Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xUGt0FqPq-gcSNovExwd-JwQFIY.roa
File: xUGt0FqPq-gcSNovExwd-JwQFIY.roa (raw, json)
Hash identifier: aiEWgMQtxv0dQamtqJLmmMVq2RDJLYdkjhD4ix/LX0g=
Subject key identifier: C5:41:AD:D0:5A:8F:AB:E8:1C:48:DA:2F:13:1C:1D:F8:9C:10:14:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826BC92F953A1ABA0370E2A6901DC81FEB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xUGt0FqPq-gcSNovExwd-JwQFIY.roa
Signing time: Fri 05 Aug 2022 02:15:23 +0000
ROA not before: Fri 05 Aug 2022 02:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6b:c9:2f:95:3a:1a:ba:03:70:e2:a6:90:1d:c8:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 02:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c541add05a8fabe81c48da2f131c1df89c101486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:52:8a:07:b7:d2:95:58:b4:72:cd:9a:41:
64:b5:b3:73:29:5e:ef:2b:c3:59:b6:e1:da:d5:b9:
88:71:7d:81:be:e9:04:6a:e5:77:39:54:97:d1:fd:
74:07:f0:e1:5d:5b:fc:33:34:59:e9:8b:51:ae:c7:
5c:69:8c:e1:97:51:c2:24:77:4e:2f:e7:48:2e:55:
46:4a:2b:65:ea:9c:33:24:38:52:ea:7f:8b:5d:81:
ae:41:fe:25:86:3e:a7:74:79:34:7c:ee:60:92:90:
8f:31:26:00:c3:3b:68:f1:29:36:b1:86:00:5a:e3:
72:bd:4a:17:66:6d:b4:86:23:8c:f9:26:f4:ad:cf:
1e:a3:a4:46:09:06:e0:3d:46:6e:65:a5:81:c7:ff:
60:d7:cb:9f:73:29:c9:5f:38:4c:9c:47:6b:7c:0a:
6d:17:eb:5b:de:3f:a5:65:40:55:97:7a:32:d6:68:
a7:6d:7d:ed:f8:00:f7:e7:ca:d7:a8:6d:24:d8:7a:
4d:cc:29:12:69:fe:62:69:a6:82:5c:c9:b0:46:bb:
11:92:00:38:8b:a5:04:3f:3a:a2:7a:fa:9d:16:34:
4a:9a:bc:cb:95:5e:ca:4f:7b:a2:2c:a6:ca:29:ee:
ff:af:54:b9:dc:a8:8c:5c:dc:1f:18:cc:1a:67:7f:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:AD:D0:5A:8F:AB:E8:1C:48:DA:2F:13:1C:1D:F8:9C:10:14:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xUGt0FqPq-gcSNovExwd-JwQFIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:d6:e2:1f:24:d3:80:60:c1:f0:ad:9b:52:67:d6:90:03:1c:
f9:25:0c:79:49:f2:b5:fd:2a:c3:a4:ee:1f:15:0b:f1:5d:8a:
de:4d:6c:40:f4:73:14:ee:f8:f0:52:95:7e:56:9d:22:36:42:
71:d5:24:8c:60:4d:28:9a:ac:7d:6b:3a:cc:b8:3d:51:ce:84:
7e:7d:c0:1d:98:aa:e1:fb:17:96:c9:d5:f3:f0:08:e5:07:32:
3a:5f:64:d9:18:fe:71:42:dd:1a:00:7d:87:b5:6e:4e:b1:09:
ed:b5:79:70:90:da:89:ea:2e:10:24:8d:ec:57:5c:07:70:84:
03:7b:ee:90:16:ae:24:ce:00:af:61:37:59:b0:c1:ce:a9:cf:
57:cd:32:e1:04:87:5f:2c:85:df:2f:6c:98:61:1e:c6:5c:74:
d1:f9:59:59:e9:49:69:ab:ce:fd:3e:50:cf:7e:c9:b6:f4:17:
9d:51:a7:54:0e:64:60:07:6c:91:01:23:23:a0:10:7e:37:28:
c1:7e:2c:73:7a:fb:31:0d:69:38:fd:1b:71:10:d9:57:a7:a4:
42:06:02:2b:a2:30:ad:4b:af:ff:49:0a:74:d2:7a:1c:bd:06:
ea:0d:8e:b2:3c:88:31:44:79:f5:0d:db:96:2f:b6:73:5a:e3:
0a:80:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:25:13 2025 by rpki-client