Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHxE3gtTkxw01pfXyaKETb9T6bk.roa
File: xHxE3gtTkxw01pfXyaKETb9T6bk.roa (raw, json)
Hash identifier: pO5OIZcpQZ+IdiwOgjJqApHNVBfo9gbMVt/05pSG2dE=
Subject key identifier: C4:7C:44:DE:0B:53:93:1C:34:D6:97:D7:C9:A2:84:4D:BF:53:E9:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F5F47F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHxE3gtTkxw01pfXyaKETb9T6bk.roa
Signing time: Thu 03 Mar 2022 18:07:43 +0000
ROA not before: Thu 03 Mar 2022 18:07:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868515316 (0x6f5f47f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 18:07:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c47c44de0b53931c34d697d7c9a2844dbf53e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:9b:de:07:27:c8:a1:cc:c4:94:ff:65:ed:
32:5d:21:bb:85:07:e5:87:b4:d3:9c:30:7b:59:f8:
7d:ad:0c:e6:a6:a1:0b:84:3a:8c:b3:64:83:b5:f1:
4e:e0:59:75:52:d5:ef:aa:62:75:d2:7b:3e:41:0f:
0d:6d:47:5d:b9:c8:ad:51:34:ff:6a:f6:7e:85:3c:
72:0e:89:f7:3a:80:88:9d:1c:df:46:68:2e:d5:01:
c4:0d:9c:85:ac:9d:29:86:e3:df:cb:96:87:69:8d:
c0:6b:e8:a9:33:dd:c1:2d:2a:06:3e:8a:99:23:64:
f4:63:0d:9d:06:78:e4:74:56:00:fc:fb:7e:91:6b:
9b:06:c4:06:33:2f:96:0c:36:66:bb:66:3c:ed:90:
c5:b4:8a:c8:db:3f:75:cb:18:cf:1d:4c:6d:0e:f8:
1d:56:0a:e5:fb:ad:ce:4c:e2:d5:78:f1:58:82:14:
ed:39:01:07:33:5f:cd:35:08:1b:18:13:68:a2:7f:
a3:af:cc:a6:7d:b8:dd:a1:99:2b:e4:08:28:e1:8d:
8a:5f:9e:96:b7:8c:22:16:a5:94:8f:5c:b6:b6:0c:
ad:49:ad:4e:5d:0a:f3:34:71:c5:e4:4c:6c:b5:42:
57:f5:bb:4b:17:bb:40:a9:43:a3:49:90:18:1e:c5:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:44:DE:0B:53:93:1C:34:D6:97:D7:C9:A2:84:4D:BF:53:E9:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xHxE3gtTkxw01pfXyaKETb9T6bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:cc:b7:7e:94:8b:0e:90:d7:b2:af:e5:69:44:89:bb:5d:49:
c1:58:4f:91:91:14:f5:ef:1e:3c:e1:ee:f6:9c:e3:94:75:cb:
6e:97:c0:26:33:89:5f:1e:00:40:3b:7a:dc:9f:da:47:e8:fe:
1d:23:6b:c2:8c:ea:4b:47:b6:96:d6:88:c2:83:d5:3b:1f:e4:
07:30:b6:70:a8:1c:2b:2e:98:75:9d:ce:5b:90:d8:35:f2:60:
44:84:2f:89:a6:2b:a4:fe:56:56:4c:42:e9:ba:9b:3c:4a:b5:
39:b3:44:85:63:3b:bc:71:0c:6e:fb:d0:42:17:b9:7b:30:a2:
4c:b3:d7:ae:b7:a2:13:52:1a:bf:ca:9b:25:c1:e3:87:24:b5:
34:7b:b7:71:30:4d:3d:b0:b7:47:8f:03:6e:8a:6c:a6:93:04:
a9:fa:30:5d:26:7e:5b:a7:24:9b:8b:47:b2:d5:34:ab:38:77:
7f:9e:8f:ba:d5:36:4e:72:7a:e5:19:22:ef:1d:86:0e:75:c3:
d9:33:6a:2c:cc:5c:f5:1b:7a:8b:63:e0:f0:4b:e3:ca:ae:5d:
a8:f2:5f:96:8c:d8:18:06:4e:7d:80:38:bd:a3:1b:16:1c:20:
77:5e:d7:65:69:3b:ce:a2:2b:b6:12:c4:fd:e6:31:ef:92:a5:
51:2c:64:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:18 2025 by rpki-client