Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbMSzyrQdLOgg-Q1Pdi_IfCh9R4.roa
File: xbMSzyrQdLOgg-Q1Pdi_IfCh9R4.roa (raw, json)
Hash identifier: 2g2zR/pUY8vcfAZivG3Kvxb45NQJHImsBRc8zsbyauE=
Subject key identifier: C5:B3:12:CF:2A:D0:74:B3:A0:83:E4:35:3D:D8:BF:21:F0:A1:F5:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F5EB790737DAAFC74584233AC0E6D812
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbMSzyrQdLOgg-Q1Pdi_IfCh9R4.roa
Signing time: Sat 28 Jan 2023 01:08:47 +0000
ROA not before: Sat 28 Jan 2023 01:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:eb:79:07:37:da:af:c7:45:84:23:3a:c0:e6:d8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 01:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5b312cf2ad074b3a083e4353dd8bf21f0a1f51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:5b:c3:92:e3:71:b2:60:ca:02:b9:17:0a:
3e:16:19:ba:a0:08:5c:09:22:fc:81:92:bf:85:11:
d5:cb:3e:13:9c:76:78:01:0a:7d:94:c3:05:f4:9b:
98:76:02:d1:55:17:3f:19:18:b9:fa:aa:db:ba:9c:
e7:7e:c6:f1:37:a7:f3:90:d7:d0:9a:c6:8d:7e:05:
6c:ed:3f:a5:b8:f2:b4:c9:e2:16:cb:4b:62:fd:4d:
fd:1b:8e:df:c4:b9:50:53:32:92:25:af:12:ec:b8:
ae:02:d1:70:5b:5b:85:19:1d:b3:4d:76:ee:a4:5a:
3b:b3:39:44:5d:82:a5:c1:31:1f:82:94:3b:33:45:
77:c1:c3:be:8b:5e:a6:08:14:0d:74:c9:b7:6a:b6:
9f:13:72:41:e7:f6:dc:b8:4e:81:be:aa:6f:0d:54:
85:4e:d6:cc:db:e4:73:49:8c:88:b0:5a:06:73:e6:
cb:9c:b5:fa:50:77:74:11:e2:2e:a7:08:a5:de:30:
5c:c5:ad:1b:8c:d1:f2:dd:46:01:29:56:c9:30:ec:
ce:1e:23:86:8a:22:f5:79:87:7d:57:e6:53:15:af:
48:7c:b0:74:37:2a:c9:56:b0:2c:8a:d4:93:ca:76:
27:cb:12:fc:0d:0c:da:96:44:41:cc:b7:67:9b:46:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:12:CF:2A:D0:74:B3:A0:83:E4:35:3D:D8:BF:21:F0:A1:F5:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbMSzyrQdLOgg-Q1Pdi_IfCh9R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:58:d1:51:c1:3a:dc:9f:f0:53:16:cb:7a:d1:d0:9a:4f:1f:
29:2e:85:3b:45:c9:12:a5:18:87:bc:d8:98:4d:2a:ea:f3:f9:
16:b5:72:00:20:a0:e0:71:15:1d:5e:1a:e4:3b:87:c3:b0:d4:
d6:c3:d7:c2:a9:25:51:0c:0b:c9:2f:09:f4:78:c7:ee:df:85:
7b:dd:df:d2:07:4d:98:83:cf:c0:42:7b:10:f7:3e:4f:2f:42:
cc:c5:9b:39:2b:18:94:25:ff:2a:df:ba:78:74:b4:24:95:89:
b8:dd:5d:94:4c:9a:ef:cb:b4:a4:94:4b:29:9e:6d:48:57:83:
5e:7f:bd:fc:d1:c8:ac:12:c1:0f:3f:67:66:43:ec:12:6b:57:
62:0f:23:6d:65:c5:fc:16:18:8a:7f:25:fa:a0:fb:6c:9a:f5:
98:4f:06:c8:01:d5:c8:af:93:63:92:10:07:83:fc:1a:32:e9:
ea:1a:cb:51:c5:e1:93:af:93:51:10:cb:31:5c:3d:ef:84:a3:
33:f7:97:6e:7a:a8:3e:1d:07:08:c0:02:d0:cc:18:e9:52:62:
cd:9a:1e:8a:30:07:f7:52:94:b6:1d:1f:fe:53:80:b4:12:f0:
d9:91:09:e4:ad:47:17:f9:e6:05:95:9b:7c:78:74:b4:12:cf:
73:73:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:53 2025 by rpki-client