Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x3ilGx9eCtlqOwwdrJ1NI8mfw4o.roa
File: x3ilGx9eCtlqOwwdrJ1NI8mfw4o.roa (raw, json)
Hash identifier: eFLobilbWmdTz4UuTUL6/wTmVjyclKAkVcm4m1//I7A=
Subject key identifier: C7:78:A5:1B:1F:5E:0A:D9:6A:3B:0C:1D:AC:9D:4D:23:C9:9F:C3:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0BFD9D0D5D7F9E0FE41751C47582D694
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x3ilGx9eCtlqOwwdrJ1NI8mfw4o.roa
Signing time: Sat 19 Aug 2023 04:11:24 +0000
ROA not before: Sat 19 Aug 2023 04:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0b:fd:9d:0d:5d:7f:9e:0f:e4:17:51:c4:75:82:d6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 04:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c778a51b1f5e0ad96a3b0c1dac9d4d23c99fc38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:fa:ae:a2:b5:a9:01:73:71:14:e2:d8:21:
cd:d9:65:b4:59:8f:51:02:a2:9b:c5:ac:bd:49:5f:
b9:5b:be:ed:3f:1b:44:6d:d7:46:49:77:a0:0f:4b:
e6:f7:0a:03:36:5e:fe:18:e0:6c:12:2f:5b:95:f5:
43:03:40:db:93:d4:1b:55:3d:70:2e:69:be:78:90:
14:bc:83:f3:c7:18:16:7b:02:4b:c6:20:ac:e4:8d:
1e:ae:4d:29:3c:08:57:a1:b6:2f:81:8d:8e:85:7c:
37:a7:de:e7:2e:7c:f4:3d:fe:29:84:43:79:2a:39:
c5:22:7b:ea:56:a2:01:ff:be:ec:cc:01:a8:7d:10:
c7:a4:5c:71:de:8e:9a:54:b6:b7:11:97:04:3e:a2:
ed:1b:7a:b6:99:de:3c:1a:9e:86:9c:1e:e1:8b:b5:
97:15:a1:9d:a5:b0:25:77:38:21:25:10:1f:34:09:
e1:b3:d3:f6:4a:c1:75:93:3c:c2:30:cf:20:2a:bf:
6d:5c:c4:30:a9:7c:59:39:32:1b:8c:db:83:c6:9a:
99:d8:cd:79:ed:35:df:c7:c9:84:85:3f:d9:a3:ef:
a6:01:7b:2e:d9:8a:6d:35:3d:ab:c6:4c:de:e1:2c:
2c:c4:ca:8d:5d:fc:14:c0:30:73:20:0d:d6:fb:6b:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:A5:1B:1F:5E:0A:D9:6A:3B:0C:1D:AC:9D:4D:23:C9:9F:C3:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x3ilGx9eCtlqOwwdrJ1NI8mfw4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:06:50:b5:3d:a9:8a:f2:53:f2:0a:78:1b:6e:19:1e:ad:ee:
9c:f9:f7:e4:ce:fd:b2:71:11:3c:9a:3e:ac:3f:0d:1f:3f:f0:
6f:07:c4:8b:57:dd:51:c1:94:74:d0:3c:4d:d2:9a:7d:ce:68:
7a:c6:97:5b:ab:6a:ae:88:68:a9:6a:64:d9:95:92:c8:e3:04:
67:08:36:ab:8f:7d:25:4d:ff:9a:6c:e1:42:a4:f1:99:45:b8:
ef:1b:79:a9:b0:2f:d2:f4:cb:c3:e1:9c:70:32:f7:85:fe:0e:
fa:a3:43:80:06:28:8f:46:44:71:6a:ce:02:8e:05:51:10:c8:
ec:56:5c:ab:46:fa:f2:9e:c3:e3:ee:6b:7d:e3:e3:d1:34:6f:
8f:f0:7f:12:68:18:51:e4:25:35:7f:40:f4:b4:5f:72:26:bf:
f1:21:a6:4f:c2:c7:17:c6:3c:3e:55:46:40:75:c6:2b:f8:21:
65:01:c4:f2:b5:f0:60:e9:62:60:8e:ae:5b:45:3e:70:ea:0b:
e6:4e:1e:81:00:69:57:cb:61:82:aa:73:d9:e1:58:76:db:ee:
b2:3a:c3:42:d3:2c:06:bb:b3:23:19:20:d4:0c:95:25:0f:3f:
7a:1d:21:66:f6:e0:c9:75:b4:eb:da:66:60:87:b4:ff:7b:e6:
08:5a:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:28:15 2025 by rpki-client