Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XsUKHPBwea0luSmuIebTLwFRtV8.roa
File: XsUKHPBwea0luSmuIebTLwFRtV8.roa (raw, json)
Hash identifier: LEOcEmyjNlS/gOuE1iq5gK4Qov3+Chz5sKw7+cw6Sio=
Subject key identifier: 5E:C5:0A:1C:F0:70:79:AD:25:B9:29:AE:21:E6:D3:2F:01:51:B5:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EFB35E5E68B26BC701850FB4831E2A19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XsUKHPBwea0luSmuIebTLwFRtV8.roa
Signing time: Thu 26 Jan 2023 20:09:47 +0000
ROA not before: Thu 26 Jan 2023 20:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:b3:5e:5e:68:b2:6b:c7:01:85:0f:b4:83:1e:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 20:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ec50a1cf07079ad25b929ae21e6d32f0151b55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:8c:c5:df:54:cc:ce:f3:3c:35:13:6b:3b:
3e:86:31:b5:f5:2e:36:ee:33:5c:f0:d7:36:99:87:
cd:8b:29:e5:1e:6e:06:ba:ec:f1:91:59:06:63:4c:
db:a6:01:26:d2:25:88:dd:82:b4:9c:6a:13:ce:60:
91:ff:f2:5a:f0:70:bb:4a:34:37:57:b3:30:9e:8f:
66:2e:70:89:00:6f:f4:18:f4:54:d3:b4:c9:db:e9:
84:4a:11:3b:60:be:d9:8a:bf:37:d8:30:c2:de:ed:
bc:ad:5e:c6:b4:32:8e:8d:88:50:ee:c4:49:0b:69:
a0:7c:98:d9:45:ea:5a:1e:8c:16:12:0f:6e:16:78:
c7:24:a5:2d:6b:3f:80:ba:52:16:c5:61:54:08:aa:
83:79:48:f0:33:95:06:8d:c3:22:5c:00:86:51:75:
ea:5e:5f:cb:9c:0d:37:87:73:a1:1a:99:4d:0d:4a:
80:93:b9:c7:16:b4:1f:5c:eb:40:98:df:f8:87:4d:
73:d1:48:7e:20:de:6a:05:67:85:b5:fd:86:15:0c:
20:5e:9a:45:e2:a0:32:fe:1d:be:df:5a:bc:f5:3e:
ea:ed:3b:1b:3b:83:7e:40:13:56:4d:24:56:2f:99:
1a:5e:af:7d:fb:4d:96:f5:1d:9f:45:00:1c:d0:67:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:0A:1C:F0:70:79:AD:25:B9:29:AE:21:E6:D3:2F:01:51:B5:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XsUKHPBwea0luSmuIebTLwFRtV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:47:8b:f6:b2:34:ad:cf:97:95:de:8b:52:95:71:66:7e:77:
d1:06:0e:07:d8:fe:22:9a:1a:2b:74:da:28:dd:a8:7a:d6:96:
bd:60:3a:bf:21:c2:83:91:03:c1:4e:89:35:fc:0d:9b:f1:05:
40:0b:5c:53:51:80:5c:f3:06:3f:ee:80:70:77:4f:17:0d:fb:
f7:71:f2:7f:9e:78:b1:83:fb:6b:2f:e8:76:56:98:ca:2b:0d:
15:e9:64:a1:2c:dd:16:8d:ea:d9:49:7c:73:0d:69:67:ad:40:
17:45:33:df:6d:a9:ee:9c:7e:48:4c:12:92:3a:bd:9c:d9:e7:
61:da:09:80:9b:ea:28:fb:c1:df:d1:7b:6e:7b:f2:fe:a1:4b:
ee:3f:d4:cd:c1:6a:47:c6:30:94:c3:8d:5d:ce:07:9a:74:f4:
15:70:17:66:5b:cc:dc:2e:5f:54:b7:28:22:d8:ba:fb:ad:28:
bc:74:05:52:a7:05:45:f2:e3:04:ab:1b:2f:36:65:80:b9:7c:
14:35:b3:b7:36:7d:ad:c7:c2:c5:a2:85:cc:cf:5c:1e:2b:3e:
66:df:c5:09:fe:55:13:2e:43:31:f6:cc:08:64:49:16:83:da:
39:55:4c:16:56:e9:28:f7:87:56:b4:93:94:23:4c:34:20:bb:
f7:19:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:29:18 2025 by rpki-client