Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xjHtumccCdzjYaix_RR3nxDugEM.roa
File: xjHtumccCdzjYaix_RR3nxDugEM.roa (raw, json)
Hash identifier: zQCyYsLZ6EECy3LE/zfXU0RwUV2cvE5lFPYYB80Y/Pc=
Subject key identifier: C6:31:ED:BA:67:1C:09:DC:E3:61:A8:B1:FD:14:77:9F:10:EE:80:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018584D7520E63F11FBB3962F805245B3F1F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xjHtumccCdzjYaix_RR3nxDugEM.roa
Signing time: Fri 06 Jan 2023 02:09:41 +0000
ROA not before: Fri 06 Jan 2023 02:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:84:d7:52:0e:63:f1:1f:bb:39:62:f8:05:24:5b:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 02:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c631edba671c09dce361a8b1fd14779f10ee8043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:21:df:ac:a8:fd:83:01:23:9d:4f:f8:83:
9a:de:0c:c3:14:65:dd:5f:77:41:61:13:94:cd:e1:
10:6b:7a:15:7b:56:10:4e:99:be:b3:c8:cd:d1:d3:
1b:7e:39:e0:74:63:e2:c0:6a:b5:10:eb:80:63:7d:
85:c6:e4:66:70:35:71:7f:55:70:5f:f4:74:c4:03:
be:01:d1:a3:ac:9f:5b:7f:fa:e8:47:6a:7c:00:5f:
06:95:10:d0:0d:8d:4a:46:67:8b:c5:9f:9a:64:e8:
ba:83:e8:3e:f0:71:0a:77:79:a7:33:44:cf:e0:16:
02:5b:b1:9f:16:88:ce:b2:04:25:30:44:fe:4e:b0:
d5:78:88:0f:4d:31:bb:a1:9e:ae:e4:51:13:1e:4b:
0a:ef:cd:f0:fe:13:f0:d9:84:9d:48:4a:98:7a:50:
a9:42:8d:c8:c5:a3:11:a1:63:c5:56:55:05:3d:f7:
d3:20:b4:4a:b8:c3:cd:14:2d:cb:28:40:8c:ab:5a:
15:b8:bc:4e:71:06:2d:8c:88:a9:47:77:94:fb:4d:
d0:a2:85:5d:b9:25:2f:42:44:07:f4:94:57:6a:b1:
80:2c:d5:92:18:b4:e0:ed:f6:07:11:47:c1:fd:41:
1a:51:79:44:ca:54:21:c8:96:94:53:41:66:c1:79:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:ED:BA:67:1C:09:DC:E3:61:A8:B1:FD:14:77:9F:10:EE:80:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xjHtumccCdzjYaix_RR3nxDugEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:ad:9d:7f:45:10:29:70:b4:5f:fd:b6:f3:8d:93:67:11:07:
a5:93:45:c5:56:3f:9d:19:ca:7b:3d:da:54:ec:4c:2f:da:6a:
7c:0f:41:1b:ca:87:41:90:c1:aa:47:89:8a:9d:ea:b2:5d:05:
d5:86:f6:96:bd:a2:e8:1f:d0:92:4e:7f:a2:e9:6c:ba:8f:95:
a2:a7:54:49:3d:fc:13:d3:a0:f3:66:85:3f:36:08:86:8f:db:
2e:93:d2:f4:c1:df:f2:a5:08:bf:58:5f:0e:8d:e2:a6:24:26:
0a:a8:6d:45:54:8a:f2:86:9b:7f:00:27:fe:d2:3d:21:ec:ff:
d9:eb:49:90:ba:a1:cf:89:19:22:ce:b0:b4:7e:56:19:04:1d:
6c:72:5b:77:e1:8f:bf:99:ea:e2:28:53:1b:22:75:14:10:4f:
05:8f:e9:73:75:34:99:de:86:1a:ff:aa:1e:88:aa:62:71:8a:
bf:74:fe:84:bb:5f:7c:4e:e3:6a:f3:3c:7a:66:8e:bc:fd:a1:
32:d6:c4:eb:c6:41:08:fe:65:98:52:75:c7:70:56:22:04:46:
69:5e:6e:af:32:1b:9a:fe:eb:2a:49:78:17:02:bb:f1:79:70:
ac:01:7d:28:fd:5c:4b:56:1e:0b:e6:4f:23:a1:62:31:2c:f6:
3e:83:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:57 2025 by rpki-client