Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XoUdWDyBkPAwcNMhPgbTzG1kvPo.roa
File: XoUdWDyBkPAwcNMhPgbTzG1kvPo.roa (raw, json)
Hash identifier: zt6ATXF3J3muzg8FBJhUvtP5H1TZY+d8SzWK5BD2ZdU=
Subject key identifier: 5E:85:1D:58:3C:81:90:F0:30:70:D3:21:3E:06:D3:CC:6D:64:BC:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189812278722BBBA65DD3E947FC0A17AC98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XoUdWDyBkPAwcNMhPgbTzG1kvPo.roa
Signing time: Sun 23 Jul 2023 05:04:27 +0000
ROA not before: Sun 23 Jul 2023 05:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:8122:6bbe/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:22:78:72:2b:bb:a6:5d:d3:e9:47:fc:0a:17:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 05:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e851d583c8190f03070d3213e06d3cc6d64bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:31:f9:45:9d:4b:53:0c:5d:73:9a:0f:d0:
51:69:e1:92:a1:e4:0b:cf:4a:de:6e:ba:05:ed:50:
26:50:52:98:e7:1b:4d:58:44:c8:b4:15:9c:fd:b3:
8b:4f:19:63:00:57:0a:96:c7:4c:df:c5:6f:4e:ac:
3d:9f:05:7d:cd:8c:dc:24:d0:2b:45:e9:a2:61:36:
b5:a4:c9:74:fc:86:f6:26:d7:60:f8:84:d5:ae:84:
d2:1a:e6:32:9a:d6:2d:f9:ac:57:d7:b5:74:9a:d0:
e8:e4:f5:0d:0c:b6:59:ca:de:16:d3:a5:f5:a0:1f:
41:66:73:21:73:1f:f1:02:70:4c:bf:eb:d6:3c:63:
63:ff:50:7e:5a:41:83:2b:67:72:f4:04:ea:bf:83:
ff:f5:27:20:d1:e1:cd:48:61:04:40:a5:18:81:48:
42:18:9c:12:c6:d5:e1:50:af:a2:a6:1a:39:57:6e:
8d:68:62:f0:1e:3b:3d:6e:4d:c6:cf:e8:9b:07:23:
0a:08:d5:5b:75:78:89:9c:80:f9:c0:40:86:dc:b4:
59:21:6d:dc:24:77:d9:b7:02:fd:97:78:50:3e:a1:
ea:6e:1d:a4:46:1b:b2:0c:08:48:8b:c8:48:9b:46:
96:d4:7f:bc:0e:7c:e7:dd:fd:58:1a:cd:e2:ed:0a:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:1D:58:3C:81:90:F0:30:70:D3:21:3E:06:D3:CC:6D:64:BC:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XoUdWDyBkPAwcNMhPgbTzG1kvPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:8a:3a:ce:8a:45:d6:c0:d0:51:79:ad:2f:5b:b0:97:48:56:
12:b9:ca:87:ea:6e:36:3c:3c:87:5a:82:e7:9e:9c:3f:af:c3:
3e:f5:18:b0:7d:1a:9c:2e:d5:75:48:9c:8e:58:7c:b6:09:11:
f4:b6:87:3a:9d:6c:ac:d8:e4:72:a4:7a:9a:24:84:fb:b7:e2:
b8:42:80:71:ef:34:a5:e5:10:8b:b9:d4:f1:7d:6b:30:1f:66:
78:5c:40:6c:e8:28:62:42:19:4c:69:84:16:03:11:6c:07:e9:
b9:a8:0c:0a:1e:e9:8d:05:b1:39:76:be:43:80:3b:e0:a6:9e:
d9:3f:99:3b:61:20:98:73:20:22:71:23:37:ff:44:29:59:53:
40:a3:9c:ae:78:be:89:f4:e3:7a:2e:8b:1c:06:74:b1:25:77:
ce:38:e2:1d:4e:8f:7c:eb:85:94:18:d2:63:b9:e7:6f:de:28:
1a:12:2b:e2:16:51:70:a3:c7:e3:28:19:4b:11:22:8d:ac:77:
f4:27:32:a8:c0:5a:1c:f8:00:72:79:da:bf:9f:46:76:5f:48:
63:7e:59:79:da:52:f9:2d:a2:8f:52:31:09:5e:89:6d:20:0b:
51:14:91:84:b2:87:d7:db:a2:f0:2b:88:97:4c:16:ca:57:c1:
45:22:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client