Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XqXdWPXAYDoGO9JHzSfBha9Dt8k.roa
File: XqXdWPXAYDoGO9JHzSfBha9Dt8k.roa (raw, json)
Hash identifier: fn8SKhoyAADiybI5I81Irt3bp4EOUQCSJ2jncYxhVBE=
Subject key identifier: 5E:A5:DD:58:F5:C0:60:3A:06:3B:D2:47:CD:27:C1:85:AF:43:B7:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851F8F7BC8C059B58D3DEFD932F581CF4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XqXdWPXAYDoGO9JHzSfBha9Dt8k.roa
Signing time: Sat 17 Dec 2022 10:09:35 +0000
ROA not before: Sat 17 Dec 2022 10:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:8f:7b:c8:c0:59:b5:8d:3d:ef:d9:32:f5:81:cf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 10:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ea5dd58f5c0603a063bd247cd27c185af43b7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:3b:14:84:fe:26:39:11:f1:d4:0c:03:16:
18:10:1d:92:69:5c:ec:d7:1f:c9:a2:d7:35:6d:63:
8d:af:46:98:68:eb:a0:f4:3d:a5:7b:d2:4c:cd:b9:
ae:e4:0e:ba:1d:e0:3c:82:7d:06:16:10:6f:ed:3f:
74:a1:a8:38:f1:cc:3c:06:9f:61:8e:9d:a8:86:a8:
56:63:9a:cc:b1:c4:c2:68:d9:5f:e1:c2:da:f7:8a:
cf:d8:84:92:04:fd:25:81:b1:3b:fd:13:f3:bb:1c:
56:df:5b:d4:55:d4:1c:d4:5d:92:56:73:41:fb:84:
56:2d:ee:af:ea:32:c6:3e:7a:ed:61:1c:68:a0:6c:
de:cd:45:dc:ac:d5:da:7b:71:99:a9:9a:a6:a1:21:
1a:ef:c5:41:32:cb:d9:be:6b:a3:80:91:83:bc:92:
19:16:8f:0f:2c:c1:eb:64:67:8a:70:30:d6:e8:be:
ec:e7:27:86:69:af:98:50:48:df:43:c0:09:b8:07:
21:92:b9:e3:67:22:d6:30:d4:8a:c9:de:33:46:c7:
4d:c3:85:dd:24:8c:9c:b2:ac:52:90:d4:06:59:8d:
f4:36:55:4f:86:3c:ee:99:21:56:08:dd:92:eb:3f:
3d:c3:0f:d6:21:67:10:79:49:53:7c:4d:79:60:3b:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:DD:58:F5:C0:60:3A:06:3B:D2:47:CD:27:C1:85:AF:43:B7:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XqXdWPXAYDoGO9JHzSfBha9Dt8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:70:40:46:5f:5a:38:9d:f8:c7:82:43:83:cc:54:59:c5:aa:
a6:c0:8b:2e:30:ab:6e:58:30:4f:11:29:16:b9:8d:2e:4e:fb:
cb:e9:c0:b4:e3:cb:d5:b9:e5:b9:e2:9e:46:2a:ad:a4:8a:a5:
0e:07:32:52:a2:2d:fe:2b:52:fb:cc:98:9e:33:da:a0:4d:f3:
00:bf:71:d7:1d:ed:ad:00:8d:29:8c:d5:df:55:5e:34:8a:e2:
4b:8d:87:69:a1:15:11:a7:d2:df:eb:83:e8:ce:2f:68:80:fd:
88:da:f2:4b:43:27:33:66:52:d1:da:07:0d:a3:14:24:84:93:
16:ff:35:01:9a:41:e2:f1:fe:af:de:fd:2e:06:c1:34:b9:16:
8d:52:f6:57:1f:ee:e9:d2:36:e7:30:c9:0f:11:58:7b:56:b0:
9f:47:fd:7a:49:45:26:c1:ca:fc:54:62:9b:e2:00:d5:fa:2c:
20:d5:7b:ad:dd:6a:0b:c6:db:4a:bd:e7:e4:c2:b6:c7:65:8c:
53:82:6a:69:52:47:ab:2b:a0:28:3a:ac:6b:96:f2:d2:a5:01:
1d:0e:9e:b1:54:53:27:18:5b:1d:c4:ff:31:c4:fa:fc:d6:18:
82:a6:c4:55:65:49:86:95:e0:32:95:e6:88:16:71:37:81:70:
96:59:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:43:41 2025 by rpki-client