Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xdnovr2VW3MkPt_6DvBvqYrGNK4.roa
File: xdnovr2VW3MkPt_6DvBvqYrGNK4.roa (raw, json)
Hash identifier: QNt/XClamPzrpS/RL9ZjIY6BhDRDAGw4rpehCLrEwm4=
Subject key identifier: C5:D9:E8:BE:BD:95:5B:73:24:3E:DF:FA:0E:F0:6F:A9:8A:C6:34:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886F8C973A896ECC4BE4BAC06338108EF7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xdnovr2VW3MkPt_6DvBvqYrGNK4.roa
Signing time: Wed 31 May 2023 02:04:24 +0000
ROA not before: Wed 31 May 2023 02:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:6f8c:65ee/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6f:8c:97:3a:89:6e:cc:4b:e4:ba:c0:63:38:10:8e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 02:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5d9e8bebd955b73243edffa0ef06fa98ac634ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:19:69:ab:12:57:2e:fc:29:d1:f3:d2:7f:
df:c8:f7:d7:38:4c:19:be:1c:fe:6d:a0:5e:a6:a1:
12:01:e3:cf:f6:1e:d6:45:32:84:6e:65:f4:ad:c2:
72:0e:86:9f:45:63:ff:ad:e8:b2:95:ae:5d:51:13:
f4:28:a2:ee:8a:f5:e7:3c:3c:94:dc:35:43:f9:25:
82:36:f3:e4:84:87:cd:50:6f:75:57:c2:4a:fb:8b:
9e:a3:e9:fe:25:b6:9b:95:fc:cb:dd:32:44:31:c8:
7e:11:74:27:9f:d9:40:59:29:70:7e:74:58:9a:66:
3c:90:ad:63:f2:ba:4e:b3:0d:19:cd:0e:8b:ac:cd:
e7:c7:eb:d0:65:0a:e5:d3:89:ee:f5:65:ba:c4:41:
21:13:ab:c4:21:c4:12:02:f6:ad:6e:ca:a4:7f:e4:
d3:93:21:66:b7:6f:52:dd:a1:02:25:8d:41:b9:25:
c1:fd:bb:17:d8:33:26:b5:14:98:67:a5:00:d2:40:
1c:64:cb:17:b8:30:9d:82:b4:ef:f4:9a:ab:c5:71:
21:af:01:c9:18:63:98:da:76:a6:8b:e0:cf:29:48:
40:ac:b2:5b:e5:0e:0a:e7:4e:5e:6d:a1:96:d5:76:
0c:fd:01:f0:7f:d1:05:30:18:b7:7f:c9:83:a6:00:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:E8:BE:BD:95:5B:73:24:3E:DF:FA:0E:F0:6F:A9:8A:C6:34:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xdnovr2VW3MkPt_6DvBvqYrGNK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:7c:0c:47:b5:c2:21:4d:54:8a:24:a2:bf:66:90:37:44:77:
ec:76:24:1f:bb:13:3c:52:2b:55:63:32:fa:bb:2e:fb:58:b9:
30:6d:23:ee:da:c6:26:ea:7c:0d:ca:28:db:c9:44:d2:d7:bb:
f5:e6:0b:13:93:13:4b:36:c7:1f:cd:10:5c:1f:5c:46:3f:d4:
b5:3d:3a:b6:e7:26:d3:34:64:93:0b:72:70:3c:a1:22:79:f3:
81:1d:70:d4:a5:a3:1e:59:fd:42:b3:b1:22:f2:10:ac:56:d7:
4c:3d:31:13:59:10:59:2a:c0:6b:43:1c:14:19:c2:9f:25:42:
27:4a:af:4d:95:cd:06:82:d3:0a:95:89:f3:e1:31:47:aa:fe:
43:b4:ef:35:4a:49:1c:17:94:e7:63:86:d2:7d:47:e6:a0:79:
b3:df:7f:04:59:1e:29:ab:20:d6:97:53:03:1d:98:8c:2f:da:
86:71:e0:33:29:67:d7:10:5a:e2:6b:05:32:bd:d9:17:5f:cf:
dc:97:e0:ca:66:68:c6:46:dc:6a:4c:0c:26:57:ba:f0:74:4b:
4f:d0:cb:b1:aa:34:77:a4:eb:7c:28:04:8a:4e:a5:d2:7d:e4:
4c:3d:6a:c8:65:fd:95:30:d4:19:b3:6f:a4:d7:1d:7e:af:86:
88:0a:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:32 2025 by rpki-client