Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xmIdRdp00NJL5OKlb_cv2ZHWq8I.roa
File: xmIdRdp00NJL5OKlb_cv2ZHWq8I.roa (raw, json)
Hash identifier: hmz2p2ZKaBZoAqEzxUQyp2QYz2mvIB/JZIDv0DXnxcw=
Subject key identifier: C6:62:1D:45:DA:74:D0:D2:4B:E4:E2:A5:6F:F7:2F:D9:91:D6:AB:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182075A3B075B8CFAB323FAAE521C829E9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xmIdRdp00NJL5OKlb_cv2ZHWq8I.roa
Signing time: Sat 16 Jul 2022 14:12:09 +0000
ROA not before: Sat 16 Jul 2022 14:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:07:5a:3b:07:5b:8c:fa:b3:23:fa:ae:52:1c:82:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 14:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6621d45da74d0d24be4e2a56ff72fd991d6abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:8d:9e:c3:1f:14:90:3a:c3:73:71:6c:a6:
e3:48:c3:90:9f:79:34:0c:bb:92:0a:27:d1:14:01:
72:06:53:20:78:39:7b:7c:04:e7:60:1d:b5:03:80:
e6:5e:96:d4:08:25:1a:47:33:60:ba:f9:c0:48:9c:
63:2f:aa:ef:9a:f0:d2:66:a6:10:c6:76:2a:07:1d:
3f:09:5d:86:ae:17:03:4a:4f:39:1d:48:d4:d7:b1:
85:d6:a7:b3:84:94:7c:27:64:ce:b9:3b:a8:ca:be:
44:99:c7:20:96:4d:be:9e:1f:e6:5d:a1:4e:5e:3d:
4c:05:96:fe:b3:7f:8e:6e:36:cc:cd:a4:74:38:6e:
f5:a4:2a:60:3a:b3:f8:bd:09:7d:28:a7:42:ab:3d:
50:52:b0:9d:e8:51:0b:10:a0:dd:b6:29:c5:95:6a:
f9:0a:4b:56:ad:4f:9e:74:03:84:db:cb:57:17:06:
49:92:7f:41:40:ac:ba:38:28:ab:db:42:59:5b:77:
11:d9:23:75:c7:cb:18:3d:51:6d:58:b9:a1:3d:35:
c7:e8:e1:a1:35:0e:04:9c:b4:8a:fd:f1:3e:a4:87:
5e:2a:cd:89:ef:01:cc:f9:bb:d3:37:c7:01:ed:39:
5a:c7:c6:6e:7c:56:c5:6d:87:6d:50:ce:8e:10:b5:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:1D:45:DA:74:D0:D2:4B:E4:E2:A5:6F:F7:2F:D9:91:D6:AB:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xmIdRdp00NJL5OKlb_cv2ZHWq8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:85:01:4a:56:d0:93:8f:b8:6c:9f:8b:ed:65:bb:b4:25:eb:
7c:84:6d:b5:a7:5a:40:9e:43:66:a3:8d:71:15:78:c4:aa:17:
15:f7:26:e8:a6:8c:08:7c:b9:d9:e9:c5:2e:47:81:ea:38:3d:
0a:97:a8:00:01:01:d8:91:63:91:b2:1f:c7:10:da:c5:4c:58:
4f:68:9c:45:04:47:aa:2c:a8:52:7f:29:c4:2a:30:cc:b8:48:
02:c4:a7:45:a3:89:c7:84:99:50:3f:6b:7e:60:ae:e6:ab:21:
3c:ad:1a:b3:f2:bc:95:7a:ad:6e:3a:69:50:63:96:34:9e:43:
5e:ff:73:8b:ab:83:79:da:78:29:71:c4:b3:e2:a8:c6:47:df:
b0:28:c2:55:09:1e:00:cb:b8:62:61:cc:2a:76:40:db:98:47:
0f:67:4e:fa:ed:64:91:f1:e9:0f:4f:93:f2:da:12:89:2d:80:
aa:99:2c:a1:84:85:d2:3a:0c:67:32:e9:6f:40:2e:45:24:8e:
fc:e3:94:ca:17:9f:37:de:70:49:fc:95:a1:57:26:58:26:2f:
91:f7:89:d5:1e:d6:0a:e0:8b:16:31:2e:2d:72:f2:5d:74:bc:
1f:cd:7f:b7:a9:60:da:96:07:27:73:be:50:af:b0:fa:0a:5b:
69:38:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:18 2025 by rpki-client