Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XrICoMCi0bmyAM_V3ra3p9Au4ow.roa
File: XrICoMCi0bmyAM_V3ra3p9Au4ow.roa (raw, json)
Hash identifier: uM9ep2HP8BlrLAiLYxDZI2mFIse/xPi/unXdU10QfKo=
Subject key identifier: 5E:B2:02:A0:C0:A2:D1:B9:B2:00:CF:D5:DE:B6:B7:A7:D0:2E:E2:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F3F5534F974CB625CDE2A1CBF7EA3FC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XrICoMCi0bmyAM_V3ra3p9Au4ow.roa
Signing time: Mon 14 Aug 2023 12:11:28 +0000
ROA not before: Mon 14 Aug 2023 12:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:f5:53:4f:97:4c:b6:25:cd:e2:a1:cb:f7:ea:3f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 12:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eb202a0c0a2d1b9b200cfd5deb6b7a7d02ee28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:55:80:7d:32:4b:88:dd:6a:8a:88:1c:38:
9e:77:55:9c:04:b2:df:70:e1:0b:4e:d4:ed:e5:e3:
18:d8:f8:9d:47:59:85:c5:14:69:90:d4:fa:d9:58:
2e:ae:fc:20:c0:15:d6:3d:be:0c:5c:17:20:95:e4:
ff:c3:c1:b4:50:a5:89:fe:0d:bf:6f:f1:e0:b9:78:
0a:22:2e:ac:e8:ff:e7:c4:c6:9b:22:33:0b:73:9b:
4f:76:c8:d7:6c:0c:4b:98:43:9e:ff:a1:93:a3:ff:
a7:44:8e:99:be:54:0f:f8:8f:20:58:3f:14:b2:b9:
78:a7:8f:e5:62:c6:98:5a:5f:4f:ca:6c:c6:99:56:
b4:50:57:05:96:b2:74:9c:e3:dc:ed:38:d5:ed:6f:
60:52:94:93:bc:f3:2c:f3:7b:99:ff:af:eb:82:36:
d1:42:dc:14:52:96:c2:26:e4:bf:06:62:dc:90:34:
49:43:b5:25:af:0c:e0:d9:7f:10:25:3b:b7:31:df:
0e:42:f8:bf:0a:53:8a:d8:3e:31:da:a6:98:25:51:
a7:3d:a7:a0:d5:81:58:8d:67:68:da:00:6e:d0:a9:
d3:47:c4:d2:20:1b:5f:63:9a:b2:f0:c3:b6:a0:e8:
ac:cd:39:2d:7d:87:0b:d0:b1:d4:8d:7c:5b:1a:16:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:02:A0:C0:A2:D1:B9:B2:00:CF:D5:DE:B6:B7:A7:D0:2E:E2:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XrICoMCi0bmyAM_V3ra3p9Au4ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:e9:4e:a5:92:0b:c5:62:66:35:d7:43:ee:20:71:a8:cf:90:
20:4d:53:38:c6:43:64:b4:ba:d4:1b:87:f4:e9:05:a7:31:c2:
43:68:e3:5d:fe:14:61:1d:c8:b7:ed:d1:cd:29:b9:ff:1e:ff:
c1:97:44:24:27:b1:76:a0:1f:a1:a9:60:0f:be:15:54:1a:09:
24:29:c2:4b:1f:f3:2d:7f:c3:30:e9:96:34:0a:4d:9a:ba:e6:
de:b3:dd:fe:c4:79:7d:7e:3f:9e:f8:c5:ba:35:9d:de:5e:3d:
a0:5e:df:c7:a8:26:c7:30:7a:e7:1a:dc:93:f9:af:2c:b2:8e:
d1:15:dc:17:54:55:1d:a4:a4:7e:ba:46:7e:7e:8a:67:1a:3a:
cd:3d:09:94:8c:93:bf:f0:c5:89:1a:4d:8d:8f:42:d3:19:b3:
c8:be:0f:b9:80:b1:be:80:0c:8b:5e:2e:fc:59:61:bb:c9:72:
46:d1:4a:51:29:f0:d2:c3:0b:76:16:a8:ff:53:2a:b1:be:9b:
e0:c0:7f:fc:8e:f2:19:89:21:01:06:df:3e:03:a7:cb:78:d5:
28:9a:b7:08:c6:da:41:1c:c1:18:72:e9:7a:d1:e7:50:3e:08:
82:d1:75:b1:0c:a3:c0:fc:66:c8:57:c0:7a:6f:73:c0:4e:6b:
3a:af:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:50:43 2025 by rpki-client