Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBvbUTmw2aLdlNeYJlcmzo0guvc.roa
File: xBvbUTmw2aLdlNeYJlcmzo0guvc.roa (raw, json)
Hash identifier: fle8jOHoMhjIVt2eBlwelvpPLscj0bOSAgyvYy018ps=
Subject key identifier: C4:1B:DB:51:39:B0:D9:A2:DD:94:D7:98:26:57:26:CE:8D:20:BA:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897330D57B393F06AE2F78AF002E072D09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBvbUTmw2aLdlNeYJlcmzo0guvc.roa
Signing time: Thu 20 Jul 2023 12:05:27 +0000
ROA not before: Thu 20 Jul 2023 12:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:732f:e6bb/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:30:d5:7b:39:3f:06:ae:2f:78:af:00:2e:07:2d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 12:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c41bdb5139b0d9a2dd94d798265726ce8d20baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:a8:66:56:44:38:ec:86:42:38:08:63:d0:
f5:4d:0b:44:7e:2a:9b:f7:ff:38:66:78:c4:7c:26:
36:42:89:71:48:a4:d9:0e:0f:90:dc:86:4c:f7:77:
c9:99:87:20:78:ba:40:87:67:eb:64:43:78:de:00:
96:81:9b:57:4e:af:fc:b5:44:5b:02:89:46:27:4e:
73:b6:26:d3:b3:89:b0:53:a6:ce:f8:7f:5b:7b:20:
17:70:d4:a8:f0:0e:c8:d7:b9:64:bb:1b:c3:66:a5:
9f:6d:7a:f1:3e:fc:c7:85:c4:f1:c6:ae:07:b5:ff:
e5:f7:ce:ba:c5:91:0d:9c:2a:58:2d:d5:86:4c:52:
5d:8e:49:0e:c2:52:54:f0:60:d9:c8:21:a3:48:13:
b5:95:a7:80:d7:f1:23:b5:fd:8b:e7:6d:7d:ea:74:
c4:23:0c:4f:ba:91:ce:d4:b2:e4:2d:3b:8e:9c:80:
06:09:8c:17:f2:f4:34:a2:3e:eb:fa:3f:ea:f0:6c:
b6:db:34:d7:20:d2:b7:cf:9c:76:2d:b1:bd:5d:6f:
0f:6b:c0:30:98:5f:8c:87:05:92:b2:66:c3:91:52:
e8:5d:98:6c:7e:b3:dc:4f:f0:40:81:76:0f:84:03:
0c:25:89:ca:fc:99:c8:09:1a:32:83:7f:a2:65:c0:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:DB:51:39:B0:D9:A2:DD:94:D7:98:26:57:26:CE:8D:20:BA:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBvbUTmw2aLdlNeYJlcmzo0guvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:7b:f3:f8:cc:15:e2:9b:e2:b1:99:de:61:3f:cf:9b:46:a5:
f6:d8:b8:a7:a7:07:08:f4:8d:d6:34:41:b1:06:c5:db:20:4b:
4e:41:75:62:81:5e:9a:c2:a8:d9:98:f6:77:da:e9:01:00:88:
7a:e8:bb:0e:d1:af:ff:4e:27:50:a4:e0:64:36:0d:6a:a7:e8:
36:54:aa:fe:81:57:67:92:70:69:0c:db:2e:36:83:94:3f:dc:
d0:82:bf:a0:f5:f7:1a:ff:73:01:00:5c:66:bc:36:b6:b0:f6:
b5:c0:7a:9f:a8:2c:99:74:3c:75:ba:7b:80:8b:ce:64:26:7a:
1d:b8:43:2e:28:dd:2b:9f:7f:e2:57:4b:43:09:bf:53:00:dc:
01:b4:78:bc:f2:e2:36:ad:39:7d:0a:61:c3:79:50:9d:3d:cf:
ab:6e:8c:46:2a:f7:dd:f1:03:dc:79:52:34:0f:21:cb:33:d7:
1f:f2:de:9f:8c:71:01:42:a9:54:6a:e5:5a:6b:2a:b9:b9:0e:
1e:65:76:2e:b9:b0:a9:11:eb:06:55:41:80:0a:7d:1d:12:47:
c4:6a:42:c4:e5:35:54:ce:33:3c:86:ac:e4:11:ef:50:b7:b5:
f0:0c:e4:1d:5b:81:84:7c:f6:81:fb:bc:91:5d:ae:6f:1e:f5:
a3:4a:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:17 2025 by rpki-client