Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xG6DFYjoSxvebXtRwG7JyDWXVis.roa
File: xG6DFYjoSxvebXtRwG7JyDWXVis.roa (raw, json)
Hash identifier: 0QXYbhvigrcDYAM897Z2O/AucAbMuS2OspFnUrPMB24=
Subject key identifier: C4:6E:83:15:88:E8:4B:1B:DE:6D:7B:51:C0:6E:C9:C8:35:97:56:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F21A47B7E78F13E2E752ED5310A7C969
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xG6DFYjoSxvebXtRwG7JyDWXVis.roa
Signing time: Wed 19 Oct 2022 21:15:51 +0000
ROA not before: Wed 19 Oct 2022 21:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:1a:47:b7:e7:8f:13:e2:e7:52:ed:53:10:a7:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 21:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c46e831588e84b1bde6d7b51c06ec9c83597562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:ad:8d:60:93:47:5e:e7:f6:de:6c:d8:ab:
7b:3f:e2:41:b1:ad:ca:f8:ed:cd:94:0a:94:a8:25:
e5:ae:86:85:6c:9c:60:97:a1:f7:a0:35:e8:6a:bf:
fa:4a:49:9e:91:c8:ff:5b:8d:3e:bd:9e:1c:93:7b:
ec:00:f5:05:c8:0b:38:78:3e:9a:dc:5d:d3:4d:29:
0f:03:3a:1a:60:b5:58:77:89:50:97:81:d4:39:2b:
cb:c9:82:19:82:7f:2e:05:fb:7d:55:bb:1f:55:41:
6d:bf:3e:99:42:73:38:ea:23:54:de:c3:b6:e7:74:
1b:50:9a:a9:0f:ed:d0:6e:d7:92:6c:6d:12:a6:b1:
87:cc:88:54:b5:6f:75:36:89:f0:d9:d6:b2:94:0b:
9b:2d:19:3e:7a:a2:64:14:63:0d:52:18:e6:88:86:
98:2b:e3:17:fa:10:78:b0:95:25:68:08:02:19:19:
d4:5c:c2:d5:ea:d4:42:97:0a:6c:24:20:19:23:de:
eb:e0:63:56:bd:64:1b:0a:b3:e1:01:cf:13:f1:1f:
74:fe:a3:f6:ce:e3:87:a8:04:d9:17:e7:1b:c2:da:
ec:df:b3:fb:f9:dd:91:6f:e7:e4:1d:5e:13:b6:b5:
de:4c:a5:0f:58:17:49:9c:28:33:cf:63:be:a9:ff:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:83:15:88:E8:4B:1B:DE:6D:7B:51:C0:6E:C9:C8:35:97:56:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xG6DFYjoSxvebXtRwG7JyDWXVis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:1b:e0:2d:2b:f9:58:bb:b4:a9:14:ce:3e:8e:92:34:81:9a:
7a:14:36:03:63:12:cc:c3:96:54:68:b4:19:b7:15:7c:c5:69:
14:d2:88:4f:81:2a:26:61:6b:82:83:dc:57:0f:22:67:82:6c:
a2:88:10:8d:ae:cc:4c:26:eb:8a:55:5d:85:62:15:d1:2a:d1:
ab:be:18:47:98:f9:c9:e3:7b:9f:29:67:97:c6:92:a8:b5:31:
fd:1a:53:26:e5:c0:18:b7:66:5c:ca:30:c0:51:fd:02:ad:d1:
9e:4f:01:fd:03:18:9c:48:af:59:10:7c:82:38:0a:db:a7:79:
20:31:2f:9a:4c:62:43:df:28:81:15:f3:a5:91:6c:55:d4:27:
e0:01:66:0f:e9:d1:90:f1:eb:3b:65:94:04:97:92:54:d7:6a:
16:e6:4c:c8:cf:f8:66:cc:9b:bf:3b:c2:2a:c1:24:3a:67:58:
01:f3:ad:40:3a:53:98:ca:4c:eb:c2:31:67:fc:8e:ef:9b:4b:
8a:e3:ff:10:27:32:d1:cd:f6:1a:08:9d:9b:a3:a6:34:f7:6a:
b1:18:97:93:03:fa:be:b4:86:6f:73:85:ac:db:5c:a7:a3:c2:
fa:95:96:c9:45:57:56:05:1a:cd:02:eb:e1:8c:84:08:a9:b3:
73:96:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:34 2025 by rpki-client