36:cc:16:63:5d:5d:38:42:84:
7a:c5:06:ed:de:83:0c:95:06:06:dc:7e:38:8e:69:8e:6e:26:
2b:2f:1e:cc:c7:b8:e8:98:50:a6:8c:e7:19:dd:c5:44:96:9d:
75:2b:df:fb:6a:92:59:86:19:ee:be:8e:30:9e:87:85:d5:bc:
88:f8:96:67:54:c2:31:4d:35:b9:58:a8:22:38:61:df:0c:a1:
c7:70:1e:5e:59:6c:e4:58:b0:3f:ef:93:43:02:62:de:e8:a9:
a5:d2:b6:e4:01:22:e2:bd:92:da:0c:2d:6e:93:0e:53:6e:38:
46:b1:58:c6:4d:16:fd:9b:60:51:45:b5:03:26:31:cf:05:3e:
3b:b9:b7:5a:72:ca:3e:3c:cb:c5:8d:cd:88:28:d9:79:96:a1:
c7:96:0a:d6:00:64:58:3d:1a:26:83:d6:ee:8d:8c:73:6a:3b:
9e:7c:f0:bc:51:b4:41:06:2f:a9:7e:b1:49:36:48:6f:a3:16:
42:99:9e:e7:32:10:98:15:61:ed:d8:ea:2e:72:44:a1:ca:5a:
1a:27:c2:a4:59:2d:3d:8f:52:d6:60:fb:c9:c7:3d:4f:e6:cd:
c9:48:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:37:02 2025 by rpki-client