Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xrOIAnONPaputmEFfWA-kQyLsNA.roa
File: xrOIAnONPaputmEFfWA-kQyLsNA.roa (raw, json)
Hash identifier: 5VrSl6zwTg6r3ZaNzTKhHnh+ooM3gTa3bjCniBJSSno=
Subject key identifier: C6:B3:88:02:73:8D:3D:AA:6E:B6:61:05:7D:60:3E:91:0C:8B:B0:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F51D6D6A40744A97A7112D1667876CA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xrOIAnONPaputmEFfWA-kQyLsNA.roa
Signing time: Wed 31 Aug 2022 18:15:22 +0000
ROA not before: Wed 31 Aug 2022 18:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:1d:6d:6a:40:74:4a:97:a7:11:2d:16:67:87:6c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 18:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6b38802738d3daa6eb661057d603e910c8bb0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:9c:43:e8:b0:28:b2:30:7f:70:53:eb:bd:
a8:aa:a5:f2:34:1b:4e:09:f3:d4:16:f8:0d:31:ad:
2f:d1:c3:da:d5:cb:e1:5e:37:0d:bc:b2:c5:c7:20:
8e:5d:4a:a1:94:11:d5:ea:64:61:d7:25:fe:c8:62:
97:90:ff:51:2d:ad:fd:83:a2:da:7b:23:86:10:4b:
29:8c:45:5b:a3:e4:6a:7c:05:f2:91:77:52:0f:bc:
ff:c2:94:d9:0c:57:e0:d9:f8:1f:01:e4:bd:6a:ac:
c5:9e:d8:d7:37:f0:25:ad:87:87:e9:31:4f:4b:dd:
37:eb:bc:22:06:97:e0:90:14:fb:b2:9b:39:88:3e:
c4:33:37:39:8d:fb:eb:21:60:2d:73:7f:61:07:a4:
8a:d9:62:58:44:14:95:cc:f0:2b:ae:10:0d:de:71:
19:ac:65:d2:cc:9e:e5:6d:f9:a4:b0:98:08:7c:de:
86:b1:56:26:4a:e9:69:54:46:9d:8a:fe:95:3b:d2:
35:cf:38:c8:7d:e9:ab:c7:2b:a6:fa:b7:1e:fc:f8:
09:d6:f2:40:56:4e:bf:f4:2b:08:42:7c:30:00:b6:
94:e9:b3:9c:bb:91:0d:ae:75:64:5d:86:f6:3a:61:
e0:d7:e0:23:34:b7:89:f4:f2:fc:81:f2:da:ff:e9:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:88:02:73:8D:3D:AA:6E:B6:61:05:7D:60:3E:91:0C:8B:B0:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xrOIAnONPaputmEFfWA-kQyLsNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:a9:74:37:ef:ba:f7:7c:d5:09:74:70:f5:c9:3f:d7:49:b9:
75:d4:b3:7a:48:45:42:e8:c2:53:bc:f6:38:f2:8a:df:f4:04:
61:5e:ad:5b:e3:d2:2a:a5:8c:25:7f:b0:65:64:2d:de:84:88:
94:99:3b:c1:cd:c9:10:40:51:c7:dd:7c:ce:79:b9:3e:bb:db:
54:c5:2a:d1:94:bf:cd:b8:31:86:ce:58:80:72:fe:62:a7:1e:
2e:e4:90:10:2c:02:a0:92:e2:ab:21:67:fe:f1:0f:93:c5:13:
43:a4:a6:aa:9d:87:14:d5:67:3c:43:55:a2:ad:2e:ed:14:3d:
a4:93:12:48:c8:a2:ec:55:32:3d:a3:1f:eb:2b:84:26:14:cf:
7e:e8:2a:fa:b5:ca:8d:a1:0d:dd:d8:3f:ae:83:ae:dc:dc:84:
68:a8:ce:95:67:53:87:34:bc:b1:04:f6:7f:b9:82:f2:a0:98:
b8:cd:d9:a8:ca:c8:58:f1:9b:45:32:44:99:0e:c4:da:82:88:
9e:d0:9b:a6:ea:ea:d1:cf:02:bc:43:17:63:28:ca:ae:76:a5:
af:06:1c:62:d0:bd:3e:52:8c:e1:c5:56:a8:3e:94:1b:9e:b2:
09:60:12:88:d5:59:b7:48:4c:bd:c6:d2:a8:ec:4d:c4:93:b5:
1d:c0:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:38 2025 by rpki-client