Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xqta94NR6vflqUrI1cpF8oGcOSY.roa
File: xqta94NR6vflqUrI1cpF8oGcOSY.roa (raw, json)
Hash identifier: NQMudswPTsBPr0G64Njmh993HLsHG0tQawVjISIXVEQ=
Subject key identifier: C6:AB:5A:F7:83:51:EA:F7:E5:A9:4A:C8:D5:CA:45:F2:81:9C:39:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894BF31E578A89E258546E13543E378C4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xqta94NR6vflqUrI1cpF8oGcOSY.roa
Signing time: Wed 12 Jul 2023 21:12:51 +0000
ROA not before: Wed 12 Jul 2023 21:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:f3:1e:57:8a:89:e2:58:54:6e:13:54:3e:37:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 21:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6ab5af78351eaf7e5a94ac8d5ca45f2819c3926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:f8:16:aa:c5:93:7a:b2:5c:21:29:b8:17:
e1:1e:af:41:b2:71:61:9b:8f:51:29:04:76:01:90:
48:6c:43:6a:f5:61:09:f1:f5:2f:78:49:20:55:8f:
bc:f3:ae:92:40:93:35:3f:c8:20:7d:40:72:e2:9a:
5b:c1:14:af:9e:2d:c0:69:00:9b:2d:e7:80:91:bc:
1a:76:f3:7e:3f:df:db:05:6f:fe:61:0e:56:f9:36:
85:f9:37:12:c3:e6:ff:69:b1:7e:25:e0:36:bb:b6:
2d:7c:a3:88:62:d6:d1:b6:53:a8:f9:fa:c5:a1:25:
88:60:a1:19:4d:b1:8c:e8:d8:63:39:54:42:d2:42:
4d:7f:c9:01:fa:fe:ba:fe:c7:25:c3:44:f6:01:43:
d4:34:dc:7e:60:ad:e4:49:5c:78:23:f4:1b:58:82:
50:4d:36:99:db:7f:7f:3a:46:d5:f2:51:08:2d:c7:
8f:e0:29:96:8e:33:24:4f:59:92:eb:46:76:32:2a:
0c:6a:47:38:b6:dd:54:50:c2:5b:90:36:c5:55:4e:
c6:2f:97:b8:37:42:a2:bb:8e:cf:d6:8e:9a:7a:b4:
72:c5:a6:74:92:64:24:20:fd:7e:a6:23:df:f6:8e:
b1:1b:3c:ee:2d:f6:e8:21:5d:91:4e:89:06:c3:46:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:5A:F7:83:51:EA:F7:E5:A9:4A:C8:D5:CA:45:F2:81:9C:39:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xqta94NR6vflqUrI1cpF8oGcOSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:17:c7:d3:a4:f3:1f:7a:14:e0:40:7e:3d:31:bf:6c:bf:25:
d3:03:c2:c1:58:a8:12:89:c5:4d:9b:61:e4:40:64:52:bb:ba:
22:0c:26:f6:48:e5:ef:c9:63:54:42:75:8c:2e:e7:81:92:bc:
2d:bf:da:1b:5c:70:d5:a3:3e:93:5c:65:dd:84:15:3e:68:d6:
06:07:fe:cf:22:15:16:93:96:d4:80:4e:2f:e3:dd:db:60:33:
66:6b:ba:eb:4f:da:62:20:0e:d9:ef:6e:5e:60:3f:e7:2a:17:
32:d3:f3:40:3e:bf:b2:41:96:31:9f:e0:94:cb:8f:72:72:41:
b9:de:9c:f3:8b:89:c8:00:ee:d1:9f:46:12:45:b3:93:43:83:
db:14:d5:f4:7f:25:2c:c6:32:f6:2c:e3:ee:02:77:ec:9f:7c:
65:af:74:d6:95:b8:7b:82:0c:35:0e:2b:27:fb:6e:c4:64:15:
c1:c3:b3:1d:1d:fe:de:a4:04:94:b0:a1:05:31:da:80:b6:f0:
b9:50:07:cf:79:61:c0:e4:cd:d5:fe:2d:da:0b:1b:bd:ae:94:
48:42:0f:b8:7a:cd:5a:ce:e0:bc:3f:a7:38:51:38:7f:53:79:
d6:80:bf:13:cd:4f:3c:ba:1d:49:4c:cf:67:35:45:2c:ac:7d:
8d:88:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:58 2025 by rpki-client