Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xp97z69okL9wp4l00L2z9_O6Vew.roa
File: Xp97z69okL9wp4l00L2z9_O6Vew.roa (raw, json)
Hash identifier: uhVsvBUCmJOh94dcmaAx9RZ3Evx5ZLZdKQlcT6lR3YQ=
Subject key identifier: 5E:9F:7B:CF:AF:68:90:BF:70:A7:89:74:D0:BD:B3:F7:F3:BA:55:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E7F393030EF7F7DE1F4186F58FA3908F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xp97z69okL9wp4l00L2z9_O6Vew.roa
Signing time: Thu 04 May 2023 18:08:32 +0000
ROA not before: Thu 04 May 2023 18:08:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:f3:93:03:0e:f7:f7:de:1f:41:86:f5:8f:a3:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 18:08:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e9f7bcfaf6890bf70a78974d0bdb3f7f3ba55ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:88:9c:0e:b4:48:a9:6a:eb:6c:96:8e:45:
f1:d8:8d:e8:08:bd:b7:85:c4:d0:d1:f8:91:82:9b:
ac:5a:69:bf:e6:96:1f:f3:d9:58:47:27:41:2e:7f:
e6:88:0b:06:58:e6:29:e1:e8:eb:43:9f:79:a1:df:
14:98:eb:6f:3e:6e:64:c8:8a:b8:cd:6b:dd:86:ca:
8e:89:67:6f:86:cb:73:3c:83:58:60:b2:e5:fa:a1:
c4:03:8c:1a:f1:48:43:22:e2:8d:9b:42:94:73:cb:
9a:3b:b0:f6:59:c9:c3:b1:5d:03:4f:48:04:9e:5e:
73:84:4f:75:88:4c:3d:09:4b:3a:d0:6e:3f:63:67:
81:65:9f:3e:fd:e2:93:bf:57:67:09:23:67:6f:57:
ca:e2:e1:46:fe:b4:12:70:61:59:a4:e3:41:06:3c:
73:ec:8e:f0:ce:2e:72:c6:6b:2a:f6:79:a9:0d:3b:
38:81:a2:cb:44:ac:57:20:9f:6a:a8:76:72:82:34:
5c:93:d7:d5:4b:f5:0c:db:0a:23:d4:5d:d7:51:ff:
50:00:88:74:e8:4b:21:bf:e1:1a:4d:95:49:81:0e:
77:c5:16:14:5b:54:7b:a9:46:eb:bd:43:3e:01:e5:
1c:2d:de:ab:3f:d2:a5:a5:1b:6c:45:3e:1f:03:9c:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9F:7B:CF:AF:68:90:BF:70:A7:89:74:D0:BD:B3:F7:F3:BA:55:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xp97z69okL9wp4l00L2z9_O6Vew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:75:da:ce:4f:95:b5:a7:7c:92:9b:3f:28:cc:60:a7:c2:ee:
81:88:34:83:ff:23:a4:e3:dd:c9:38:3e:23:79:a4:b7:07:84:
ff:03:c9:57:49:cf:fe:77:af:a9:b3:01:55:81:10:fe:1c:7a:
fa:44:87:91:59:ad:0c:fa:06:b6:4e:91:39:e7:95:c6:57:ea:
bf:90:31:f2:10:b9:ef:50:9a:1d:cf:7c:cd:77:9c:da:61:8f:
55:b9:68:11:23:91:b3:b5:2f:1f:4f:6f:33:22:21:13:cd:08:
93:02:ee:f8:f3:da:c3:ff:76:56:31:94:9c:a2:2d:8c:7d:a1:
d9:63:8b:5e:50:a8:4d:cd:0f:0c:36:40:9b:94:79:48:3a:57:
95:87:f5:19:5c:36:27:9b:fa:d9:2e:30:38:8d:61:45:bf:db:
49:62:2a:60:f4:70:40:b8:59:b2:d0:0e:ac:73:54:4e:df:67:
50:f6:20:f2:44:7e:eb:16:54:36:d0:7b:9d:0e:e9:36:27:3c:
e4:99:ae:ec:ee:da:ae:8f:17:51:ec:1f:93:ec:3c:f8:4b:c9:
be:3b:0c:ba:4e:13:f0:ed:cc:29:4a:60:ac:42:07:98:77:6c:
49:3d:0b:b2:83:18:41:6b:16:fc:43:d9:3e:1a:50:79:2a:fe:
9d:58:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:41 2025 by rpki-client