Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xnSw0mY9vQM7yVickD7gfbe6Uv8.roa
File: xnSw0mY9vQM7yVickD7gfbe6Uv8.roa (raw, json)
Hash identifier: gDRYCOrMwE9AxolGQBIe0p5ttTFgEOktSs9T29VHShs=
Subject key identifier: C6:74:B0:D2:66:3D:BD:03:3B:C9:58:9C:90:3E:E0:7D:B7:BA:52:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185413FDB9D374DBBAE986AF300AF5CB1BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xnSw0mY9vQM7yVickD7gfbe6Uv8.roa
Signing time: Fri 23 Dec 2022 23:09:42 +0000
ROA not before: Fri 23 Dec 2022 23:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:41:3f:db:9d:37:4d:bb:ae:98:6a:f3:00:af:5c:b1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 23 23:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c674b0d2663dbd033bc9589c903ee07db7ba52ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:fa:ee:61:59:e9:a1:a5:bb:f0:77:d3:d6:
36:c7:03:99:cc:af:aa:89:93:86:e3:c8:9f:9e:78:
f7:da:7a:68:ae:90:e8:19:27:fa:54:b4:8d:2a:89:
b3:33:c4:de:37:4d:30:e4:22:25:74:01:58:f2:a8:
52:ee:bc:0e:8a:a8:d5:5a:c0:b1:61:d0:75:e4:13:
ee:8c:a5:62:21:3a:7f:5a:a3:50:ed:62:41:86:d3:
9a:d6:e1:a9:e7:73:6d:ac:a3:a4:46:62:18:59:8e:
36:a1:d6:f0:88:1c:f0:0b:f8:0e:28:63:ed:30:ac:
fe:ab:c0:5f:bb:33:a4:bc:21:10:32:49:78:11:ff:
a4:fc:99:0f:5c:13:57:43:31:bd:95:0b:20:31:1a:
62:b3:ea:c9:43:5f:09:5c:5c:4f:9b:2a:c3:a5:f3:
2f:1f:69:69:3f:c3:ed:26:0e:77:a3:9b:7c:85:99:
c0:4d:e1:19:3f:55:89:37:4c:a1:66:e4:8a:15:ff:
11:06:85:07:79:81:aa:3c:d7:4c:20:0c:25:15:af:
52:f3:80:b9:2d:0a:01:35:5a:2d:b9:ed:af:76:55:
41:55:0c:4d:fa:d3:17:b0:ad:f3:c6:b8:f5:5e:1e:
58:a4:63:e8:8a:c5:d9:6a:9f:68:17:77:e2:56:aa:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:B0:D2:66:3D:BD:03:3B:C9:58:9C:90:3E:E0:7D:B7:BA:52:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xnSw0mY9vQM7yVickD7gfbe6Uv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:b2:a2:9c:f6:0e:a3:6e:ac:b1:f4:98:2e:68:a0:50:48:81:
22:cf:2b:56:73:1f:c0:d2:df:e1:00:c1:18:cb:60:d7:56:ae:
b1:f5:e2:bb:a0:8d:61:2f:d6:e1:5f:ed:c5:16:91:f2:f0:6f:
a9:76:4e:d8:8c:43:83:b9:a9:94:d9:47:f9:49:a9:a2:1c:39:
8f:4f:64:af:8f:81:b5:86:d8:f5:a4:eb:a4:fb:47:f9:5e:e9:
27:d1:35:8a:d9:34:8e:89:97:a7:59:4f:81:09:a8:b2:3e:1f:
7c:1c:e0:93:30:c1:48:b9:e1:e2:00:8b:6e:75:d0:9d:1c:4d:
22:ae:71:7a:5f:0d:e1:a4:10:4a:cd:97:7c:b7:ac:49:4a:a9:
d2:8f:36:50:fe:d6:45:ec:4a:d6:ed:7c:a6:b6:7f:07:3a:67:
7f:9d:cf:6c:dd:69:a9:ce:7d:46:70:a1:bc:93:d4:00:7b:60:
62:87:e4:e5:8b:c6:ac:e9:c9:4b:85:7e:d2:33:01:94:3b:13:
aa:2f:1b:40:cf:83:9b:ed:36:f3:24:0f:72:fc:1b:2e:0d:6c:
eb:68:02:aa:ef:4b:e2:b6:34:ad:c1:58:02:ce:33:32:50:18:
9d:f6:61:57:35:91:e5:05:40:a5:38:92:24:3c:6c:21:30:97:
8b:7c:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:43:52 2025 by rpki-client