Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xk_5IJYBjlLbbo2ROq1trAcW_VA.roa
File: Xk_5IJYBjlLbbo2ROq1trAcW_VA.roa (raw, json)
Hash identifier: LpnadIv/D+u0JZyFgE54H/SbW0HKHTg18cbTf5UvCrg=
Subject key identifier: 5E:4F:F9:20:96:01:8E:52:DB:6E:8D:91:3A:AD:6D:AC:07:16:FD:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894A05A62F30D02DF1488227BE9827DD94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xk_5IJYBjlLbbo2ROq1trAcW_VA.roa
Signing time: Wed 12 Jul 2023 12:13:51 +0000
ROA not before: Wed 12 Jul 2023 12:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:05:a6:2f:30:d0:2d:f1:48:82:27:be:98:27:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 12:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e4ff92096018e52db6e8d913aad6dac0716fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:d6:eb:bb:75:d7:2e:ba:ed:16:84:0c:e8:
8d:70:67:0a:39:e6:e1:e5:09:f3:11:d9:3a:04:9b:
3e:9d:51:7d:2f:69:16:79:bb:6f:29:c1:08:87:d1:
93:6c:2a:41:28:d6:bf:a0:10:c6:07:51:27:a7:5e:
e2:dd:ca:83:1b:a8:f2:4d:e2:75:a1:64:d4:ae:ef:
fd:52:3b:02:50:4d:58:7a:51:17:5b:4e:2a:ab:48:
c3:5d:ff:4f:db:f4:6d:18:16:d7:07:5e:a2:d0:4c:
ce:89:c7:3d:b4:2a:03:2c:6d:01:8c:37:1f:b4:c9:
dc:bb:3e:35:45:87:65:3d:6e:a6:4b:51:17:be:e5:
2b:91:43:bb:0f:62:f3:cc:61:50:66:a7:04:7a:20:
70:62:1d:21:c0:88:97:6d:82:88:9d:7f:1a:ba:83:
b9:7d:c0:3a:3f:d6:9b:02:c3:f7:f9:84:4e:97:b2:
17:2d:f3:52:b1:ce:3d:56:4e:80:4a:a9:d7:5d:92:
19:2d:a4:b9:4e:8a:35:4c:e6:06:f0:43:f0:f7:42:
f4:d5:52:41:02:3f:c4:ad:a0:40:22:9d:b4:d5:34:
05:a9:d2:a2:0f:cf:13:58:e5:6f:c5:d2:7f:f0:1d:
bf:cb:f8:4d:c0:1c:09:6c:ec:2c:21:17:51:22:35:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:F9:20:96:01:8E:52:DB:6E:8D:91:3A:AD:6D:AC:07:16:FD:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xk_5IJYBjlLbbo2ROq1trAcW_VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:78:12:0d:2a:72:99:8e:ed:0e:62:f1:3a:8d:f4:f9:10:9b:
7e:61:c2:71:40:da:7f:62:a9:cd:d4:b1:64:8c:8d:3e:bb:67:
f0:a6:39:98:35:00:51:9f:6a:9e:67:6c:1d:c5:d3:6e:27:d2:
cc:fc:f0:04:13:c9:af:6b:fc:3b:ef:59:20:0f:44:dd:ee:f2:
9e:02:b5:4e:1f:cb:ab:cc:c2:ba:f0:07:13:c1:90:e4:90:52:
23:b1:c8:ea:43:c8:8f:20:a2:6a:67:44:83:50:f2:17:b7:62:
2f:f3:a2:29:70:66:21:d8:53:39:98:d2:79:81:84:2b:d4:7a:
e9:51:3f:6e:27:af:ee:93:77:69:15:84:ae:73:cd:34:8d:f1:
c9:8f:47:e8:a2:68:75:04:b0:61:34:39:82:7f:75:f0:3e:95:
40:cf:d0:ba:24:62:30:68:28:3c:bf:9f:6e:bf:fb:27:89:62:
98:90:f8:b1:f4:4d:07:92:40:00:fe:ec:b3:1f:86:c3:39:f5:
c3:fa:69:27:ec:02:99:84:26:76:a0:f6:c1:da:b0:8c:be:7f:
39:5e:44:ff:8d:77:fa:21:2f:36:74:2c:f9:1f:50:cd:68:ad:
cc:a6:58:6e:67:ad:b5:91:a0:07:bd:79:c2:9a:3d:70:5b:43:
df:1b:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:13:20 2025 by rpki-client