Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XlhquEz6Hs0zYyFGj5F01Jfu64g.roa
File: XlhquEz6Hs0zYyFGj5F01Jfu64g.roa (raw, json)
Hash identifier: DKTWZuFQU0btay0pt2zDmikwbKX1TWZLC3O7Pvhd6CQ=
Subject key identifier: 5E:58:6A:B8:4C:FA:1E:CD:33:63:21:46:8F:91:74:D4:97:EE:EB:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A08908C06A91767839360FF34E0673219
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XlhquEz6Hs0zYyFGj5F01Jfu64g.roa
Signing time: Fri 18 Aug 2023 12:13:25 +0000
ROA not before: Fri 18 Aug 2023 12:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:90:8c:06:a9:17:67:83:93:60:ff:34:e0:67:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 12:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e586ab84cfa1ecd336321468f9174d497eeeb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:7e:7c:13:bd:01:27:dd:39:99:4f:9b:72:
6a:4d:a8:04:4a:7a:83:79:cb:f7:ef:52:0e:ef:50:
43:19:44:d7:9d:51:d5:e7:39:e8:ed:12:1b:e4:2d:
5b:5f:f4:3e:ff:2f:cf:39:2a:61:1b:06:26:cc:fa:
d7:4c:c4:27:53:4e:19:8e:71:28:a2:05:8a:52:8d:
28:8f:48:ed:17:a0:37:59:e8:ca:19:48:4e:b6:c0:
b6:02:a6:2a:81:77:25:5a:b0:2a:b4:8e:4a:69:19:
84:31:17:94:07:55:b9:1b:ee:f5:0a:ef:ec:82:b9:
ae:dc:09:82:e0:86:93:48:9c:a3:cf:3f:67:0a:b1:
46:c1:40:6c:c6:8b:3d:82:1c:8c:13:5f:1d:2f:1b:
ab:81:fc:5c:17:60:13:3a:75:00:bc:7f:b6:a6:d2:
7e:6b:62:89:f2:00:47:4c:48:89:70:23:13:1a:44:
67:f2:97:69:4d:b5:b2:3d:da:56:5f:de:6f:5e:04:
d6:e2:aa:eb:8e:35:b8:25:23:79:c9:48:4d:17:88:
a2:70:f5:cb:4b:05:b5:c1:35:5f:e8:3d:cb:9f:ad:
d1:d7:2d:6b:2f:b7:33:7d:5a:76:65:af:91:9e:99:
fa:4d:6e:57:33:bb:cb:11:18:6c:30:ac:ee:87:9c:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:6A:B8:4C:FA:1E:CD:33:63:21:46:8F:91:74:D4:97:EE:EB:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XlhquEz6Hs0zYyFGj5F01Jfu64g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:44:f3:07:2f:1f:d9:ba:b7:79:ed:c2:27:c1:de:cc:52:7e:
34:4c:29:5f:6a:24:53:01:91:d5:4e:27:85:6a:e9:9f:54:68:
aa:76:cc:a2:0d:26:c6:d0:41:6c:1d:7c:04:a5:14:97:a5:9f:
05:71:32:a6:9e:bc:71:08:a2:fe:0c:8c:28:34:8b:cc:4b:41:
f6:16:6f:85:2a:b7:4d:f6:0e:ed:17:b4:a0:6a:8a:f2:a0:84:
f7:b1:f1:03:77:5b:fe:ee:b9:9a:1d:37:d7:ed:ad:58:85:7e:
e6:a9:86:65:28:3c:dc:5f:02:29:c6:4e:da:ec:fc:2c:f4:98:
f2:85:f0:00:76:b4:1d:e8:5c:b5:98:b6:36:fb:c0:fd:cc:9d:
95:ad:80:47:45:25:46:b1:e1:39:b5:f9:16:70:a8:e3:ac:5c:
11:26:a3:2f:b0:68:e6:92:85:4b:96:11:2f:2e:55:09:f8:3b:
a9:f6:a2:6b:5f:30:f5:a1:41:3f:f3:47:d4:84:24:1b:52:54:
c3:62:50:87:01:95:a3:7b:66:79:3f:24:b2:c1:b1:82:52:dd:
ca:c5:5b:10:75:8a:75:1a:81:ef:71:df:61:d1:57:7a:18:4b:
9d:7b:1a:c5:38:8b:c0:1d:ca:50:45:85:8d:b3:48:6a:aa:34:
29:1d:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:41 2025 by rpki-client