Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjtSYvauFoWkzrMX-s6SxH64Mi0.roa
File: XjtSYvauFoWkzrMX-s6SxH64Mi0.roa (raw, json)
Hash identifier: fcQDqr1xdzUL+7K7IAOgHufayz9Qzu2Jj4vUt3FlRBI=
Subject key identifier: 5E:3B:52:62:F6:AE:16:85:A4:CE:B3:17:FA:CE:92:C4:7E:B8:32:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A397EB4433BFF3355D67C2E40F3366475
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjtSYvauFoWkzrMX-s6SxH64Mi0.roa
Signing time: Mon 28 Aug 2023 00:15:19 +0000
ROA not before: Mon 28 Aug 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:39:7e:b4:43:3b:ff:33:55:d6:7c:2e:40:f3:36:64:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e3b5262f6ae1685a4ceb317face92c47eb8322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:24:75:72:29:1a:22:c4:65:68:6e:e6:af:
00:93:a7:dd:05:c1:98:7e:0e:75:ac:dc:d2:db:b9:
13:ec:af:a3:9a:1c:f5:aa:06:94:1f:fe:a3:23:7c:
61:f7:2a:03:b3:53:7b:e6:f0:9a:87:49:b7:70:ef:
e7:df:4c:45:ca:44:b4:8d:8c:e3:34:b4:47:13:4d:
4e:c3:f1:00:09:c3:5d:2f:44:2c:53:cd:ca:61:07:
93:75:9b:3d:df:50:f7:a6:08:ce:f4:7b:88:0a:47:
5d:74:71:90:3e:97:02:27:55:11:a4:40:8a:c6:f7:
8b:23:92:7a:74:69:80:87:5c:27:34:e2:7f:8c:ea:
d2:97:1e:ca:5c:08:0a:00:31:a3:6d:41:e3:55:ab:
1c:b0:1a:45:7a:dc:94:b9:97:75:3a:6c:f3:5d:01:
6f:4a:0f:7b:d7:6a:23:95:e5:d9:86:48:14:22:8a:
cd:2c:42:a2:92:e8:c1:2d:47:e7:11:16:9c:2a:f2:
2e:2f:f9:62:db:ca:24:5c:d3:f0:58:36:98:73:6d:
4f:35:c7:81:02:6b:53:01:01:25:50:80:d6:fb:25:
e9:71:51:8c:79:21:45:fc:85:28:d7:38:d2:3e:db:
55:25:3c:a3:d7:0c:44:4f:f7:2a:b0:d5:b5:3b:4a:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3B:52:62:F6:AE:16:85:A4:CE:B3:17:FA:CE:92:C4:7E:B8:32:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XjtSYvauFoWkzrMX-s6SxH64Mi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:8e:96:f5:5c:2c:97:20:c7:ab:cd:a9:a5:1d:84:02:9c:c4:
22:39:1f:3c:7d:13:1f:05:0a:66:72:b2:68:cc:a6:1b:80:63:
3e:e7:e2:a1:6f:72:25:0d:f5:b5:ae:89:6d:54:8f:21:bd:74:
58:c2:7c:12:6f:35:82:5b:cf:49:1b:42:07:63:ae:a5:3b:e0:
b9:60:4b:00:20:e2:44:07:60:b1:db:55:fc:79:fb:cd:6b:65:
df:87:03:67:9e:60:5d:16:1c:ce:10:88:b4:d5:0f:fc:be:a2:
2f:f6:21:05:0d:db:00:ca:8b:21:dd:27:c6:8f:e7:24:25:ab:
26:34:b3:78:2c:29:bb:f2:26:73:a5:7c:1e:70:53:bb:dd:09:
6c:ec:2c:2e:01:3c:56:0b:ec:c6:e6:8e:cf:c3:ca:db:48:da:
54:f1:66:f1:a5:71:b2:66:47:54:67:39:ad:32:8c:ff:0f:48:
ac:41:1d:2b:ff:3a:14:ad:d5:69:80:c8:c2:a5:9e:b3:8b:54:
1e:dc:1c:1b:19:5f:6e:8f:b2:b7:0f:42:8d:27:00:b0:59:13:
b9:8b:1c:33:86:12:31:78:b5:8b:a5:2d:47:b5:89:fb:50:f3:
a4:5a:dd:32:a7:d3:96:3e:fd:00:cb:28:78:c0:1e:08:2b:52:
fa:73:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:30:46 2025 by rpki-client