Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xhoa47qaOZdLfOYa5JlG0F6MAG8.roa
File: xhoa47qaOZdLfOYa5JlG0F6MAG8.roa (raw, json)
Hash identifier: sRqO6afqsGQQoSW+K7NjINmEEeVy2+K5cG1A6SlGSNQ=
Subject key identifier: C6:1A:1A:E3:BA:9A:39:97:4B:7C:E6:1A:E4:99:46:D0:5E:8C:00:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8EAA4B02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xhoa47qaOZdLfOYa5JlG0F6MAG8.roa
Signing time: Tue 21 Jun 2022 11:09:45 +0000
ROA not before: Tue 21 Jun 2022 11:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393524994 (0x8eaa4b02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 11:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c61a1ae3ba9a39974b7ce61ae49946d05e8c006f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:36:dd:70:c9:67:fc:62:43:b9:57:bf:bf:
ac:03:af:63:09:16:d4:32:b5:f4:dd:3d:86:4d:ef:
aa:c8:3a:73:78:c8:11:ca:8f:35:d4:c6:ff:3b:b2:
39:f2:25:93:07:f1:48:8f:3f:98:16:3a:93:fa:88:
dd:eb:34:13:33:23:9c:72:1a:5c:a7:9f:53:55:79:
60:91:8f:fe:33:37:b8:77:04:cd:02:54:62:40:2b:
88:b3:e2:6f:b5:4f:2c:1a:31:eb:4c:01:c3:14:bb:
18:27:57:31:b6:68:dd:23:41:cd:3a:e5:60:bb:8e:
0d:e6:ee:93:3f:4d:cd:36:c1:b2:67:36:de:ab:d9:
c5:32:26:67:35:54:d9:15:c6:9e:93:81:c7:5c:5b:
42:62:a0:b3:2d:b1:f5:3b:1c:ee:63:53:92:f9:d7:
f6:ba:e1:b8:30:94:37:93:e8:34:f9:89:8c:4e:68:
e1:9d:f5:92:56:72:bb:52:a3:c1:49:39:ca:8e:40:
0c:de:09:8d:a9:d9:ca:5b:71:f5:ba:3b:ad:a3:a8:
ae:9d:68:04:7a:b4:c7:00:0c:50:09:1c:00:89:99:
9f:78:05:c5:e7:e3:06:6f:f5:f4:fc:9d:bf:d9:77:
98:81:f1:70:e5:11:37:34:0b:8a:d9:6f:fc:1b:fc:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:1A:E3:BA:9A:39:97:4B:7C:E6:1A:E4:99:46:D0:5E:8C:00:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xhoa47qaOZdLfOYa5JlG0F6MAG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:55:2b:bc:d0:11:b1:e9:8b:cd:71:40:96:87:82:1d:66:c5:
bd:55:22:09:45:8e:76:7e:78:17:f8:25:57:ed:25:60:bd:e0:
d5:62:39:4f:05:63:aa:3f:1d:96:eb:3c:47:ec:ea:ab:6f:3a:
7f:c8:cb:a0:52:f6:2c:f9:8c:92:f6:f3:dc:c7:f1:39:6c:36:
bd:75:b9:69:5e:76:60:13:88:6b:9a:71:26:78:6c:b0:26:14:
e0:be:e9:68:f1:67:e7:c6:ca:b4:0d:25:07:70:b9:15:9e:89:
f2:72:63:7f:9d:67:3e:8e:1a:70:00:5d:a8:3e:09:1e:e0:3f:
d5:0c:0c:ac:f1:3c:af:b8:b9:55:f6:fb:f5:cf:54:30:35:9b:
6e:7b:f7:12:06:b7:59:d3:f6:8a:83:29:ec:f9:f7:03:52:c5:
53:a6:74:b1:b2:0c:07:1b:97:2b:4b:7e:4f:ca:71:b1:d1:e6:
c1:ee:21:8c:ba:d8:61:ee:bd:0f:37:5d:e5:5b:1e:5b:ab:56:
15:c7:98:48:f9:91:d7:ad:f4:ff:39:9a:5c:08:49:8b:8c:91:
6d:34:0b:4e:90:fc:2c:64:68:2a:a3:21:d2:5e:13:cb:f5:2e:
71:88:3d:a1:0c:cb:6a:95:a7:8b:1d:d4:c6:96:77:82:f1:33:
00:ed:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:13:40 2025 by rpki-client