Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XqN2mZeczL-v4YMxRPj38V_4wFc.roa
File: XqN2mZeczL-v4YMxRPj38V_4wFc.roa (raw, json)
Hash identifier: ZMibVLnyKly6mJ7Dph72aMptEBJa4m6zh8SipQNdPfM=
Subject key identifier: 5E:A3:76:99:97:9C:CC:BF:AF:E1:83:31:44:F8:F7:F1:5F:F8:C0:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B44D864CF928E9293F9C918ACDED3227
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XqN2mZeczL-v4YMxRPj38V_4wFc.roa
Signing time: Fri 07 Oct 2022 21:15:22 +0000
ROA not before: Fri 07 Oct 2022 21:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b4:4d:86:4c:f9:28:e9:29:3f:9c:91:8a:cd:ed:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 7 21:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ea37699979cccbfafe1833144f8f7f15ff8c057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:15:d3:db:1c:99:5b:a2:9f:dc:7f:1a:cb:
6c:94:64:78:4c:d9:16:b1:75:1e:18:74:bc:d5:4f:
d3:a3:39:5c:f9:10:5f:f2:93:2f:5a:f7:c6:7e:d1:
51:e7:06:6c:08:2c:58:74:61:0c:dc:ec:31:cf:38:
17:6e:a9:85:69:e2:45:10:2f:72:79:ee:6d:e6:b4:
2d:67:4f:f2:8b:8e:ac:b7:8b:44:a9:4e:c3:95:04:
c3:94:37:c6:62:be:ad:95:56:67:79:2a:ea:5f:37:
eb:c1:fb:0f:1c:90:9f:df:86:ec:99:6e:5f:f8:e8:
ae:72:7e:42:2f:16:25:9e:e9:6e:c2:c3:45:9b:e2:
28:a7:ea:c8:6e:9d:26:1f:ef:d7:bc:ca:f5:c9:48:
88:6c:ce:61:19:f0:f8:b4:dd:58:60:d3:77:0c:6d:
a6:6d:a9:d0:c5:9d:b3:c3:73:67:ed:ed:af:81:ad:
02:f7:02:c9:2b:ac:3f:e2:41:12:b0:d6:9e:8f:50:
6f:82:fa:3b:9f:a8:a4:34:80:ba:1b:42:e4:48:c2:
02:c0:df:47:64:ad:b9:4b:c2:07:fd:e6:e3:7c:b5:
eb:7d:91:5e:1c:8e:6d:6c:65:a8:3e:db:61:e8:5e:
63:f3:8c:30:fa:85:45:37:ce:0b:ff:e2:18:de:38:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:76:99:97:9C:CC:BF:AF:E1:83:31:44:F8:F7:F1:5F:F8:C0:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XqN2mZeczL-v4YMxRPj38V_4wFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:42:49:26:24:8b:9b:dc:fe:0e:c7:13:b6:7a:73:23:b3:f5:
d6:e1:68:ed:1e:50:da:81:90:bb:c6:64:cb:7a:57:e6:a0:19:
6b:45:b7:2a:08:72:8f:fd:4e:35:61:b8:8f:6e:cf:6e:7e:4d:
49:07:97:a7:d1:2d:88:84:a0:06:41:bd:53:69:96:ae:06:45:
17:ae:97:aa:f6:1c:6e:25:fb:b0:6e:c1:1f:31:53:90:35:3d:
cf:06:20:6b:39:5e:4e:32:93:e4:a9:22:88:f1:66:a4:74:11:
f0:f5:19:29:06:c7:09:53:13:2b:de:44:ed:0d:cd:98:d2:2f:
c1:fc:8d:7b:05:73:94:9e:17:b0:ba:06:0f:6c:94:02:ea:d8:
64:e0:6a:b6:16:4c:b6:96:ad:58:e0:81:8b:d7:b4:42:3f:2a:
ee:bf:90:3e:d9:8a:25:8a:20:23:87:5e:41:ae:59:2b:0a:94:
09:f8:9e:bd:ce:e9:fd:28:2f:df:20:7e:3c:30:4e:89:ac:37:
3c:3b:d4:53:bf:85:a5:ef:a0:dc:bd:67:1b:e2:94:6b:10:4a:
d4:32:8a:f8:76:42:b8:91:15:28:5e:c9:34:b1:b8:91:5b:90:
60:f4:ba:2a:eb:23:42:57:32:8e:0a:b3:a9:f6:90:a5:fa:24:
83:a5:d6:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO0TYZM+SjpKT+ckYrN7TInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA3MjExNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWEzNzY5OTk3OWNjY2JmYWZlMTgzMzE0NGY4ZjdmMTVmZjhjMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMgV09scmVuin9x/GstslGR4TNkW
sXUeGHS81U/Tozlc+RBf8pMvWvfGftFR5wZsCCxYdGEM3OwxzzgXbqmFaeJFEC9y
ee5t5rQtZ0/yi46st4tEqU7DlQTDlDfGYr6tlVZneSrqXzfrwfsPHJCf34bsmW5f
+Oiucn5CLxYlnuluwsNFm+Iop+rIbp0mH+/XvMr1yUiIbM5hGfD4tN1YYNN3DG2m
banQxZ2zw3Nn7e2vga0C9wLJK6w/4kESsNaej1Bvgvo7n6ikNIC6G0LkSMICwN9H
ZK25S8IH/ebjfLXrfZFeHI5tbGWoPtth6F5j84ww+oVFN84L/+IY3jhvDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF6jdpmXnMy/r+GDMUT49/Ff+MBXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWHFOMm1aZWN6TC12NFlNeFJQajM4Vl80d0ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKNCSSYki5vc/g7HE7Z6
cyOz9dbhaO0eUNqBkLvGZMt6V+agGWtFtyoIco/9TjVhuI9uz25+TUkHl6fRLYiE
oAZBvVNplq4GRReul6r2HG4l+7BuwR8xU5A1Pc8GIGs5Xk4yk+SpIojxZqR0EfD1
GSkGxwlTEyveRO0NzZjSL8H8jXsFc5SeF7C6Bg9slALq2GTgarYWTLaWrVjggYvX
tEI/Ku6/kD7ZiiWKICOHXkGuWSsKlAn4nr3O6f0oL98gfjwwTomsNzw71FO/haXv
oNy9ZxvilGsQStQyivh2QriRFSheyTSxuJFbkGD0uirrI0JXMo4Ks6n2kKX6JIOl
1k4=
-----END CERTIFICATE-----
Generated at Thu May 1 00:10:32 2025 by rpki-client