Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xv2q5R5tkCI9n-zzQlSTCH_4x1k.roa
File: Xv2q5R5tkCI9n-zzQlSTCH_4x1k.roa (raw, json)
Hash identifier: M+En4nabIHEgE05YP37cCKolnOybrGMhsJe93aGM+co=
Subject key identifier: 5E:FD:AA:E5:1E:6D:90:22:3D:9F:EC:F3:42:54:93:08:7F:F8:C7:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018274CD3AF82C070785EEB7E3049555DBA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xv2q5R5tkCI9n-zzQlSTCH_4x1k.roa
Signing time: Sat 06 Aug 2022 20:16:23 +0000
ROA not before: Sat 06 Aug 2022 20:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:74:cd:3a:f8:2c:07:07:85:ee:b7:e3:04:95:55:db:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 20:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5efdaae51e6d90223d9fecf3425493087ff8c759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:91:95:d3:c9:79:7a:25:57:ac:c0:e3:85:
ee:ce:af:42:78:48:7a:78:6a:41:23:59:a7:90:27:
df:3e:73:9b:17:17:89:e8:8e:5a:45:a8:c9:66:c0:
98:bc:92:77:18:3d:43:4e:57:32:ef:34:b3:4f:76:
85:d5:62:41:22:96:9d:29:a9:55:40:99:b1:6d:e2:
58:92:6f:3c:17:86:66:eb:42:17:f7:7b:fa:2d:27:
61:de:6d:92:9f:e3:01:77:6b:43:dd:fe:49:dd:3d:
af:39:ef:95:28:de:59:ce:b4:a3:8b:92:54:d5:c6:
d4:5a:d3:c6:a7:9a:26:42:f5:2b:7d:64:86:36:82:
8f:c0:d1:19:2a:df:e4:a5:2c:e4:ea:d5:b8:c4:99:
fe:b0:e5:e7:4e:73:90:9e:6e:f0:53:a1:53:90:ab:
38:34:ef:90:c4:de:c2:76:fb:56:ea:ce:5b:a9:e3:
87:2f:9b:2f:8b:c4:83:aa:8d:d4:9c:82:9f:23:f8:
8a:22:76:cc:ac:f6:37:31:05:fd:73:73:16:49:ba:
4d:d2:6f:b8:b9:b7:26:24:bc:7a:00:1e:1a:22:fc:
68:95:20:d5:4e:0d:e2:2f:db:ab:36:8f:5f:94:10:
22:bc:27:b4:25:a5:b6:eb:1d:ec:de:c7:1a:ec:03:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FD:AA:E5:1E:6D:90:22:3D:9F:EC:F3:42:54:93:08:7F:F8:C7:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xv2q5R5tkCI9n-zzQlSTCH_4x1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:4c:38:e0:71:3a:08:b3:6c:2a:06:a7:de:5f:3d:0b:10:76:
07:25:b8:dd:cd:5e:27:49:a2:28:d0:3e:2c:3c:23:33:c6:bf:
19:2c:e9:7e:68:ca:2e:e4:42:68:f2:23:d1:a7:74:c5:32:c7:
ea:03:3a:ec:fe:fa:af:82:f5:14:54:32:91:29:55:d9:7e:6f:
94:c8:23:6a:d6:67:44:c7:c5:aa:aa:55:ac:0f:02:28:43:c5:
45:ef:dd:59:37:e7:12:45:15:84:92:a4:48:19:be:5d:50:cd:
34:eb:3b:ad:51:92:e2:4b:9c:26:e6:03:64:4e:4e:42:7e:f3:
c4:0e:ac:dc:a0:97:fd:47:44:dc:ac:55:a3:61:5e:3d:c5:24:
78:ac:98:44:c3:21:76:84:de:e6:da:ac:70:32:63:a6:94:2e:
56:8c:ff:93:37:99:6f:c8:a2:1a:99:5e:b7:f9:6c:5b:b7:c0:
cf:7a:dc:35:83:2e:3a:20:12:d8:c4:5d:29:dd:16:61:e1:bd:
a8:3c:8c:dd:b7:7e:65:70:10:ff:f1:5f:6f:16:96:28:e4:bb:
87:b7:50:3e:b9:57:dc:80:eb:67:08:11:62:69:b8:d6:f1:9e:
c0:e9:b6:a9:cb:73:71:ea:31:19:e3:b9:09:f2:28:09:07:85:
09:d3:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:52:00 2025 by rpki-client