Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XpcpE3QG-HoUKaR3K2Nu67n1p_0.roa
File: XpcpE3QG-HoUKaR3K2Nu67n1p_0.roa (raw, json)
Hash identifier: gpRU4gR57mtkRpe+gZk2LijyRV4ABapaHFMsgBIKRwM=
Subject key identifier: 5E:97:29:13:74:06:F8:7A:14:29:A4:77:2B:63:6E:EB:B9:F5:A7:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898762CECD35F48B0A026BB37FB09866BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XpcpE3QG-HoUKaR3K2Nu67n1p_0.roa
Signing time: Mon 24 Jul 2023 10:12:26 +0000
ROA not before: Mon 24 Jul 2023 10:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:62:ce:cd:35:f4:8b:0a:02:6b:b3:7f:b0:98:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 10:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e9729137406f87a1429a4772b636eebb9f5a7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:9c:d2:06:30:db:69:77:4b:6f:78:29:02:
08:bc:2f:b1:73:2f:0c:c5:93:5c:5a:27:00:75:ab:
e3:59:99:15:1b:18:32:17:87:85:72:e8:92:cd:e5:
83:25:ab:e8:27:9c:e0:db:20:8b:c9:af:2e:ff:19:
45:a6:48:47:72:ed:09:e4:68:2e:ae:7a:df:31:0a:
b0:84:2f:b4:b2:0d:97:c0:83:94:32:6b:52:3c:46:
4c:fc:91:14:da:58:8a:a5:18:fe:e9:ef:86:c7:23:
bd:21:22:36:1c:e1:92:77:50:c6:43:63:64:6b:47:
1d:52:23:cf:14:bc:83:fd:1a:76:71:c2:e8:96:3e:
c0:af:4c:2c:07:95:08:79:40:b0:e4:ac:08:c8:82:
92:d7:fd:87:e1:44:cc:f0:e9:44:9b:3d:22:7a:8e:
3e:2a:59:ca:7e:64:c3:86:a9:78:9e:de:a8:60:fc:
4d:67:f0:35:8a:13:39:7c:08:a1:0b:5e:f9:74:8f:
64:54:97:e4:93:19:62:ab:e3:e7:a0:bf:9f:d7:0e:
06:8a:bf:a0:0d:19:e6:8d:94:6d:cd:63:87:1a:4f:
6b:e9:c2:d6:e6:2e:c2:3a:09:50:b3:bf:e9:c2:c1:
8b:94:b0:75:1d:a1:2e:ee:6a:ae:59:cc:da:01:ee:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:29:13:74:06:F8:7A:14:29:A4:77:2B:63:6E:EB:B9:F5:A7:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XpcpE3QG-HoUKaR3K2Nu67n1p_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:ab:49:82:d8:7b:e5:87:8b:ee:bb:cc:f3:a0:5f:96:f9:e4:
12:98:37:92:2a:2b:f1:ba:01:3a:6b:a0:65:0e:1a:68:e2:93:
98:3f:e6:49:21:7e:3e:39:df:08:e4:b9:45:02:bd:26:53:d7:
41:75:2a:1e:f8:5f:34:d6:b5:7e:db:52:d0:95:dd:8b:13:75:
ba:25:cb:83:d6:00:dd:64:f0:57:e8:2f:2c:1c:d8:e8:35:ca:
07:c4:fc:9e:bd:ac:9b:c8:04:df:41:40:f7:fb:aa:10:59:d2:
8f:6d:e1:99:01:4f:f4:0d:cb:7d:ef:3d:27:77:1c:d3:fd:4b:
29:3b:a8:f0:6e:fc:d1:ee:e8:36:57:84:4c:54:98:84:a6:1a:
b2:17:e4:33:73:4a:eb:15:fc:fc:fc:33:bf:d0:3a:1f:04:9f:
7e:d5:e2:ae:52:06:9d:fb:e6:31:cb:06:bc:bf:52:bf:32:85:
ca:9e:8c:b1:c3:83:25:a4:de:e0:28:dc:31:6c:e6:95:d9:b6:
cf:dc:8b:ee:ed:0e:13:03:62:ca:17:a5:ca:1e:72:2d:fe:8e:
7b:62:ba:0b:9a:e2:94:56:74:30:ad:5c:3d:9e:e4:d4:29:ae:
36:49:e0:9c:47:29:02:e7:71:94:42:36:45:34:2d:59:62:29:
6e:3e:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:07:30 2025 by rpki-client