Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xN9wajojPNWLOiCvbnGnqTbNZpU.roa
File: xN9wajojPNWLOiCvbnGnqTbNZpU.roa (raw, json)
Hash identifier: KwL1bWXpn6bKhN7FAGTo5LH5TWltE4cFCM0n5f5/gRo=
Subject key identifier: C4:DF:70:6A:3A:23:3C:D5:8B:3A:20:AF:6E:71:A7:A9:36:CD:66:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018337A1BC63B5A997A0E383330FF3D4E112
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xN9wajojPNWLOiCvbnGnqTbNZpU.roa
Signing time: Tue 13 Sep 2022 16:14:49 +0000
ROA not before: Tue 13 Sep 2022 16:14:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:a1:bc:63:b5:a9:97:a0:e3:83:33:0f:f3:d4:e1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 16:14:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4df706a3a233cd58b3a20af6e71a7a936cd6695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:71:12:ad:ea:c2:fa:fb:8f:f1:4f:a2:30:
b5:2e:a0:e8:05:da:51:a1:cd:d1:3c:a1:63:73:a9:
d3:ef:fb:2c:c1:6a:48:f6:71:cf:cc:8f:54:a0:b0:
65:66:80:96:7f:17:3e:99:d8:54:ae:47:21:83:7c:
e9:f1:a4:2a:3f:91:93:42:9d:16:7f:06:cc:74:17:
5a:a8:5b:55:a7:4e:8d:5e:44:41:09:15:b6:dd:d2:
67:c6:07:52:45:e4:13:79:0d:d4:d8:27:01:bf:a9:
5f:29:b6:9a:44:0e:5d:14:8e:16:00:9f:3f:1a:13:
0f:8f:3a:52:13:cf:98:ff:48:6f:fa:5e:1c:66:18:
23:42:3a:61:04:f9:ec:fd:72:b8:c1:47:97:74:31:
70:d5:4d:72:f9:d6:5f:2a:e1:fb:a3:65:a3:87:c3:
85:09:cc:13:ae:c4:56:3b:c3:23:6d:8d:92:15:15:
47:21:2c:25:cd:de:36:0b:3e:80:cd:69:3b:e9:39:
db:71:fa:8c:08:1e:90:7b:10:c9:2d:72:18:a6:c9:
da:36:e1:f7:96:f2:65:11:0c:62:ee:3d:56:49:99:
8d:23:a0:54:80:3f:a3:32:cc:ba:be:f7:62:78:e6:
25:58:59:a7:a4:2c:99:7c:2c:05:f4:99:e1:fb:aa:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DF:70:6A:3A:23:3C:D5:8B:3A:20:AF:6E:71:A7:A9:36:CD:66:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xN9wajojPNWLOiCvbnGnqTbNZpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:85:fd:64:57:c8:f9:f2:9a:fc:7f:0e:cf:f7:c0:82:d7:10:
4c:17:b3:7f:36:54:ca:ef:94:8c:54:c8:25:28:d5:53:b1:86:
e1:aa:e1:c4:02:7b:bb:b7:98:f4:13:f0:61:1d:15:da:86:f0:
92:56:69:d5:c3:24:1e:b3:50:ac:75:51:22:e9:1f:cb:0d:27:
a9:a7:7b:ed:2a:50:ed:17:3e:99:3e:8e:17:bd:ca:9f:b4:45:
4e:e8:df:30:66:d0:9d:23:48:00:c6:70:64:e3:e7:8a:3d:af:
02:ca:6b:e9:d3:74:59:65:91:74:97:15:39:13:5c:0d:28:b1:
34:e4:d1:d0:d1:08:44:61:a2:89:d9:b8:f7:ad:b0:52:40:60:
b7:27:fd:a3:5a:0c:4a:f3:f8:1c:04:3b:d0:25:80:38:8a:20:
ba:8b:81:90:bc:fb:0f:24:96:09:4a:38:52:21:3d:df:b1:7d:
8d:63:95:dc:10:37:9a:63:5a:8c:3c:39:d5:3e:c7:1c:91:63:
0a:14:8a:90:1a:32:11:a0:38:be:30:9d:54:e0:47:6e:fc:40:
0b:64:56:eb:53:59:e4:db:8b:af:c1:c4:45:54:fe:0b:4d:c7:
b4:ef:01:61:03:80:42:55:7e:88:c0:0a:59:3a:b8:16:fe:8f:
c4:fb:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:04:59 2025 by rpki-client