Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xvi6xCaAK58aegt7HEJ5pqGmIGA.roa
File: Xvi6xCaAK58aegt7HEJ5pqGmIGA.roa (raw, json)
Hash identifier: V84JTUlvsTGLPISi/kOhN/itAWSjoqltJkRFVRcQ3as=
Subject key identifier: 5E:F8:BA:C4:26:80:2B:9F:1A:7A:0B:7B:1C:42:79:A6:A1:A6:20:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018363D887D1F1B39FB300F9C22489428852
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xvi6xCaAK58aegt7HEJ5pqGmIGA.roa
Signing time: Thu 22 Sep 2022 06:17:58 +0000
ROA not before: Thu 22 Sep 2022 06:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:63:d8:87:d1:f1:b3:9f:b3:00:f9:c2:24:89:42:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 22 06:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ef8bac426802b9f1a7a0b7b1c4279a6a1a62060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:71:52:e3:a7:ec:e2:28:ee:f6:62:c2:a2:
af:15:28:d7:1a:fc:0f:cd:9d:ab:0d:d6:62:e0:c2:
d7:66:ce:0b:6a:d9:46:a6:a9:c9:d6:8b:8c:b6:f1:
ec:0f:43:ac:af:04:fa:b9:6e:bc:a9:a7:7e:2d:b3:
42:15:3c:91:ac:d0:92:26:65:38:5a:ce:34:7b:79:
03:de:5b:b2:37:81:b0:a8:b3:b5:d3:c6:fa:3f:04:
a2:63:db:62:dc:f6:f9:ca:70:9e:d1:e1:14:db:70:
f2:79:66:38:20:fa:39:da:74:ba:20:06:f9:2c:0e:
f9:26:89:40:45:f8:d6:29:18:2d:e6:3c:70:c2:c0:
4e:4a:31:39:4a:07:1a:62:6c:99:d1:6f:0c:10:70:
20:4d:d8:67:39:87:3c:7d:af:91:be:cc:7c:89:5a:
5e:ae:3a:14:c4:b6:d2:7d:2e:0f:bc:27:f0:38:63:
06:ce:6d:49:bf:4a:2b:cb:bd:58:38:55:54:89:4e:
d0:fd:88:6f:b6:a8:02:88:13:4f:d8:8d:a7:51:46:
cc:e5:d8:67:de:70:3a:de:51:1e:cf:00:b8:b7:ad:
95:be:74:6a:c1:5d:c5:32:73:e7:3b:0e:a3:44:bf:
41:fe:21:42:0b:b9:c3:68:14:78:a8:61:95:ee:6f:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:BA:C4:26:80:2B:9F:1A:7A:0B:7B:1C:42:79:A6:A1:A6:20:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xvi6xCaAK58aegt7HEJ5pqGmIGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:d0:dc:8f:94:2d:7b:e7:37:fd:06:bc:11:0d:6d:48:e5:19:
9f:5f:d2:29:3a:57:df:c4:b6:a8:5c:9d:e2:b3:89:ba:34:20:
22:ef:3b:1a:53:ca:37:63:11:a6:3e:5f:93:92:dc:c1:e3:95:
3f:26:c2:63:59:9b:bc:de:69:95:e5:2e:ad:c9:90:6f:f9:f6:
f0:4e:44:27:a6:a3:cc:21:4e:c8:39:1e:2e:55:9c:c6:87:09:
56:d2:99:18:5f:5d:ee:60:84:4e:1f:98:b7:22:1b:ea:c9:f6:
bf:36:a8:8f:ec:f7:fe:50:15:ed:7e:37:9a:c1:bc:ae:9c:ea:
be:9a:1a:a1:d1:1a:51:af:9d:cf:85:fd:92:e4:34:85:2b:cf:
bb:58:39:bf:b3:2d:ba:55:83:d1:21:94:e6:5e:5b:ee:83:44:
1c:00:0d:fc:33:90:ca:8c:23:da:e9:96:b7:56:1d:9e:74:4b:
54:da:4a:0c:db:63:fe:38:e5:1d:6f:01:ae:ab:41:5b:5d:b8:
51:49:7b:52:5d:92:d9:8a:a6:d9:c6:c2:db:e3:29:3d:25:20:
9d:ff:06:ba:c3:1e:37:c4:93:1d:55:90:24:0f:6d:f9:bc:e7:
f7:30:46:a0:50:3f:fe:1d:41:64:f7:e0:79:31:65:85:38:fa:
54:7c:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:58:32 2025 by rpki-client