Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xRMnS4wWviEw7LjDD0rcB5Nek_0.roa
File: xRMnS4wWviEw7LjDD0rcB5Nek_0.roa (raw, json)
Hash identifier: JoGvFAC++B+eES7czHw4oQSW98Wi6jyazTN6WCkhQXs=
Subject key identifier: C5:13:27:4B:8C:16:BE:21:30:EC:B8:C3:0F:4A:DC:07:93:5E:93:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185258D001FDDF96E15B45F4BF390F48CBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xRMnS4wWviEw7LjDD0rcB5Nek_0.roa
Signing time: Sun 18 Dec 2022 14:04:35 +0000
ROA not before: Sun 18 Dec 2022 14:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:258c:9e40/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:8d:00:1f:dd:f9:6e:15:b4:5f:4b:f3:90:f4:8c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 14:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c513274b8c16be2130ecb8c30f4adc07935e93fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:2e:4b:65:12:ae:95:23:48:ff:ae:d3:53:
29:ee:2a:93:3f:1c:87:92:35:ec:ab:7c:d2:db:5a:
bf:fb:9e:37:2e:e4:3b:60:90:26:de:a5:05:7b:91:
1a:a3:7b:c4:5d:62:c7:a1:9b:50:19:7f:2c:cf:ac:
ee:8d:91:b3:74:c2:32:8f:ca:56:ec:5b:e2:48:5d:
88:f7:9b:be:cc:e3:c0:9a:8f:9e:0b:5d:c2:67:21:
1b:21:2e:72:30:15:fd:f6:1d:8a:0e:f6:8c:d1:06:
77:5f:bb:28:24:e7:ee:39:e8:fb:b5:33:19:b3:90:
b4:6d:7e:6c:9c:8f:31:be:3a:10:a9:3d:0f:fa:c3:
17:d4:0b:1b:ad:5c:d1:25:1b:07:c7:79:fb:21:a4:
66:ff:95:ed:49:1a:4d:22:5a:e0:aa:db:1d:10:cf:
89:d1:9c:32:ba:34:fd:6e:35:51:a5:68:88:ed:f2:
df:15:35:92:a3:26:d0:bc:c6:1d:dc:77:71:ae:eb:
ac:b8:e3:06:de:4b:a5:77:d1:79:73:95:b5:b7:bb:
63:f6:8c:72:19:2d:72:f7:dd:30:59:b8:a8:7f:22:
b6:9d:a2:7e:96:0b:e5:03:9b:fd:f7:7d:4a:cf:1f:
fb:e0:9a:43:78:5e:66:e8:2f:85:b7:0a:b8:18:76:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:27:4B:8C:16:BE:21:30:EC:B8:C3:0F:4A:DC:07:93:5E:93:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xRMnS4wWviEw7LjDD0rcB5Nek_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:20:a7:cb:cb:e9:e2:2c:47:6f:42:3b:00:dd:4b:38:a2:fe:
0d:f3:6a:da:14:c7:bc:e1:59:e4:c2:e5:8d:d7:aa:c7:61:7d:
36:b3:75:06:d6:4e:7a:6a:c8:fe:43:47:e3:8a:a5:04:b8:fc:
01:32:1d:65:07:0e:9d:f1:79:52:d8:f0:33:88:9d:dc:35:54:
e3:18:89:c5:8a:3e:b2:10:76:d8:45:94:11:e3:20:3e:26:53:
af:4c:0d:ef:e3:e0:cc:d4:68:cc:cc:ee:45:af:b1:1f:e7:5b:
6a:1b:00:9b:c8:da:74:32:3c:ea:18:60:d1:46:fe:d4:5f:f0:
26:f7:46:c9:1b:54:0b:db:62:1f:00:f8:9a:56:81:10:2c:f4:
77:ca:c6:80:6d:dd:ce:ec:2d:5e:1c:e7:c9:12:d9:21:cd:db:
cd:0b:66:11:e2:19:dd:39:af:ea:ce:a5:21:f4:41:6e:a4:88:
17:93:f6:e6:7a:21:00:d6:48:bf:7d:37:04:99:82:94:92:22:
0b:17:ed:f7:00:82:dd:77:09:73:27:10:36:9a:22:d1:d4:e6:
9d:c4:9b:a3:e9:46:7c:32:b6:cb:3d:67:46:e7:d4:29:32:6f:
e5:cc:95:03:c4:0e:49:81:84:73:dc:69:a7:0a:85:b3:ec:33:
ed:72:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:18:13 2025 by rpki-client