Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpRZcOZDGLUS3QKli788co87Ft4.roa
File: xpRZcOZDGLUS3QKli788co87Ft4.roa (raw, json)
Hash identifier: ke923wqMMaX6IMwU72NriQXSOoAQsSWqLcrs707i7BQ=
Subject key identifier: C6:94:59:70:E6:43:18:B5:12:DD:02:A5:8B:BF:3C:72:8F:3B:16:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186850EF6B7A2F4D987569312FD4DCFCDE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpRZcOZDGLUS3QKli788co87Ft4.roa
Signing time: Fri 24 Feb 2023 20:13:15 +0000
ROA not before: Fri 24 Feb 2023 20:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:0e:f6:b7:a2:f4:d9:87:56:93:12:fd:4d:cf:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 20:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6945970e64318b512dd02a58bbf3c728f3b16de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:01:be:e6:50:de:46:5d:08:5b:1e:2c:3e:
aa:67:c0:a5:70:96:00:9f:76:97:c6:d1:35:58:ea:
a8:32:6a:00:8a:73:d4:ea:a4:57:47:3a:9e:31:d4:
9c:8a:0a:bf:70:58:42:af:ae:ad:25:1a:2f:5b:c1:
2b:9a:ed:7d:89:37:90:0e:40:f4:ab:f8:43:3d:f4:
e1:6f:63:0f:10:10:9e:40:50:c3:92:33:5d:32:4b:
86:90:cd:b8:1f:13:41:70:fb:be:6e:b0:1f:cb:00:
26:b3:48:dd:dc:e7:a3:90:22:e7:d2:b9:2d:98:2b:
f5:e8:ed:00:dd:02:8e:92:9d:a2:f4:74:b2:bc:f3:
4f:a8:5a:37:0f:b3:36:b9:7b:64:7d:a6:41:ec:3a:
91:95:4c:5a:4f:79:99:f8:3a:dc:f4:a5:34:31:89:
25:fc:7b:99:84:21:fb:78:0f:5f:74:0d:f1:7c:1d:
80:d3:34:f2:28:bd:eb:33:ae:78:56:46:b1:aa:85:
3f:ad:4b:3d:37:7c:e7:5e:ff:57:e7:d0:59:b9:51:
09:58:dc:d5:db:b8:d0:e0:70:30:05:1f:05:1f:e7:
80:4d:3e:8b:d8:9f:d8:25:ea:bd:62:bc:52:8b:90:
f7:72:82:32:4c:b2:c1:18:77:3a:8f:dd:a8:92:19:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:59:70:E6:43:18:B5:12:DD:02:A5:8B:BF:3C:72:8F:3B:16:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpRZcOZDGLUS3QKli788co87Ft4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:fa:9a:a4:4b:ef:72:9a:01:54:fb:63:a9:aa:a9:72:5a:4b:
a2:74:b2:b3:06:4f:d6:e2:30:f5:53:1e:3a:57:98:5d:44:09:
43:b0:99:6b:fa:91:dc:43:f5:f7:99:51:e5:63:c3:38:7f:03:
af:26:e9:a1:09:57:cb:e1:d4:4e:93:3b:ac:3a:77:f3:8d:c8:
dc:7e:bf:ac:8f:18:71:26:53:54:a1:a3:0e:8c:50:6a:a2:53:
ce:7f:16:01:3e:1e:22:d4:28:2c:e9:f3:51:8e:87:a9:1c:e4:
63:83:79:7a:aa:89:1a:af:c9:e3:40:bc:36:53:21:4b:0b:03:
42:ff:5b:65:f3:90:4c:76:24:38:6a:ac:37:30:aa:c3:7e:f8:
28:15:ef:2a:eb:c3:17:99:48:94:cd:f6:67:4f:9f:c3:57:37:
10:51:08:35:62:90:78:b7:a5:e3:bc:a0:2c:7f:f0:5b:3c:02:
2e:3b:80:7c:4a:60:2e:c9:7a:51:c7:f1:ac:90:0f:c9:89:98:
c4:0b:e0:85:c3:53:ec:1f:5a:6e:e1:2e:3a:bf:58:02:21:ad:
c3:62:83:8d:c5:91:49:f1:5d:e0:69:04:6b:d8:72:3e:79:e2:
81:f7:93:77:c9:fb:e1:fe:3b:e6:bc:2b:29:92:70:a2:59:83:
d2:b6:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:51 2025 by rpki-client