Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xcEATreDc1sOswN3A9T0HVMJX6w.roa
File: xcEATreDc1sOswN3A9T0HVMJX6w.roa (raw, json)
Hash identifier: spUpqv2GHADtuCd5WCZW2sdzWqb56zJ4VfxOtrhCXHo=
Subject key identifier: C5:C1:00:4E:B7:83:73:5B:0E:B3:03:77:03:D4:F4:1D:53:09:5F:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AEE1B9D32BB5AC481FDADDD6BCA6CFFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xcEATreDc1sOswN3A9T0HVMJX6w.roa
Signing time: Sun 23 Apr 2023 16:10:41 +0000
ROA not before: Sun 23 Apr 2023 16:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:e1:b9:d3:2b:b5:ac:48:1f:da:dd:d6:bc:a6:cf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 16:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5c1004eb783735b0eb3037703d4f41d53095fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:0d:2d:6a:24:f6:e1:b6:22:3a:b8:01:34:
f3:75:ad:fd:be:c7:1a:31:46:43:d1:40:00:37:bc:
ac:7e:d2:dc:34:b2:48:fb:cc:46:1c:0a:f6:95:d1:
da:3f:2d:83:a3:d9:1c:ec:f1:fa:67:b3:53:24:4e:
79:47:d3:d7:62:bb:04:08:e0:cc:0b:8c:b5:11:15:
9f:ec:7e:fa:ee:5a:c3:3a:22:2c:b1:ed:8e:76:90:
13:17:13:3f:4c:d9:14:68:ae:dd:c9:8c:3c:87:cf:
3f:15:db:8d:bc:e1:fb:f5:7f:e5:de:5d:bd:5c:fe:
14:d9:90:f0:2a:bc:ce:50:b8:62:dd:9b:32:bb:51:
65:51:64:52:bb:c7:76:06:f6:ff:7b:38:aa:81:d4:
ba:57:e2:5b:a1:af:44:8f:27:04:31:62:b2:7d:6e:
ca:47:83:d8:17:73:2a:8e:75:b7:92:a7:07:4c:cc:
c0:ec:f3:1b:46:48:76:b5:e3:4f:f1:e9:8e:97:65:
32:6e:96:ad:1b:2e:41:2e:d2:50:97:25:1d:cf:c0:
12:f8:5b:c8:bb:a5:5b:a9:9d:20:cb:88:0a:88:14:
91:4a:bd:b8:0f:2e:9e:b5:2b:96:4f:f1:d5:d5:83:
e6:7e:ec:cb:22:3b:be:54:6c:34:a8:c2:a5:28:67:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:00:4E:B7:83:73:5B:0E:B3:03:77:03:D4:F4:1D:53:09:5F:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xcEATreDc1sOswN3A9T0HVMJX6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:72:ee:96:48:bd:22:04:19:c8:76:10:ad:fe:0e:29:88:9d:
17:cd:1c:0f:5e:5c:90:e9:8d:e6:d1:33:bb:77:6a:54:9c:ee:
f1:14:69:1b:6c:56:c8:fc:4e:38:e5:f6:1e:2d:4e:2e:89:73:
d9:c8:6b:e0:5c:c9:97:cf:af:78:eb:13:bd:94:39:81:d2:31:
93:6e:f1:01:0c:4d:6f:c3:53:57:d1:67:4e:51:a4:de:a0:33:
66:39:d3:87:df:af:50:4c:af:ec:0f:ee:c6:c9:61:bf:c3:30:
8b:c5:28:e4:0f:cd:86:ee:38:99:de:cd:f4:b9:3a:8e:f8:5d:
e1:22:06:3a:43:50:5f:fc:e7:ed:8e:0b:8b:28:e1:01:4a:23:
10:1c:e1:26:be:33:3a:f1:a9:ec:b8:61:d3:67:24:28:9d:4c:
10:d9:f0:db:3b:74:f2:6e:a5:73:23:bb:7e:64:8d:d5:9a:71:
55:f1:9f:63:e5:a0:c6:8f:d8:6f:84:81:92:bb:09:ad:da:20:
73:10:1e:57:0d:53:77:eb:a2:90:a1:ba:6a:e6:91:cb:8a:29:
80:dc:e9:46:4b:cd:a3:05:3c:b0:47:fc:06:b8:09:36:ab:6d:
cf:1c:77:cc:00:12:01:12:88:c1:86:da:fa:b4:2c:06:21:61:
8f:1a:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:39:07 2025 by rpki-client