Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xLAN0MlZ-mWeZjIQj6agsrvgGqU.roa
File: xLAN0MlZ-mWeZjIQj6agsrvgGqU.roa (raw, json)
Hash identifier: 9+FKEuTHDJp6hyoJxp49G2jm4ghR+IC2//gtPR153Iw=
Subject key identifier: C4:B0:0D:D0:C9:59:FA:65:9E:66:32:10:8F:A6:A0:B2:BB:E0:1A:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018524E8344060F17A0360319618AA4112C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xLAN0MlZ-mWeZjIQj6agsrvgGqU.roa
Signing time: Sun 18 Dec 2022 11:04:35 +0000
ROA not before: Sun 18 Dec 2022 11:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:24e7:d049/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:e8:34:40:60:f1:7a:03:60:31:96:18:aa:41:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 11:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4b00dd0c959fa659e6632108fa6a0b2bbe01aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:c9:b8:8a:d4:d0:09:0b:d7:95:a4:1c:59:
04:40:aa:3d:b8:f1:04:5a:36:48:cf:59:4c:d2:ad:
b8:42:0b:17:ce:ae:4b:4f:a4:a6:b6:5c:52:24:a0:
6f:15:5e:2f:2a:f4:73:9c:15:92:96:f0:9d:e5:8b:
88:8c:7c:68:65:3f:db:22:7a:52:6a:39:25:d3:2b:
b8:ce:4e:59:56:84:68:b5:fd:64:bd:2d:00:a7:a2:
8e:6d:23:08:4d:3f:a3:c5:79:f8:c7:2f:7c:8f:85:
a2:ff:0b:a8:e3:f0:5a:ad:4f:f6:14:80:9c:21:98:
ef:9d:bc:2e:ac:3f:e7:8d:77:8f:df:02:ac:79:4e:
a4:cf:3b:66:87:85:33:f6:c2:4e:f9:32:9f:6f:c0:
d2:1f:33:c1:cb:66:f8:d7:12:b0:bb:b9:13:83:e8:
d9:f6:bf:9d:ed:a8:73:9e:24:8b:d5:84:5e:91:48:
76:f0:d1:05:c6:f8:f7:33:9c:6a:3b:c0:69:6a:f0:
01:33:86:2c:dc:85:27:34:f7:9f:35:4a:b3:4d:42:
dd:6d:a8:77:a1:26:bf:d3:fb:80:7f:fa:31:2e:ce:
8d:8c:a6:5b:73:81:16:d9:53:c6:6c:6e:19:f7:b7:
c0:9c:9a:2a:9b:d0:c8:10:a0:b7:63:ae:de:89:ca:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B0:0D:D0:C9:59:FA:65:9E:66:32:10:8F:A6:A0:B2:BB:E0:1A:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xLAN0MlZ-mWeZjIQj6agsrvgGqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:dc:6c:75:7a:9c:af:5f:e2:ba:f7:ec:de:38:cf:f8:cd:b6:
a2:e3:dd:f7:96:ab:c8:c2:72:ce:85:b6:dc:b3:70:0d:57:d6:
58:fc:69:66:4d:f2:cc:e5:ba:de:9d:44:3b:1f:ea:8a:d6:25:
06:7a:83:a9:43:ee:26:2b:88:9b:a7:09:cd:fa:60:d3:9c:ea:
ee:2d:2b:d0:d0:31:b1:67:4c:eb:6c:ce:dc:20:be:79:ed:6a:
40:8d:3e:62:ef:63:37:15:92:0d:25:63:20:8a:5c:1e:23:99:
2b:a3:8e:9a:85:d4:ed:fa:3a:eb:d3:47:e8:d5:e2:49:ef:1d:
53:a0:e0:31:9c:ad:cb:62:45:3e:dd:9e:58:51:ac:38:96:b0:
b9:29:83:78:5d:e4:37:22:c6:6f:b9:78:12:35:ac:e1:99:6b:
51:5d:ce:4b:ae:20:d0:0c:82:ef:16:b4:b3:ff:35:23:c0:17:
c1:5f:63:27:66:85:a7:68:f5:57:dc:90:3c:04:26:4a:4b:c9:
95:21:c8:e0:9f:2c:2a:d8:90:5f:8d:f3:94:b7:8c:0d:03:44:
43:51:c4:81:50:41:6e:95:86:30:ee:eb:eb:c7:75:a9:6a:5f:
50:bd:2e:dd:ce:7d:76:f8:d2:37:59:e1:5d:03:7b:63:a0:79:
a4:27:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:06:08 2025 by rpki-client