Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XombKDCLxZ9vDJ5YMPuwAm6tajQ.roa
File: XombKDCLxZ9vDJ5YMPuwAm6tajQ.roa (raw, json)
Hash identifier: qEfqQeCwKTgpMyWujcL3aCd6DdHhIyb0v8rG+OuzaH8=
Subject key identifier: 5E:89:9B:28:30:8B:C5:9F:6F:0C:9E:58:30:FB:B0:02:6E:AD:6A:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018728F6B5FE28FCE2B3B81E91A525CCE5EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XombKDCLxZ9vDJ5YMPuwAm6tajQ.roa
Signing time: Tue 28 Mar 2023 16:04:29 +0000
ROA not before: Tue 28 Mar 2023 16:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:28f6:7316/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:f6:b5:fe:28:fc:e2:b3:b8:1e:91:a5:25:cc:e5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 16:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e899b28308bc59f6f0c9e5830fbb0026ead6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:9d:49:9e:6f:b1:48:d2:fd:30:70:84:09:
72:f1:f9:d2:2d:2f:c0:da:36:ff:40:99:18:45:ce:
6d:0d:20:ad:7e:3c:c9:fb:36:52:4b:90:e8:dc:e0:
07:07:8e:6b:90:62:58:23:ce:1a:a1:0e:f3:04:cd:
0b:4d:b4:ba:16:a7:13:01:fd:ce:8f:33:22:87:a2:
94:87:7c:d4:6d:2b:10:ed:85:7f:d0:63:e7:b6:21:
01:c5:af:a7:40:62:3b:07:95:d4:c3:3e:c1:88:76:
42:a5:9c:7b:8f:b3:e9:57:e4:e5:e4:9a:54:00:48:
51:6e:77:51:8e:b9:57:ac:2c:7b:b8:29:cb:b3:3b:
90:d8:71:33:51:4b:35:e7:5c:35:65:80:1a:a7:60:
ba:1b:e9:91:1b:a8:d4:8f:32:1e:50:33:5c:3a:d7:
54:86:23:85:5e:51:11:a2:a0:67:78:7c:3d:e2:f6:
22:95:61:1a:37:b3:48:c1:32:26:4f:59:25:52:13:
10:26:1d:a7:03:d1:91:59:7f:3f:a7:d3:42:6a:98:
6f:1c:dc:7a:36:02:0d:17:6e:6f:ef:21:10:7f:de:
6b:86:42:0e:16:96:6f:7a:3d:a4:8b:b7:da:4c:c1:
b9:1a:ee:2e:ff:e9:c6:11:a8:32:7c:b4:0d:73:ba:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:9B:28:30:8B:C5:9F:6F:0C:9E:58:30:FB:B0:02:6E:AD:6A:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XombKDCLxZ9vDJ5YMPuwAm6tajQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:0e:bd:97:9a:07:4b:6d:d7:a8:a1:ad:d3:e3:f9:62:77:e4:
5b:0c:d6:33:00:8f:81:18:a3:c9:8d:e8:70:62:af:b8:43:17:
ea:ed:04:fd:62:f5:2a:6c:ba:0d:42:95:fe:e2:9e:a9:24:2c:
a8:75:06:0c:6d:df:87:e3:50:34:9e:84:fd:68:e7:c0:63:98:
cc:16:08:03:34:94:6e:2e:dc:86:cd:89:45:53:b7:22:ad:87:
6a:b2:0d:36:39:ae:49:5c:39:a3:c7:f6:6f:c5:99:cd:62:df:
26:47:8e:b4:17:6d:8c:31:6e:18:a1:ac:27:53:54:14:54:b4:
73:dd:0a:5b:97:1a:41:c8:74:f2:78:7b:ad:fe:40:14:7b:2a:
20:4a:2a:73:ae:b4:b4:9a:8d:ce:55:d8:ae:2a:3d:c8:63:1a:
7e:d3:07:a7:2a:f2:f1:e5:a1:52:10:71:c5:f4:73:e0:c7:85:
4d:f6:94:75:7c:6e:cb:7d:65:54:52:f4:2d:dc:04:fe:32:38:
ff:23:b8:3b:37:7b:0c:eb:ab:0e:99:68:68:33:2c:2a:9d:d1:
a2:e0:00:90:23:35:69:4d:0e:06:c2:22:56:26:a1:38:35:fb:
ea:f6:fb:42:ca:ff:27:d6:9d:82:6d:47:1d:08:5a:95:b8:42:
44:9b:cc:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYco9rX+KPzis7gekaUlzOXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI4MTYwNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTg5OWIyODMwOGJjNTlmNmYwYzllNTgzMGZiYjAwMjZlYWQ2YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzOdSZ5vsUjS/TBwhAly8fnSLS/A
2jb/QJkYRc5tDSCtfjzJ+zZSS5Do3OAHB45rkGJYI84aoQ7zBM0LTbS6FqcTAf3O
jzMih6KUh3zUbSsQ7YV/0GPntiEBxa+nQGI7B5XUwz7BiHZCpZx7j7PpV+Tl5JpU
AEhRbndRjrlXrCx7uCnLszuQ2HEzUUs151w1ZYAap2C6G+mRG6jUjzIeUDNcOtdU
hiOFXlERoqBneHw94vYilWEaN7NIwTImT1klUhMQJh2nA9GRWX8/p9NCaphvHNx6
NgINF25v7yEQf95rhkIOFpZvej2ki7faTMG5Gu4u/+nGEagyfLQNc7rnrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF6Jmygwi8WfbwyeWDD7sAJurWo0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWG9tYktEQ0x4Wjl2REo1WU1QdXdBbTZ0YWpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIQOvZeaB0tt16ihrdPj
+WJ35FsM1jMAj4EYo8mN6HBir7hDF+rtBP1i9Spsug1Clf7inqkkLKh1Bgxt34fj
UDSehP1o58BjmMwWCAM0lG4u3IbNiUVTtyKth2qyDTY5rklcOaPH9m/Fmc1i3yZH
jrQXbYwxbhihrCdTVBRUtHPdCluXGkHIdPJ4e63+QBR7KiBKKnOutLSajc5V2K4q
PchjGn7TB6cq8vHloVIQccX0c+DHhU32lHV8bst9ZVRS9C3cBP4yOP8juDs3ewzr
qw6ZaGgzLCqd0aLgAJAjNWlNDgbCIlYmoTg1++r2+0LK/yfWnYJtRx0IWpW4QkSb
zJk=
-----END CERTIFICATE-----
Generated at Thu May 1 14:28:23 2025 by rpki-client