Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XrEqfsUQ5cCrb8-_pRZ3mMfhUbk.roa
File: XrEqfsUQ5cCrb8-_pRZ3mMfhUbk.roa (raw, json)
Hash identifier: LV4z/cjngX82RzCpy2sZ1afpSi6jL368fLfFyF39ZAI=
Subject key identifier: 5E:B1:2A:7E:C5:10:E5:C0:AB:6F:CF:BF:A5:16:77:98:C7:E1:51:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D5FAE04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XrEqfsUQ5cCrb8-_pRZ3mMfhUbk.roa
Signing time: Thu 24 Feb 2022 16:21:18 +0000
ROA not before: Thu 24 Feb 2022 16:21:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834987012 (0x6d5fae04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 16:21:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eb12a7ec510e5c0ab6fcfbfa5167798c7e151b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:55:47:e0:eb:c1:76:89:cf:0f:2d:6f:75:
c5:94:a5:47:e8:5f:4f:2e:2d:f9:6f:cb:4d:ce:63:
ca:11:42:f6:1f:36:db:a7:82:07:f6:aa:20:90:ee:
01:e8:b6:fe:b9:d1:58:ce:e0:db:37:a4:dd:99:5d:
64:8f:91:86:7a:39:21:bf:5a:d6:96:9b:78:a2:2b:
b5:37:3d:b9:9b:03:6a:38:df:9b:49:2c:87:05:c5:
f5:ae:cd:ec:65:bb:41:c3:89:10:30:a7:ae:92:95:
d4:67:9f:fd:80:6f:4a:08:06:2b:4a:75:3b:9c:70:
ff:50:74:9c:70:3e:a1:e8:86:22:df:3e:1a:f3:9b:
99:83:5f:72:2e:90:38:a0:6d:14:49:32:2e:59:15:
dc:df:31:38:92:07:73:9b:4b:b5:df:c7:0c:3d:1b:
9a:15:d9:41:47:c0:47:3f:51:28:96:8f:2d:78:c7:
8a:16:94:7c:ec:61:55:01:01:b6:b3:b2:77:a4:ce:
cf:72:16:21:cf:49:ab:4a:04:2d:71:8e:25:cd:8f:
3a:25:56:c6:0c:4f:65:cc:06:b3:bf:4f:33:aa:bb:
b2:ab:81:21:97:c5:e3:13:36:24:b5:cc:51:00:56:
f9:f6:22:3f:d1:42:22:7a:c8:a2:92:ce:04:2d:4d:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:2A:7E:C5:10:E5:C0:AB:6F:CF:BF:A5:16:77:98:C7:E1:51:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XrEqfsUQ5cCrb8-_pRZ3mMfhUbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:ee:8c:af:62:0b:c7:b5:4a:df:6b:a5:ef:69:18:97:34:f0:
93:65:c9:f2:da:1b:bb:7a:0e:51:83:67:3c:7d:70:38:bb:6e:
d6:60:50:86:66:54:10:7b:1c:97:b1:71:6f:c3:2e:a4:b7:86:
20:c5:b0:4f:b1:8d:0b:49:a5:2c:ee:31:81:9b:0b:27:26:d0:
a1:56:d8:90:76:bc:55:cd:18:2f:f6:db:db:51:86:91:a2:f3:
ec:2f:97:19:18:26:58:75:ca:8a:d0:68:d8:53:2f:5f:b5:98:
01:1a:a3:d5:48:f8:c8:83:b8:5b:45:5d:04:2b:f6:d7:1e:d0:
64:fe:05:b5:74:db:2a:cf:1f:0e:d7:fd:76:f2:ce:01:2a:c7:
68:d0:a3:a6:75:14:a5:c7:c7:30:dc:ce:e9:38:23:cb:92:3a:
2d:a1:85:7f:21:c0:a5:3a:61:22:a7:2a:7e:15:c7:12:be:40:
c4:0c:f9:99:fd:ae:79:cb:2e:c5:66:a1:d0:47:aa:83:0a:28:
76:d3:63:7c:c3:d5:63:c3:7e:91:8e:69:45:8c:eb:1e:73:ea:
33:7e:c6:3d:6b:ad:16:25:a8:f7:c2:87:4e:1a:b2:1d:02:52:
4a:5e:2c:e4:7f:2d:b2:a0:51:fd:ce:85:d3:00:b9:ab:e9:8b:
2c:aa:65:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbV+uBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NDE2MjExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWViMTJhN2VjNTEw
ZTVjMGFiNmZjZmJmYTUxNjc3OThjN2UxNTFiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANPVVUfg68F2ic8PLW91xZSlR+hfTy4t+W/LTc5jyhFC9h82
26eCB/aqIJDuAei2/rnRWM7g2zek3ZldZI+Rhno5Ib9a1pabeKIrtTc9uZsDajjf
m0kshwXF9a7N7GW7QcOJEDCnrpKV1Gef/YBvSggGK0p1O5xw/1B0nHA+oeiGIt8+
GvObmYNfci6QOKBtFEkyLlkV3N8xOJIHc5tLtd/HDD0bmhXZQUfARz9RKJaPLXjH
ihaUfOxhVQEBtrOyd6TOz3IWIc9Jq0oELXGOJc2POiVWxgxPZcwGs79PM6q7squB
IZfF4xM2JLXMUQBW+fYiP9FCInrIopLOBC1NsUMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBResSp+xRDlwKtvz7+lFneYx+FRuTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1hyRXFmc1VRNWNDcmI4LV9wUlozbU1maFViay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAS7oyvYgvHtUrfa6XvaRiXNPCTZcny2hu7eg5R
g2c8fXA4u27WYFCGZlQQexyXsXFvwy6kt4YgxbBPsY0LSaUs7jGBmwsnJtChVtiQ
drxVzRgv9tvbUYaRovPsL5cZGCZYdcqK0GjYUy9ftZgBGqPVSPjIg7hbRV0EK/bX
HtBk/gW1dNsqzx8O1/128s4BKsdo0KOmdRSlx8cw3M7pOCPLkjotoYV/IcClOmEi
pyp+FccSvkDEDPmZ/a55yy7FZqHQR6qDCih202N8w9Vjw36RjmlFjOsec+ozfsY9
a60WJaj3wodOGrIdAlJKXizkfy2yoFH9zoXTALmr6YssqmWm
-----END CERTIFICATE-----
Generated at Thu May 1 01:56:14 2025 by rpki-client