Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xDe58_SQKaCzHiyJPzJjLPgcy-I.roa
File: xDe58_SQKaCzHiyJPzJjLPgcy-I.roa (raw, json)
Hash identifier: lVQ+bQP5X7ZtB+9RLMENhGfEtCLMB7TwU2OdPeoVrG8=
Subject key identifier: C4:37:B9:F3:F4:90:29:A0:B3:1E:2C:89:3F:32:63:2C:F8:1C:CB:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E40E70CA8181C909B4E974F9C0779438
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xDe58_SQKaCzHiyJPzJjLPgcy-I.roa
Signing time: Fri 11 Aug 2023 10:04:58 +0000
ROA not before: Fri 11 Aug 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:e40d:d85e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:0e:70:ca:81:81:c9:09:b4:e9:74:f9:c0:77:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c437b9f3f49029a0b31e2c893f32632cf81ccbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:1a:9e:a2:86:c2:de:89:f6:41:67:cd:72:
b1:d0:fd:5a:88:e8:7a:a3:4e:32:0c:1e:dc:9e:2c:
d6:d2:cf:98:dc:47:f1:80:98:32:8c:a2:c3:fc:5e:
c2:e8:57:9f:e7:0f:a4:1a:5d:51:f6:b4:d3:fc:5f:
45:7e:cc:88:de:5d:10:cf:50:ab:50:93:73:9f:d6:
c3:f0:1e:ee:80:b2:29:1e:23:63:d4:90:86:c9:35:
0a:ad:59:84:fb:c4:6c:56:d7:0d:d3:ee:e2:5b:dd:
7e:a1:e8:9d:51:e9:a1:f2:af:18:ae:57:a3:cb:8c:
46:7f:fc:b8:62:6a:16:af:e1:09:22:9a:88:e9:2d:
06:56:f1:db:2a:a0:dc:78:c8:ff:19:77:cc:ea:d5:
f4:b6:bb:5e:82:e3:93:36:96:e2:73:08:04:45:13:
46:6f:db:a9:b9:c1:db:f9:23:36:a6:a5:e5:f0:44:
bf:02:a0:f7:72:06:2c:df:cd:15:24:28:c3:45:2d:
0d:bc:ba:72:16:9c:ac:51:26:6b:59:a6:00:ff:5a:
df:c4:a5:13:ef:a9:5d:20:97:09:b1:1d:d9:9c:fa:
16:2c:15:66:05:cd:4c:fd:a0:b1:18:13:4c:13:91:
18:1d:4f:c0:d5:86:bd:df:d9:30:49:62:43:93:72:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:B9:F3:F4:90:29:A0:B3:1E:2C:89:3F:32:63:2C:F8:1C:CB:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xDe58_SQKaCzHiyJPzJjLPgcy-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:5a:b7:ef:5b:53:a4:fc:4d:32:cd:33:29:9b:32:a6:68:78:
42:88:82:78:dd:ad:44:1f:80:10:21:e4:80:19:45:95:9d:ce:
4b:ac:e6:42:73:22:c7:0e:ba:4e:01:73:8c:9f:14:06:2e:de:
4f:2a:6e:55:74:b2:e7:b7:aa:32:0a:dd:33:f0:fb:d4:7e:8a:
45:86:63:d0:18:18:47:b3:33:b5:8a:d0:95:b9:09:2a:90:18:
bb:cb:d2:dc:2a:4d:00:55:98:ba:83:75:88:4d:e2:ae:fd:37:
a3:f3:c3:80:db:2f:41:42:0f:cf:56:bc:5d:a6:66:40:31:3f:
81:2a:a0:82:e6:d7:6a:bd:22:f2:63:99:e1:a8:87:c7:47:68:
a2:ea:1a:86:0e:01:da:98:c5:6c:a8:ca:b0:fd:e5:8e:75:53:
31:95:e1:77:53:7a:b4:e8:05:8e:9b:55:98:c6:d5:05:aa:6f:
b3:96:c4:a6:ba:98:eb:d7:c5:6a:5e:88:25:02:e1:07:c6:da:
59:2c:10:af:08:2b:ed:0b:c0:83:c1:16:93:ae:e6:4c:f3:f2:
6b:da:6a:cd:3f:11:61:87:20:15:56:ac:46:01:fd:d5:4b:94:
e7:bd:7f:37:56:eb:9a:f5:ef:8b:4b:2b:22:b1:8b:1c:c8:db:
a0:5b:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:00:49 2025 by rpki-client