Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xrlElRHL5nRiHst2iuKF_5OplYI.roa
File: xrlElRHL5nRiHst2iuKF_5OplYI.roa (raw, json)
Hash identifier: Y0GS7FYuZ8EjIyGjUqMKRhKXp5gLof+azE+6JDfVEO0=
Subject key identifier: C6:B9:44:95:11:CB:E6:74:62:1E:CB:76:8A:E2:85:FF:93:A9:95:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B554BFB681F7391DAC1EB4B0CB293B4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xrlElRHL5nRiHst2iuKF_5OplYI.roa
Signing time: Sun 15 Jan 2023 12:08:28 +0000
ROA not before: Sun 15 Jan 2023 12:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:54:bf:b6:81:f7:39:1d:ac:1e:b4:b0:cb:29:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 12:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6b9449511cbe674621ecb768ae285ff93a99582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:2a:e0:35:e9:02:eb:e6:91:e0:51:3e:a5:
09:13:73:8c:00:7f:d7:67:e6:e6:12:85:1d:a2:f9:
64:1e:13:f6:b2:47:f1:33:75:e1:c4:8b:7a:e9:01:
5e:57:21:34:77:fb:92:f4:3d:25:79:ae:1e:49:3e:
4b:34:bc:87:e7:cf:4a:de:48:01:7b:a0:9f:3f:7b:
ec:b9:42:27:4f:09:64:fe:d3:88:94:6d:90:84:f0:
e6:58:cb:6c:5c:df:9a:45:1e:50:17:fb:e3:52:5f:
62:0b:8d:9e:0e:96:45:0e:67:ad:12:86:4f:6b:58:
60:bb:f4:e2:bb:62:89:1d:59:61:cb:20:ce:dc:32:
22:a1:1c:c2:74:fb:35:e4:3b:76:fa:72:42:58:40:
5e:1e:07:01:e9:20:39:81:8d:6f:b6:60:df:bf:90:
9f:3a:64:67:12:c8:ad:e7:45:f1:a9:8f:69:13:d8:
45:d3:13:2d:b9:c9:6c:3a:09:ab:59:1f:27:bf:6d:
9f:53:9c:f7:54:d3:0f:8f:d1:e7:54:05:50:38:45:
93:2e:21:72:4a:6a:92:03:b2:2a:bd:dd:b4:be:4f:
03:18:88:f3:88:25:b2:87:ab:ee:8a:6b:0f:e3:57:
37:48:b6:03:95:61:ee:96:fc:50:0a:25:94:79:48:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:44:95:11:CB:E6:74:62:1E:CB:76:8A:E2:85:FF:93:A9:95:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xrlElRHL5nRiHst2iuKF_5OplYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:97:45:4c:ed:5b:4f:73:e4:59:c8:23:25:b0:61:00:03:7b:
9a:47:34:78:a1:5f:38:51:45:12:db:95:c8:68:cd:b1:31:e2:
91:27:e7:7e:17:3b:0a:42:61:ee:a2:e3:d5:62:20:1f:73:62:
23:d1:68:21:e4:14:cd:3e:ae:f6:d2:b2:a8:7f:65:96:a5:2c:
41:8c:98:6b:02:86:55:8d:21:1d:90:96:f4:dc:be:ac:81:a4:
e2:30:40:20:72:3f:5c:e5:1f:41:27:d0:45:e9:fa:de:86:8c:
2c:65:7c:83:2e:1f:88:cf:20:ab:02:1b:51:d7:9b:76:38:a1:
3c:d3:0c:b2:42:96:02:34:0e:38:92:55:92:6d:c1:c0:76:37:
8d:0c:a3:70:4a:4d:54:4c:b4:0f:db:c5:9b:d4:0f:54:8d:32:
de:4f:f3:fe:e4:b5:8e:7b:a8:ff:31:67:eb:15:e2:b4:55:c9:
c4:42:fa:63:6b:ba:9d:a1:1f:3a:88:7e:b4:f1:d7:29:d5:73:
74:20:e0:a1:ef:0d:91:79:ff:57:df:c9:a1:03:ed:af:59:2c:
e8:0b:5f:d9:91:b0:04:b9:58:25:86:1f:c8:00:a1:c3:b3:86:
15:7f:53:37:d7:c5:c4:15:fe:3b:43:ce:25:7f:76:d4:cf:b0:
e9:41:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:14 2025 by rpki-client