Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xrv1V7xJxE0H3Z0FA9xRDxkjeok.roa
File: Xrv1V7xJxE0H3Z0FA9xRDxkjeok.roa (raw, json)
Hash identifier: wS7kgEjF6qRzMN7FcAoaOWr7zf80IVade6JR6Cu7mcE=
Subject key identifier: 5E:BB:F5:57:BC:49:C4:4D:07:DD:9D:05:03:DC:51:0F:19:23:7A:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86A041B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xrv1V7xJxE0H3Z0FA9xRDxkjeok.roa
Signing time: Mon 23 May 2022 15:12:29 +0000
ROA not before: Mon 23 May 2022 15:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258649522 (0x86a041b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 15:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ebbf557bc49c44d07dd9d0503dc510f19237a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:4b:a3:2a:9d:96:6b:ec:7b:81:1c:54:19:
27:f3:33:7c:c8:fc:51:67:a8:bc:9a:93:a2:22:ec:
ab:5f:95:a1:02:8f:ab:02:59:ab:c4:0b:5b:99:61:
08:9d:dd:22:9f:03:86:88:20:6f:f1:d1:63:9b:f6:
f2:4b:8b:04:a5:c6:16:2e:60:ba:97:92:dd:62:44:
f6:fa:af:1a:66:8c:17:83:34:1b:d9:86:30:ca:23:
03:bd:25:35:d9:51:2c:d5:c9:1f:0c:fa:43:dc:71:
3a:a9:1c:8b:c1:26:08:24:c6:d1:66:6b:dc:12:16:
de:d4:06:37:65:62:8e:b1:fc:d8:38:37:4f:60:88:
ab:80:f7:10:94:03:fc:a1:6d:d2:a4:36:c9:01:67:
74:3f:d6:ad:96:04:60:87:bc:07:30:9b:ee:2c:af:
d8:0b:23:eb:12:fe:ad:c2:53:7b:3a:90:25:a3:de:
2b:f8:73:7b:3a:d0:6e:97:12:5c:ed:d2:dd:16:09:
63:ab:4a:0e:23:83:22:ea:6f:72:7d:d1:3e:47:7b:
6e:8e:37:06:36:d9:1d:1c:98:3e:44:f7:e7:47:b5:
80:88:54:67:b1:1f:ad:82:95:37:ce:d7:fa:a9:77:
44:18:ec:59:ec:50:bf:a4:bc:b7:1f:59:08:b9:c0:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:F5:57:BC:49:C4:4D:07:DD:9D:05:03:DC:51:0F:19:23:7A:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xrv1V7xJxE0H3Z0FA9xRDxkjeok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:74:bd:3e:c8:c8:38:ab:23:44:cb:d8:6b:e0:05:7b:64:46:
3f:af:9b:b5:e9:77:d6:40:c4:8c:bc:40:fb:d2:12:64:b6:79:
7d:4e:a9:37:0b:dd:c2:ae:4c:17:fc:1d:a1:20:f2:43:23:b5:
3a:da:9a:e8:b9:34:ee:10:13:87:ed:23:a6:bd:85:bf:2e:80:
86:4b:d0:af:be:1a:bb:8d:24:e2:69:eb:ea:fb:4e:63:f0:38:
4e:36:74:7a:21:22:a1:43:38:a8:58:4a:82:2f:a6:dd:e5:d3:
de:37:9e:b8:bb:15:a4:d7:4d:7b:3a:c1:70:f4:e2:79:d9:d0:
ce:55:0c:18:5d:74:f2:23:df:40:4f:f2:36:21:58:6e:a9:4c:
3f:39:36:dc:c7:1c:1d:a5:fb:6b:3b:a4:bb:9f:46:6c:05:28:
6d:ca:72:da:a3:02:19:0f:e1:94:ad:42:fa:04:88:71:eb:3d:
59:f6:7f:ba:bc:c1:54:e9:80:bc:d8:03:d4:33:6c:7a:8c:82:
d0:fe:e5:f0:32:8b:99:2a:c2:6d:82:f1:76:ef:8a:d7:95:6b:
03:e9:08:95:bd:39:f6:6c:3d:93:12:b5:27:25:73:93:6e:2c:
f6:ee:ab:4d:d1:cb:1a:46:f2:aa:52:a9:2b:55:a3:c1:63:b2:
25:96:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:04:24 2025 by rpki-client