Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xRGqHnGbM9nvn-34EFVAa-XgwT0.roa
File: xRGqHnGbM9nvn-34EFVAa-XgwT0.roa (raw, json)
Hash identifier: tiUEmvILUWn9oXT/NmYLbD69k+TO3bE2HhJn8lw7Xb8=
Subject key identifier: C5:11:AA:1E:71:9B:33:D9:EF:9F:ED:F8:10:55:40:6B:E5:E0:C1:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75034809
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xRGqHnGbM9nvn-34EFVAa-XgwT0.roa
Signing time: Wed 23 Mar 2022 10:10:37 +0000
ROA not before: Wed 23 Mar 2022 10:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963149321 (0x75034809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 10:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c511aa1e719b33d9ef9fedf81055406be5e0c13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:2b:7b:88:f4:1a:fa:24:ef:26:05:4e:0e:
f4:38:39:79:47:cd:0d:1d:06:00:1e:73:2f:f6:d5:
89:be:9b:0d:fc:16:97:9b:33:14:58:e4:e0:e9:ea:
c6:b5:15:b1:d4:b1:79:60:95:72:d8:12:e4:3a:eb:
b0:9b:e8:72:70:49:7f:18:69:2d:38:c2:01:35:ce:
f5:7b:d2:c8:d3:5b:64:8b:d0:e1:af:d6:cb:55:46:
97:ba:37:93:c2:8f:a1:3b:e9:7c:cc:1f:26:7a:59:
9b:ec:b7:17:99:43:78:39:ae:1b:65:bf:fd:12:eb:
fe:93:5f:5b:47:c1:3b:88:49:1f:fe:97:81:f7:2d:
83:61:99:3e:c4:60:56:44:db:50:84:9c:c0:b1:2e:
25:26:1f:7b:b1:d2:76:48:96:ea:4e:0a:24:90:4f:
09:f7:22:05:3b:9f:5c:5b:4f:30:52:87:ab:92:dc:
a0:7b:e0:89:96:f4:bf:ad:e2:45:a0:b4:f8:e1:3d:
2e:04:81:77:f2:ba:cc:d3:ab:f1:33:64:8e:6b:8a:
e2:4c:74:0b:e7:27:8a:84:fd:ae:30:3f:9e:97:ea:
37:86:93:88:b8:31:ce:55:c7:08:f2:02:2b:4c:de:
28:29:96:c4:7d:5c:b9:1c:a3:a9:9e:71:4d:3a:60:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:AA:1E:71:9B:33:D9:EF:9F:ED:F8:10:55:40:6B:E5:E0:C1:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xRGqHnGbM9nvn-34EFVAa-XgwT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:f0:91:6d:cf:f6:bf:40:05:c8:40:76:9e:ff:9a:6c:12:28:
57:d6:5d:79:5c:c8:3a:c6:9a:6d:4e:e6:3d:ee:44:09:10:00:
d7:e4:ff:54:6a:d8:ee:55:5f:d4:3a:13:84:bf:a1:1b:8e:ef:
6c:6e:45:79:ee:2d:58:bb:eb:8b:dc:c7:67:ef:70:6d:ea:9e:
83:c7:6a:4b:7a:12:02:2f:26:24:b8:28:63:73:67:9e:76:94:
40:e5:dd:fb:49:c9:05:7e:0e:18:bb:35:66:a8:8b:65:b9:fa:
4b:ed:76:58:01:9b:84:a4:40:6e:81:bc:d1:fc:7b:29:e8:65:
73:de:b3:32:e2:5e:a4:d6:ab:73:80:76:19:49:90:17:6a:60:
75:56:a4:f3:13:b3:d8:d5:48:bd:75:ea:62:47:3e:cc:8d:3c:
dd:78:c7:39:56:9c:28:aa:f9:d9:65:33:1f:99:b9:a6:01:42:
ad:eb:f9:2b:1b:93:4c:2a:de:5e:e0:77:18:87:0b:52:55:21:
6a:11:74:ca:69:a5:b7:47:1b:cf:28:7c:63:58:92:8c:d6:49:
73:98:6b:a8:ae:7f:b4:4a:14:ad:8d:27:ca:9b:c5:94:8b:a8:
bc:ae:18:8b:8b:36:ce:f1:7b:9f:26:ba:55:5b:5c:6d:63:7f:
ce:25:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:08 2025 by rpki-client