Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xs58weLxMaRytrlrOZQkDLjp-Yw.roa
File: Xs58weLxMaRytrlrOZQkDLjp-Yw.roa (raw, json)
Hash identifier: tWWoAeZAsLcSyt0Tq+0N/xa4yNjL0eazGiLOouU+cGc=
Subject key identifier: 5E:CE:7C:C1:E2:F1:31:A4:72:B6:B9:6B:39:94:24:0C:B8:E9:F9:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018659E65629F0CA9FF09C32F923AF79FC31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xs58weLxMaRytrlrOZQkDLjp-Yw.roa
Signing time: Thu 16 Feb 2023 11:05:12 +0000
ROA not before: Thu 16 Feb 2023 11:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:e6:56:29:f0:ca:9f:f0:9c:32:f9:23:af:79:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 11:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ece7cc1e2f131a472b6b96b3994240cb8e9f98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:35:bd:d4:02:2d:aa:89:08:90:47:ab:dc:
6a:80:53:5a:8e:43:e4:a1:6e:b1:e6:66:9a:25:8f:
9f:bc:05:4f:ef:6e:af:fa:77:52:a9:08:b5:90:2f:
fd:f1:ba:97:94:68:73:04:0a:ee:78:e8:26:ee:a1:
ce:9d:90:57:69:45:01:79:9e:07:42:14:83:98:7e:
0b:7e:d7:62:a5:84:44:1a:dd:ba:8c:f9:ef:c5:05:
c2:ce:b4:13:b5:e0:08:bb:a5:59:f6:73:9a:13:12:
5f:d9:21:31:71:7a:50:63:9c:f2:08:c7:52:99:84:
03:5d:04:b3:a0:52:64:bf:3a:03:af:06:25:f7:3f:
4e:2f:70:dd:d8:98:eb:f8:1b:a3:07:1d:34:6e:ca:
02:4f:76:12:1f:5a:86:15:32:30:9e:9d:9d:75:87:
a3:bd:33:e8:ae:ed:00:ac:cf:0f:33:d3:12:bd:ff:
6a:c5:14:85:45:37:29:6b:21:a5:5a:23:46:25:96:
68:50:c2:72:8d:2a:88:ce:02:e5:c9:0f:0f:00:7e:
41:f6:c7:7f:04:04:d8:18:d0:b8:6b:79:7d:37:4e:
4d:9c:e0:45:ec:08:98:b6:dc:ce:a9:80:2a:a6:aa:
8f:95:02:15:45:8b:92:46:0a:79:54:97:94:09:10:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:7C:C1:E2:F1:31:A4:72:B6:B9:6B:39:94:24:0C:B8:E9:F9:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xs58weLxMaRytrlrOZQkDLjp-Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:87:85:4b:e6:b6:e0:6b:a0:b8:a6:3b:83:f8:6e:b4:64:54:
10:0c:16:78:2c:a9:54:12:44:d6:20:0f:45:b1:93:00:60:96:
6a:1a:f1:f1:1a:6b:7c:0f:9d:2e:ef:c3:30:d2:44:ec:a5:0c:
5e:19:35:6a:d9:3e:1a:89:1c:34:12:18:e2:17:5d:18:3c:43:
27:a9:bc:35:48:5a:c5:c2:9a:0f:12:3f:78:ae:d4:9d:3b:9e:
e9:46:b3:c5:0c:14:89:7e:35:6b:34:54:c9:3f:81:31:7a:16:
bf:de:13:30:41:44:c9:0d:19:b3:95:57:47:aa:65:a7:39:53:
df:b1:82:58:46:30:96:22:1a:41:08:35:36:4f:4b:05:1c:df:
ce:fb:8f:1f:75:8c:94:c0:57:90:7c:9c:95:f1:0d:03:e3:ff:
2f:e8:ad:f5:95:5a:27:d1:73:a2:ad:df:e5:f6:54:a6:a9:df:
85:fc:6e:e6:6e:71:d9:66:fe:3b:cb:f7:92:47:60:55:36:d9:
b2:7f:74:ce:a1:7a:8c:4f:c1:93:27:53:a3:af:e1:53:6f:e2:
da:a5:89:ff:d5:be:a7:bc:86:67:1a:5c:a6:42:f5:2a:96:dd:
4e:0a:c6:62:ec:9e:62:45:38:d4:22:8f:ba:3c:cc:86:03:2e:
f7:c5:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:11:00 2025 by rpki-client