Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xNO7TlJmDZBTX6xuQAba3R7ITkg.roa
File: xNO7TlJmDZBTX6xuQAba3R7ITkg.roa (raw, json)
Hash identifier: Aq+fG3AkBE0RVD9Pf6sNnEigHGvaMyG+SL2Hi9f14+s=
Subject key identifier: C4:D3:BB:4E:52:66:0D:90:53:5F:AC:6E:40:06:DA:DD:1E:C8:4E:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CCBEB5A28225E2C42E39CF1DACA70A0C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xNO7TlJmDZBTX6xuQAba3R7ITkg.roa
Signing time: Thu 01 Dec 2022 08:12:41 +0000
ROA not before: Thu 01 Dec 2022 08:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:be:b5:a2:82:25:e2:c4:2e:39:cf:1d:ac:a7:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 08:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4d3bb4e52660d90535fac6e4006dadd1ec84e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:da:c6:c8:c1:70:37:ff:fd:91:fc:19:a8:
19:7b:34:b5:5f:fb:69:a9:a3:01:ec:0a:3e:77:53:
00:41:df:9e:26:d1:c9:89:44:fa:48:6f:52:22:a9:
17:13:21:95:1e:7e:38:a1:ae:37:63:09:78:38:5d:
58:1b:86:be:d3:87:e5:e3:3d:9e:c1:41:0d:e9:d3:
32:c0:82:b1:46:c3:5d:47:87:0d:e4:93:4b:c8:f4:
dc:30:c9:4d:cd:2f:65:5c:88:65:04:8b:bb:28:51:
0a:48:ab:9b:25:23:f2:50:5f:8b:ed:6d:7b:e3:34:
b9:39:7b:bf:36:ed:56:f1:76:50:4b:ce:45:dd:3b:
e1:41:87:03:10:99:b4:af:ef:74:7e:c4:f9:12:e7:
e0:6a:ec:17:c3:49:70:47:c2:92:09:94:80:67:7d:
3e:30:23:24:4f:3f:23:d5:71:55:17:10:0c:28:ed:
18:9f:f5:12:31:77:15:f7:28:11:ce:1e:b1:a3:3e:
11:d0:3b:9a:74:60:e1:ec:f4:99:2e:99:d5:eb:61:
3c:9c:5e:91:4e:d7:d5:5b:ea:df:55:40:e2:be:78:
b3:d0:67:48:fb:1c:42:5b:fd:48:81:52:2b:1d:55:
a0:4f:3f:64:00:fb:1b:8a:d7:90:45:7c:d0:9e:7b:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D3:BB:4E:52:66:0D:90:53:5F:AC:6E:40:06:DA:DD:1E:C8:4E:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xNO7TlJmDZBTX6xuQAba3R7ITkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:67:b1:e7:1b:72:7e:ae:3e:c2:fd:18:07:e4:2e:11:c7:e3:
fe:aa:b2:7a:37:b4:cc:24:fc:f7:fc:92:07:b1:9e:cb:24:a6:
1c:72:5f:23:a2:3f:ce:05:3e:fb:20:0e:77:ce:11:b7:e4:f9:
84:61:27:f8:49:06:9a:65:7c:8a:64:ac:24:ab:92:73:a3:a5:
19:d5:99:6b:d8:b4:8d:0f:56:ca:30:d1:fd:90:ee:a5:4c:ed:
d8:31:70:8a:c5:aa:02:4f:f3:b9:b9:03:b4:dd:ae:ec:93:ac:
f3:aa:f5:07:57:0a:13:9f:dd:79:da:9d:89:16:6f:65:57:6b:
f5:80:28:b4:a8:81:e1:fe:43:b3:cc:cf:a0:b8:0e:27:79:0e:
43:ff:4c:d0:f8:09:ac:a2:f1:5f:96:a6:5e:06:ff:90:a8:02:
c3:c8:87:16:1d:99:9e:fa:b4:5a:d0:0c:05:b2:23:9a:c8:ae:
87:70:72:ac:4a:77:31:b9:51:85:9c:83:ea:06:e5:c1:d8:12:
65:e6:d5:d4:05:bf:c3:2d:07:b7:ca:94:e8:f7:ea:83:35:7d:
6d:ed:5b:54:c5:2a:5b:f5:86:63:57:9d:b1:05:c0:c2:6f:42:
82:bd:2c:c9:00:ed:27:6a:2d:45:db:9f:19:2f:3a:74:fc:07:
c2:90:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:40:10 2025 by rpki-client