Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xYgXTvVhEbWYaTuvHfAmc5YAWy0.roa
File: xYgXTvVhEbWYaTuvHfAmc5YAWy0.roa (raw, json)
Hash identifier: wMtYhQH9ZuZXZzWv0nBMq0umJXqYxUj1Cauza5Xja2Y=
Subject key identifier: C5:88:17:4E:F5:61:11:B5:98:69:3B:AF:1D:F0:26:73:96:00:5B:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018421193638E39D68DD6A88D2396AD2A43C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xYgXTvVhEbWYaTuvHfAmc5YAWy0.roa
Signing time: Sat 29 Oct 2022 00:16:51 +0000
ROA not before: Sat 29 Oct 2022 00:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:21:19:36:38:e3:9d:68:dd:6a:88:d2:39:6a:d2:a4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 00:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c588174ef56111b598693baf1df0267396005b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:3d:29:8e:06:9c:ad:41:f9:7d:6e:34:f9:
59:2d:db:ad:54:89:86:fb:3c:00:ea:28:b4:68:af:
67:57:04:d5:df:9a:61:e0:6a:9a:99:92:18:0d:44:
b1:89:3c:99:7a:53:f4:a4:05:f0:0a:c5:d8:71:fb:
3d:e2:c1:19:d8:27:c9:15:1b:79:b2:c4:ea:6b:eb:
be:4e:7c:79:0e:43:93:77:4d:15:b6:15:66:2e:97:
df:a5:71:45:da:a0:19:80:8f:43:41:bd:8f:90:be:
91:77:b6:a2:e2:dc:2a:f5:12:50:cb:76:f4:0a:87:
ad:d4:f9:39:33:0e:90:01:de:d8:6f:f0:78:d8:3f:
29:0a:40:90:bb:07:cd:0e:19:b1:74:2b:0b:86:16:
6a:98:8c:31:3b:52:00:75:c6:46:22:34:e5:5c:f4:
3a:85:24:4c:9c:26:58:64:4a:41:dc:ae:b9:47:c6:
3e:54:17:03:69:de:7c:02:15:aa:e3:2c:fc:84:b4:
0e:a9:a4:28:68:64:a4:1e:a1:03:bd:1a:d4:f0:cd:
cb:c0:7a:68:1f:21:47:92:39:9c:7a:64:85:6a:ee:
f1:b9:a0:07:29:dd:ca:82:47:14:a6:e4:45:4b:be:
07:5e:15:ee:01:4c:98:d6:9a:03:40:2e:73:6b:73:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:88:17:4E:F5:61:11:B5:98:69:3B:AF:1D:F0:26:73:96:00:5B:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xYgXTvVhEbWYaTuvHfAmc5YAWy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:31:b0:4b:22:d5:f4:05:1e:ee:2e:c6:bd:b8:5b:a8:98:7a:
8c:2b:b0:db:e8:5a:ce:70:26:b0:de:95:8b:61:84:e5:73:c4:
13:04:5f:25:34:39:76:65:cd:0f:69:29:12:e1:88:17:79:7f:
97:70:bb:4f:39:12:0c:0f:0d:0d:64:6c:a0:8c:12:b4:cf:5d:
2c:c6:08:97:24:3c:bb:80:50:ec:9a:0d:1d:f3:75:48:8a:68:
00:e3:de:28:23:87:62:ea:49:bf:8a:aa:98:f5:36:c4:79:fb:
25:40:fe:05:c9:a6:5d:c3:9f:b1:25:6b:b4:ad:d9:3c:73:3b:
49:55:27:c7:6b:3b:21:04:cb:9c:20:1e:48:18:c9:8e:87:9c:
12:11:a7:68:83:e0:63:3d:e0:da:b4:19:93:e8:d5:70:97:99:
a8:11:e5:17:c1:fe:8d:81:a4:ef:3a:2e:c8:01:a6:18:3d:a2:
bf:ad:89:26:a8:18:ff:be:61:a5:93:cd:60:09:c6:e6:70:6d:
cf:e2:5e:63:b0:4e:00:f5:9a:7a:1b:88:95:46:a4:0a:99:e9:
fa:b1:d5:e3:e5:af:00:91:25:b6:76:97:b9:ea:7b:76:59:75:
9f:65:80:cd:30:5b:d4:15:f0:27:1b:6c:f9:3e:a5:27:ff:39:
6c:14:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:59:03 2025 by rpki-client