Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xC0VwUDGn6HbbmLrWqwlift_Rm4.roa
File: xC0VwUDGn6HbbmLrWqwlift_Rm4.roa (raw, json)
Hash identifier: eOx9k+PL+tSe/H9LA44vkZ1AmDvRhxW8gg3jaN8FRGY=
Subject key identifier: C4:2D:15:C1:40:C6:9F:A1:DB:6E:62:EB:5A:AC:25:89:FB:7F:46:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018752314A503BB99D05692E4FBEAC1DCB62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xC0VwUDGn6HbbmLrWqwlift_Rm4.roa
Signing time: Wed 05 Apr 2023 16:12:54 +0000
ROA not before: Wed 05 Apr 2023 16:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:31:4a:50:3b:b9:9d:05:69:2e:4f:be:ac:1d:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 16:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c42d15c140c69fa1db6e62eb5aac2589fb7f466e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:cd:05:7a:c1:ac:a9:de:54:d8:79:1d:0f:
24:24:75:5a:9c:6e:e7:97:a3:70:8e:d1:11:3c:03:
10:7a:98:9e:e4:55:c6:ad:af:6a:63:45:6c:3c:c6:
b0:84:f5:9f:10:01:5d:e7:1f:60:f9:4a:3e:ca:ee:
c4:a9:2e:8e:e0:e9:63:aa:f4:b5:db:62:b9:8d:6f:
01:e9:20:20:b8:33:40:c4:b1:ae:8d:49:a1:a3:59:
b6:90:84:de:c6:b1:4b:74:26:45:3a:87:5e:9f:8f:
ed:6e:1b:b1:19:97:b7:97:5b:d7:87:88:cd:15:f0:
4c:94:64:b6:2c:cb:b1:e8:31:ad:85:6d:71:be:50:
e8:8c:03:c7:d1:be:bd:37:2a:39:ec:bf:c8:77:cc:
d3:94:0b:e9:ff:9e:03:52:6c:f1:af:95:ec:bf:86:
99:d0:00:45:36:a2:a3:dd:51:4e:79:5e:fd:08:50:
90:e4:a5:9b:eb:ac:0c:2c:a4:2c:c5:b9:d8:c7:73:
18:5e:5a:13:30:a7:2a:b5:78:a8:fe:e5:1c:26:99:
7e:59:fd:55:f3:dc:ae:a0:d8:a2:bf:0f:69:18:a0:
fe:82:dd:69:7d:e8:59:06:15:34:d7:2c:5e:dd:ba:
bf:0a:98:9d:59:e0:96:31:6d:ff:5d:60:d9:25:a1:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:15:C1:40:C6:9F:A1:DB:6E:62:EB:5A:AC:25:89:FB:7F:46:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xC0VwUDGn6HbbmLrWqwlift_Rm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:c0:87:c3:69:ee:b3:1c:35:f4:62:d1:86:af:aa:81:14:da:
45:4b:6f:cc:5b:e6:b9:38:6c:49:69:b4:db:ea:9d:64:a0:0c:
e7:b9:1c:7d:b7:1d:46:e8:bb:aa:b4:1e:65:0e:a7:c1:b6:5a:
a9:39:6b:f9:1c:79:7c:e5:9b:b3:0f:15:c7:d9:ef:90:50:06:
dd:33:cd:4b:9d:d3:80:33:60:6b:ab:7b:da:9e:7a:b6:76:94:
83:5a:db:56:be:69:ce:06:36:14:9d:86:2d:8b:e4:d3:7e:a9:
70:76:6a:54:e5:63:72:b8:1e:d5:3d:d9:5e:26:fb:fc:e7:5b:
88:2e:b0:6b:52:c3:55:a8:20:fc:ef:67:4a:4f:72:02:62:f8:
7e:ad:48:57:96:40:d3:31:6a:2e:95:3b:10:e6:6b:28:1f:ef:
00:81:c6:4b:76:d0:e8:21:8c:dd:88:25:f9:e7:ee:2a:63:3d:
31:18:b9:bd:e3:3e:17:fc:9f:9d:c7:0d:f4:74:2c:f7:9d:07:
94:c3:41:5f:8a:12:59:a9:0b:7b:b1:a2:28:fb:de:bc:dc:3d:
09:d5:1d:2c:05:c7:08:e0:81:91:06:fa:64:06:16:00:b1:9b:
8e:1d:3e:e6:2d:02:aa:69:00:11:e3:0c:a5:a4:c8:2a:9f:50:
eb:a1:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:49 2025 by rpki-client