Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHkULteDcop0Mb2TxUlY2gViBes.roa
File: xHkULteDcop0Mb2TxUlY2gViBes.roa (raw, json)
Hash identifier: kOljCvk0OYsSuD88DEsGbWGcuZnYzt2AUT4VK5kx9RU=
Subject key identifier: C4:79:14:2E:D7:83:72:8A:74:31:BD:93:C5:49:58:DA:05:62:05:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1FC41A1F86E8222D6CB5FBAF55F80E15
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHkULteDcop0Mb2TxUlY2gViBes.roa
Signing time: Wed 23 Aug 2023 00:20:59 +0000
ROA not before: Wed 23 Aug 2023 00:20:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:c4:1a:1f:86:e8:22:2d:6c:b5:fb:af:55:f8:0e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 00:20:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c479142ed783728a7431bd93c54958da056205eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:84:08:a0:70:94:95:b2:3d:01:f0:1b:a7:
44:34:d8:13:da:f0:fc:bc:30:65:7f:1c:b4:9c:6c:
5a:2a:55:b2:a0:ca:e8:43:e8:db:3b:a0:e5:90:44:
25:fa:06:0e:2c:67:51:a0:17:ec:3e:bd:9c:ca:dd:
6b:b8:7d:e1:12:78:2f:76:f4:e4:1d:f7:67:95:8d:
63:e3:90:6b:e2:2b:b6:7b:64:ee:ba:bc:19:51:bf:
51:7e:ab:d7:77:9a:56:68:01:d1:b2:16:b4:f3:54:
ce:33:61:6f:e2:3b:a1:d5:26:18:76:64:b2:da:8b:
e9:28:65:03:6a:ae:3d:36:14:5b:a7:a4:fe:78:a6:
cc:48:99:f8:78:47:1d:3d:e3:06:36:0d:06:cb:37:
45:c2:fb:e6:1a:26:84:f6:51:2d:16:61:4c:91:28:
e4:42:bc:01:64:b5:1e:b0:66:2c:6f:70:42:ef:dd:
7e:40:68:44:2b:eb:42:7a:d8:b8:21:14:1b:a9:4c:
7a:84:28:c2:41:d4:74:e3:a4:41:6c:41:51:6e:14:
1a:b2:ca:f6:cf:31:fc:26:d4:19:f1:fc:aa:ff:76:
00:77:d6:54:60:ad:94:95:7a:fe:63:01:ba:b9:fd:
3f:62:82:53:fc:1a:d1:20:52:1d:24:a8:45:1a:ab:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:79:14:2E:D7:83:72:8A:74:31:BD:93:C5:49:58:DA:05:62:05:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHkULteDcop0Mb2TxUlY2gViBes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:91:b5:05:29:f2:42:f9:0d:24:ef:03:f1:4c:1a:6f:1e:56:
5c:32:06:ad:38:96:06:4a:b1:97:98:b9:9f:ba:b2:41:74:17:
1d:af:79:56:9c:11:17:e2:83:39:16:26:90:42:72:25:92:c4:
82:9a:6f:58:49:c0:51:e6:95:fd:d1:cc:bf:80:4a:44:c1:d8:
c3:0c:bc:23:12:fa:11:1a:12:87:62:49:30:94:c8:4e:51:f8:
69:44:eb:4f:ef:c7:9a:01:c9:8c:62:79:01:c6:68:b8:ac:3e:
42:aa:31:d9:81:37:14:70:4f:fc:32:85:d5:31:f4:14:ae:30:
5c:27:8c:53:e8:c3:a3:d7:95:04:43:19:e8:67:9d:ce:bf:7c:
88:8b:92:ef:e6:62:75:af:e2:71:22:53:a9:77:28:35:37:41:
44:dc:3c:86:d1:e4:3a:4f:5d:9f:4f:a3:ab:a1:47:38:22:a8:
7e:59:14:6e:d7:a6:b2:98:ca:e4:02:7c:80:09:35:2b:ce:74:
d3:bb:77:9e:af:b9:7b:c5:07:47:3a:3e:8e:6d:1e:7e:11:9c:
68:66:da:79:16:61:a3:ee:32:8c:45:ba:77:07:33:0e:ef:3d:
cb:c6:e9:79:2f:0d:31:59:27:5a:9a:dd:ba:d6:74:d5:23:0d:
c5:53:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:45 2025 by rpki-client