Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XucSqRY7u1zosDnEkTgXkCelx_s.roa
File: XucSqRY7u1zosDnEkTgXkCelx_s.roa (raw, json)
Hash identifier: WYHBgWY4nFUsOsvYU64NWjAiDrWP6PZeo/NOtIV387Y=
Subject key identifier: 5E:E7:12:A9:16:3B:BB:5C:E8:B0:39:C4:91:38:17:90:27:A5:C7:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C6AF1AEE036F662390225C7891843A6F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XucSqRY7u1zosDnEkTgXkCelx_s.roa
Signing time: Sat 17 Jun 2023 00:09:04 +0000
ROA not before: Sat 17 Jun 2023 00:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c6:af:1a:ee:03:6f:66:23:90:22:5c:78:91:84:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 00:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ee712a9163bbb5ce8b039c49138179027a5c7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:f3:ac:60:0d:22:51:c7:03:c4:44:21:8c:
67:5f:30:7e:ab:6d:aa:ac:a0:a3:98:e6:85:cb:a6:
24:d1:7c:f8:3b:4a:7e:55:e8:71:4f:60:3f:97:ff:
fb:61:6d:b2:93:6e:d2:09:4d:95:91:e0:81:3b:dc:
7f:e3:bf:c5:4b:9b:c4:88:ca:4a:93:e8:98:00:95:
8b:e3:06:67:c5:d0:48:25:bb:17:d0:43:98:ff:95:
e7:83:e2:dd:df:44:d0:9e:e6:3e:5b:6c:55:c0:8c:
41:3c:2a:6d:a4:1b:6d:71:5a:20:95:59:53:86:90:
48:e7:b3:8a:c9:e4:a8:c3:f5:dd:64:62:51:da:f6:
c6:75:be:c9:52:d6:22:f6:b4:ff:a1:d9:cb:cf:60:
ab:b2:f0:69:78:c9:bf:86:79:3b:c9:25:ea:e4:f2:
e3:b1:d8:2c:37:d6:b2:7f:4f:ad:33:f5:2d:5f:e7:
51:1f:7c:22:24:0f:05:2c:9c:32:4d:a8:02:97:6d:
c7:fc:35:93:ed:5a:f1:25:96:a1:d2:56:bd:46:86:
a7:57:00:a9:7b:64:dc:af:fb:b9:02:43:64:22:42:
4d:7d:93:55:f4:dc:05:8f:21:03:05:a4:d6:85:bb:
6d:81:1a:cc:1d:80:5e:49:91:ea:62:2d:73:90:5e:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E7:12:A9:16:3B:BB:5C:E8:B0:39:C4:91:38:17:90:27:A5:C7:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XucSqRY7u1zosDnEkTgXkCelx_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:d4:40:82:8e:d0:c5:cb:75:7f:b7:af:dc:70:80:9e:47:15:
3c:98:cf:ee:58:1a:98:d4:4a:72:db:92:0b:5d:4d:19:2e:af:
bc:bd:3c:32:a3:c4:3c:1f:b4:bb:1a:88:d6:e3:ba:be:82:da:
c5:f1:06:8e:4e:a6:f6:d4:34:a4:f8:13:05:bb:44:f9:93:ee:
dd:43:d6:01:b7:86:12:f4:b1:3e:d8:12:6e:3c:22:58:eb:24:
6f:b5:d8:0a:cb:94:0c:f7:13:2e:54:ca:71:b7:92:54:47:81:
d4:21:b9:d4:53:e7:42:34:ca:19:01:54:0a:94:d9:56:4d:39:
6c:b2:a0:08:db:06:06:33:cf:ad:b8:d0:73:e6:6e:17:9d:e8:
ca:f9:46:2d:dd:63:66:7a:cd:2d:e7:92:38:4b:f4:22:e7:9e:
e9:f4:bf:8f:2a:52:06:23:d2:05:48:89:7a:b9:3c:ab:a0:df:
bf:de:42:06:3a:bb:71:1a:9f:1c:55:1f:72:e1:2e:cc:b6:31:
be:52:00:bb:a7:cf:b9:64:b5:be:3b:6e:b1:c9:85:cb:b3:3e:
2e:b8:67:8b:49:52:1b:6f:5b:23:1f:2b:dc:20:32:cd:e5:0d:
c0:5c:81:07:19:1a:8d:6b:1b:50:a6:5b:5d:b0:39:06:46:69:
71:2c:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:08 2025 by rpki-client