Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xo7u7CCk2hqY_DhQofmKP7yfgoY.roa
File: xo7u7CCk2hqY_DhQofmKP7yfgoY.roa (raw, json)
Hash identifier: T/WsY38P0ICzB0g+xbFts5ApfO/eCFt9+hVyZe5gimU=
Subject key identifier: C6:8E:EE:EC:20:A4:DA:1A:98:FC:38:50:A1:F9:8A:3F:BC:9F:82:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854064202DFF97A9EF75639A7322D610E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xo7u7CCk2hqY_DhQofmKP7yfgoY.roa
Signing time: Fri 23 Dec 2022 19:09:41 +0000
ROA not before: Fri 23 Dec 2022 19:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:64:20:2d:ff:97:a9:ef:75:63:9a:73:22:d6:10:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 23 19:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c68eeeec20a4da1a98fc3850a1f98a3fbc9f8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:87:55:0c:db:dc:91:78:96:d0:c9:53:fb:
26:6d:4f:33:4e:82:b7:f0:c5:ad:33:20:60:61:e6:
c6:3d:67:1f:8b:94:dd:26:0d:88:b6:8b:1c:04:b1:
9e:61:1e:f3:34:44:4a:ce:5e:71:1b:bc:fe:5a:3d:
5a:ef:c5:1e:38:92:d8:98:72:31:d9:d1:3a:a3:eb:
4d:9a:19:70:b2:c0:c1:18:86:ea:76:24:b6:8b:d2:
f1:86:6d:54:c4:65:db:a9:fc:25:65:18:da:5f:01:
37:d1:0d:3a:c3:50:a2:32:c1:61:50:64:0a:23:48:
04:19:ab:a4:e0:6b:6d:0c:2e:01:dd:5f:90:e6:8b:
8f:0c:1a:f9:40:64:51:7b:e1:c0:da:6f:51:31:1d:
67:82:b7:dc:ef:b4:7f:29:9f:49:b6:16:78:a0:73:
b0:b4:0b:b5:c0:32:f0:7f:01:3a:b0:b0:b3:e0:48:
03:b5:67:b9:f7:01:b5:2f:c0:ba:b1:86:7d:1d:7a:
32:46:52:53:48:d4:a1:9d:e7:cd:78:d9:38:8c:87:
e1:8e:f5:c8:91:a0:17:4a:b6:ea:c8:c0:ee:87:0f:
3c:a9:37:ab:b3:81:e2:cb:3b:e2:97:c4:5e:84:9b:
2d:be:94:a8:cc:99:49:9e:f4:3e:1b:f1:75:5f:af:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:EE:EC:20:A4:DA:1A:98:FC:38:50:A1:F9:8A:3F:BC:9F:82:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xo7u7CCk2hqY_DhQofmKP7yfgoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c8:70:81:c9:ba:3e:58:80:a1:4f:26:e8:4c:dc:3d:22:6e:
6c:41:a1:4a:bd:24:50:4c:c5:c7:15:1a:ce:eb:35:95:3b:7d:
07:a0:0d:6a:f7:fe:3d:63:64:df:ce:58:81:be:bd:f3:9b:b0:
9a:c4:c5:91:74:4d:0a:b1:0c:f3:ad:d1:c2:5b:eb:1a:56:76:
e4:66:75:3c:5f:4a:af:aa:09:1a:ab:86:b0:1f:97:39:2a:6b:
ad:e3:c3:65:a5:1a:4f:72:f8:01:df:09:fe:dc:20:e4:81:c0:
2f:c6:f6:bf:73:a9:b1:00:ab:70:fc:64:23:9e:20:8b:0c:58:
46:6e:c9:60:c4:29:ff:36:cd:03:b0:3c:66:22:d0:38:b8:22:
ca:cc:7d:94:0f:af:cc:09:e6:69:eb:42:7e:5a:37:ba:26:1c:
c9:46:9f:56:50:52:5c:d5:53:83:d5:8a:14:3c:11:c7:03:42:
17:ea:d0:88:ed:ce:4f:b1:ad:b8:04:b0:a0:71:f5:19:0c:8d:
17:ba:43:f0:f3:df:54:6e:ad:d8:9f:fc:a7:8f:a3:3c:ab:92:
12:cb:f6:90:00:81:7c:dd:ff:ac:ab:de:11:8d:99:13:ab:df:
4e:d9:72:ce:05:83:b8:11:ce:70:5c:e9:47:1c:77:de:5e:72:
05:87:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:45 2025 by rpki-client