Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHhH5ETk2IwaM_J0Uz4okCtFX50.roa
File: xHhH5ETk2IwaM_J0Uz4okCtFX50.roa (raw, json)
Hash identifier: W2+tyksyhpRRj0jB82iJ3JGvjuoYKnc6/K2K1zY/kz8=
Subject key identifier: C4:78:47:E4:44:E4:D8:8C:1A:33:F2:74:53:3E:28:90:2B:45:5F:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888BE4DEEC70BFCC2B135ADFDC1378B0DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHhH5ETk2IwaM_J0Uz4okCtFX50.roa
Signing time: Mon 05 Jun 2023 14:10:12 +0000
ROA not before: Mon 05 Jun 2023 14:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:e4:de:ec:70:bf:cc:2b:13:5a:df:dc:13:78:b0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 14:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c47847e444e4d88c1a33f274533e28902b455f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:f9:07:79:39:b4:69:48:50:f9:65:70:58:
82:8a:cc:09:00:ae:3f:58:55:02:45:06:ad:84:a2:
53:99:01:02:2f:f2:61:b9:15:b2:5a:f3:06:2e:7b:
17:b5:f6:78:1c:a9:56:4b:c5:a4:5b:51:95:23:26:
11:f1:1d:67:c2:14:58:54:aa:65:c3:a7:0c:0e:92:
0e:95:35:a9:83:c5:81:e6:8b:c4:e0:b5:c1:42:6f:
aa:27:c3:d9:46:00:87:25:db:43:3a:35:a8:9a:a2:
85:92:b9:a5:97:48:36:a3:0c:7d:11:b8:5b:fe:c0:
77:4d:12:0e:46:8f:3c:ed:47:ec:41:f4:e1:74:d5:
66:6e:70:84:95:c7:64:23:f7:6f:ed:60:71:e5:35:
5b:db:dc:66:00:f0:a5:68:98:15:ba:c8:81:01:3b:
26:0c:8b:52:34:1f:f3:cb:34:9a:39:8e:61:15:94:
e5:2e:4a:d1:77:16:48:12:37:57:d7:0d:cf:e3:77:
01:3c:0d:2c:f3:bf:05:98:a4:42:13:20:85:89:47:
d7:c9:38:74:e4:7f:e8:1f:cb:e0:40:66:48:5d:c1:
71:f2:ad:27:72:e9:58:99:39:69:06:b3:02:d6:6b:
3d:a1:f2:e4:cc:23:d8:9c:b0:fa:c5:ca:2e:49:4e:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:47:E4:44:E4:D8:8C:1A:33:F2:74:53:3E:28:90:2B:45:5F:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHhH5ETk2IwaM_J0Uz4okCtFX50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:35:7d:8c:a6:ed:77:a4:3d:65:ee:ec:92:7e:b7:ac:ed:60:
26:15:2c:cd:94:34:f5:2d:84:c4:28:93:66:06:48:f9:26:8a:
d9:20:e7:80:ea:4e:f6:3c:bd:a3:e1:7d:b6:3e:ba:58:45:26:
17:22:85:1e:20:bc:da:e3:42:57:b6:d1:e2:51:96:4c:17:4c:
90:54:84:b6:84:24:f2:1b:e8:df:6c:cf:12:12:77:c2:df:9e:
da:c9:90:66:c6:c1:29:c6:9a:16:3c:de:b3:4e:03:55:52:f9:
e1:d5:87:ef:f8:b0:55:4f:ff:50:a8:33:2e:71:d1:ab:a4:bf:
59:16:48:18:3c:d4:a2:fa:9f:0d:ae:6a:59:9d:43:60:a7:c7:
9b:c2:7f:5e:21:42:31:5a:b4:bf:46:1d:f7:78:de:96:11:65:
4d:b9:9c:88:5f:d2:7d:c6:e3:35:a7:13:9f:56:39:28:3c:73:
7d:4c:72:a7:40:ba:5d:2d:d1:19:ae:97:25:ba:80:c2:06:43:
c6:04:76:e5:dc:5b:15:07:49:a9:75:64:dc:fa:67:c0:bf:93:
4a:83:1a:19:5c:6d:0d:5b:36:5d:a1:e3:6d:e8:55:17:3e:18:
6e:8a:2a:a5:72:04:6d:1b:04:54:1b:6d:f4:b2:74:a1:f6:ba:
50:da:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:43:09 2025 by rpki-client