Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZct0SG2YONlaHjqsmWZScwXn88.roa
File: xZct0SG2YONlaHjqsmWZScwXn88.roa (raw, json)
Hash identifier: XVEmRQ741/ZMQ3/omFUK7Lk6lXsrhqQCd4YVCzUGTo8=
Subject key identifier: C5:97:2D:D1:21:B6:60:E3:65:68:78:EA:B2:65:99:49:CC:17:9F:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018994E5AAAF8459119462379D2D9B9E255C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZct0SG2YONlaHjqsmWZScwXn88.roa
Signing time: Thu 27 Jul 2023 01:10:26 +0000
ROA not before: Thu 27 Jul 2023 01:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:e5:aa:af:84:59:11:94:62:37:9d:2d:9b:9e:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 01:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5972dd121b660e3656878eab2659949cc179fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:61:ac:55:be:c9:ce:82:8a:4a:ea:4d:7c:
ba:82:76:a1:7b:b4:92:ae:fc:e8:90:85:31:18:31:
41:cc:ce:61:d3:b3:96:f7:04:f0:4e:50:e1:7e:5e:
d8:0f:d3:0c:13:0d:9f:ce:07:2d:97:d3:34:9e:54:
9c:2c:62:68:fd:8b:7d:b0:03:f8:58:db:91:0e:2a:
ee:6d:36:ae:b9:4d:21:7a:6a:73:90:74:af:1f:a3:
72:f6:5a:31:24:4f:82:39:e0:ae:cb:80:1f:76:c2:
98:69:d7:dd:74:7e:cd:79:de:ce:d6:c6:48:25:2a:
07:57:eb:03:df:83:f2:b7:c3:b3:4e:81:27:05:67:
7c:a7:5f:3d:42:8b:13:4e:7a:c0:08:76:08:5b:f2:
09:21:84:0f:b6:c1:d1:c8:0c:1f:ce:f7:30:98:92:
05:75:c1:5f:5c:a6:00:85:3b:b7:97:1c:bc:cd:0b:
97:48:2a:16:83:e6:df:13:22:eb:4a:aa:01:2c:c2:
bc:33:10:0c:3d:be:80:27:33:3d:2d:55:70:2a:23:
a3:9c:25:35:13:be:88:e8:28:8d:6e:fe:1d:98:2a:
d8:5b:73:ff:22:9f:a7:16:1f:db:8e:94:ed:91:0b:
d1:ad:48:39:72:00:eb:af:13:03:b0:94:cf:77:9e:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:2D:D1:21:B6:60:E3:65:68:78:EA:B2:65:99:49:CC:17:9F:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZct0SG2YONlaHjqsmWZScwXn88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:78:90:69:f6:5a:f1:c0:f6:70:6f:b5:2e:2f:4d:e2:ee:3d:
85:d7:74:2d:ec:c4:ef:58:3e:b7:27:f9:f4:b5:57:79:02:0b:
b8:6e:d6:91:67:d8:9a:81:65:f6:51:97:6d:da:25:8a:79:e1:
29:c4:3f:16:0f:bb:fc:c4:da:db:44:4f:91:fb:10:b2:f5:36:
29:37:9a:26:9c:ef:75:23:52:57:3c:ff:0b:76:1e:c6:08:7f:
41:75:ac:c3:03:c4:3d:6f:d8:87:60:b8:b2:11:96:cd:ab:c5:
ef:65:6a:e5:06:ec:3d:bd:a6:a0:5b:ab:f3:4d:27:a0:ec:d4:
19:5c:c4:ba:fa:35:df:a6:53:47:32:22:b3:ae:fc:eb:cd:21:
3f:d0:57:f3:8c:d5:c3:20:6a:9a:d0:df:7f:1c:26:11:e3:ac:
bc:77:03:f1:b8:36:6c:d4:d2:07:67:1c:80:fd:e7:ef:f3:29:
97:00:da:5e:86:7b:b6:f0:41:3a:2a:ea:4c:77:49:68:83:3c:
00:15:2d:6a:b3:c8:78:37:90:64:5c:7a:06:a4:e2:80:3c:9f:
f7:cc:3f:8f:41:dd:b1:87:83:3d:ba:b7:b8:66:22:5a:4c:17:
da:4d:7e:42:a3:d0:a4:21:e7:47:5b:5c:bd:78:98:97:5c:f4:
0a:48:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:46:24 2025 by rpki-client