Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XpbuksE1kw4hymjTpQwrSdSGOqA.roa
File: XpbuksE1kw4hymjTpQwrSdSGOqA.roa (raw, json)
Hash identifier: mhmxgLAH0/Hxub2M9sEg/NHcEFKnIo6Y1N4n5hKnVlQ=
Subject key identifier: 5E:96:EE:92:C1:35:93:0E:21:CA:68:D3:A5:0C:2B:49:D4:86:3A:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018284A377F9C144EB1E4BF4305C19F013DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XpbuksE1kw4hymjTpQwrSdSGOqA.roa
Signing time: Tue 09 Aug 2022 22:04:41 +0000
ROA not before: Tue 09 Aug 2022 22:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:84a3:1a1d/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:a3:77:f9:c1:44:eb:1e:4b:f4:30:5c:19:f0:13:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 22:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e96ee92c135930e21ca68d3a50c2b49d4863aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:d4:e1:32:48:04:72:2f:b4:c4:9e:12:8a:
94:97:f7:77:6d:6d:e0:a7:be:be:ce:ac:e9:c7:04:
fe:99:d8:b1:19:8a:96:94:7b:ab:b6:4b:fd:de:f1:
7e:c4:e5:7f:e4:09:60:95:10:5f:32:05:6b:10:29:
53:6f:d2:16:c2:08:81:5c:6d:42:a4:29:57:8d:ab:
29:e1:d2:0c:d1:3e:1d:d1:06:3f:95:1e:c3:61:52:
03:a4:c8:f8:d4:df:29:55:a1:ce:37:08:11:88:16:
86:7f:f1:60:27:e2:f6:0c:d7:ff:a6:e5:19:d7:3a:
3c:9d:64:9d:07:f7:92:1e:96:13:cf:1d:b3:97:e8:
a4:1d:81:89:c9:af:2c:2e:7d:7b:f9:2c:fd:a7:4a:
f3:2e:b2:7f:07:35:a6:13:ec:fb:ef:cb:c4:be:a0:
22:87:11:e5:ea:d8:ed:7f:f6:cd:f3:aa:c6:80:8a:
8f:e4:57:f7:8d:1c:6b:f2:d6:71:2f:37:c4:a7:3a:
fd:cc:d9:e2:ce:34:d6:c0:fe:0c:d6:33:ac:93:d6:
b9:d2:21:b3:f8:e7:7d:3c:74:8a:33:b2:c0:ee:84:
25:a0:ae:4c:5c:7c:69:8e:99:db:68:17:ad:24:bc:
08:02:ea:73:be:87:8b:0c:8b:76:e1:e8:49:10:13:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:EE:92:C1:35:93:0E:21:CA:68:D3:A5:0C:2B:49:D4:86:3A:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XpbuksE1kw4hymjTpQwrSdSGOqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2c:5a:f8:67:48:4a:99:d2:d1:15:34:c7:23:fd:0d:45:ba:
ff:9a:d4:e5:1f:e9:59:7a:f5:23:b4:e8:03:30:a7:0a:5a:d3:
fa:87:bd:32:b1:bd:92:28:d6:2d:98:f5:dd:66:d4:18:47:16:
64:f0:4d:08:3d:fa:a7:d9:71:73:0e:61:11:b6:42:f4:3e:6f:
a5:30:5f:ba:ad:ed:c4:9e:f1:67:48:6b:c9:ec:a1:78:72:54:
3f:06:46:2a:c6:6a:25:37:69:25:e7:24:95:9a:d5:8e:3e:3a:
eb:52:d3:10:90:c0:c1:d3:cf:60:c9:85:1f:b3:9c:23:a5:76:
bd:e2:d1:79:7d:a5:0d:b7:9c:2e:66:a3:43:31:a5:30:73:ee:
29:6f:3e:46:af:e4:fa:0f:27:85:18:0b:b1:94:08:92:a3:16:
fd:2c:c6:18:b0:81:3f:c6:b1:79:e1:a2:89:ad:68:e3:e8:12:
e9:b5:1b:08:eb:e9:19:67:d6:2b:a5:38:f7:bf:ea:4a:c4:5d:
8e:84:54:66:40:9f:c4:c2:4d:98:7b:fb:07:95:94:58:92:60:
4f:2f:ce:0e:33:a1:d5:8e:4e:0c:9e:14:86:89:15:27:3f:46:
f5:8e:50:e3:63:c0:04:d1:5e:f6:99:3f:d7:f9:b4:9c:40:c1:
65:6a:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:51:21 2025 by rpki-client