Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZhO4A4qHEgBIHpv2md_C1qmKrY.roa
File: xZhO4A4qHEgBIHpv2md_C1qmKrY.roa (raw, json)
Hash identifier: FT3B6HLpiZpYbwsGVPvc4h4k5ngxXXjT2HCB7RMUVmY=
Subject key identifier: C5:98:4E:E0:0E:2A:1C:48:01:20:7A:6F:DA:67:7F:0B:5A:A6:2A:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F0F90C51F1506B7D1DA1F1F0F73B68B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZhO4A4qHEgBIHpv2md_C1qmKrY.roa
Signing time: Sat 06 May 2023 12:11:06 +0000
ROA not before: Sat 06 May 2023 12:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:f9:0c:51:f1:50:6b:7d:1d:a1:f1:f0:f7:3b:68:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 12:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5984ee00e2a1c4801207a6fda677f0b5aa62ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:94:45:59:d7:6a:25:99:4f:db:7d:7e:dc:
7e:33:1b:49:71:dd:66:1c:d7:99:5c:be:44:07:a4:
9e:e0:b8:c5:b9:7f:50:17:54:0b:f5:84:14:ad:93:
14:5a:6b:40:58:f3:3e:f1:85:02:b1:b1:06:a5:f3:
64:6b:23:2d:ab:6a:5e:b5:e8:27:55:88:04:ca:ea:
af:3a:0d:ad:66:a6:f3:6c:ff:c9:c5:c7:ef:8f:bc:
e4:46:45:64:92:90:2f:cc:38:4e:4e:0f:11:74:df:
8f:1c:e6:05:9a:6e:2d:9c:f5:da:c5:1d:54:65:e2:
e8:68:1c:7d:36:7e:97:e2:d0:5e:09:64:c9:b2:ed:
70:ec:f9:84:37:33:ee:aa:79:1d:77:5b:6c:8f:ac:
4c:05:7e:c0:e6:66:14:4b:de:9b:fe:c3:b2:5c:8a:
1a:55:e4:d5:5d:50:25:3f:10:56:b4:de:db:78:1a:
c9:4b:41:55:a4:07:ce:37:f6:97:fd:29:f6:c3:0b:
14:9d:1c:73:15:51:de:99:84:d4:72:b1:a4:da:1b:
f2:c6:74:ad:68:89:dc:02:39:42:1c:86:a6:1b:fc:
54:9b:a7:a7:d8:30:22:98:75:53:b8:fb:b7:3c:11:
12:65:02:08:df:33:ff:0c:e3:2d:43:11:0f:08:cb:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:4E:E0:0E:2A:1C:48:01:20:7A:6F:DA:67:7F:0B:5A:A6:2A:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZhO4A4qHEgBIHpv2md_C1qmKrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:aa:d9:42:07:ef:75:8d:08:3d:66:1b:bb:ec:39:02:92:3d:
bd:0f:5c:37:0e:70:08:51:f3:62:e3:3d:0f:1a:5b:7b:f9:e8:
3d:ce:54:1b:8a:79:5f:da:a1:1a:38:d7:47:59:0d:23:83:49:
5c:6b:6d:a6:44:a2:6e:0c:60:44:50:6d:b6:6a:fc:e8:ab:95:
45:fe:91:8e:b3:0f:1a:2e:a4:1a:42:3c:89:e7:19:22:77:27:
6b:6b:5c:06:80:6c:40:3e:76:53:7b:48:b9:7d:cc:f9:d5:3d:
90:08:27:2f:ef:90:e4:f3:86:77:5b:e0:a5:29:d0:f1:69:05:
3b:b8:d1:98:72:ac:52:6c:64:e7:05:91:99:97:b6:55:c3:d2:
e5:ef:a4:59:0d:1c:ca:c6:04:f9:52:5e:e0:99:ab:d7:e4:d8:
32:45:83:c9:1c:84:9b:d1:70:7b:13:96:27:56:1c:74:47:41:
ef:e9:1f:3c:6b:b9:9a:33:af:9a:58:98:9f:f1:e4:74:b0:a0:
ec:dd:e8:19:50:c1:c6:52:6f:54:0e:32:2b:3a:7b:dc:67:61:
fa:ec:f4:32:92:58:78:b2:5a:6a:6e:9a:fa:24:83:06:17:8c:
b0:fe:63:ad:ec:ae:ac:87:e5:21:31:aa:3d:e6:ec:3b:89:c3:
25:9a:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:18:42 2025 by rpki-client