Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xt-Wd6QLWVt48I6wVT0MGNaf0xU.roa
File: xt-Wd6QLWVt48I6wVT0MGNaf0xU.roa (raw, json)
Hash identifier: ur+lvtrayC18PA1aKv5jdJLiGLr+9aUcM44zPIycIs0=
Subject key identifier: C6:DF:96:77:A4:0B:59:5B:78:F0:8E:B0:55:3D:0C:18:D6:9F:D3:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185605CF3296D50D4E201491166C7A3DF01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xt-Wd6QLWVt48I6wVT0MGNaf0xU.roa
Signing time: Fri 30 Dec 2022 00:09:41 +0000
ROA not before: Fri 30 Dec 2022 00:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:60:5c:f3:29:6d:50:d4:e2:01:49:11:66:c7:a3:df:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 00:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6df9677a40b595b78f08eb0553d0c18d69fd315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:68:e3:bf:39:4a:66:73:65:f5:98:39:90:
a0:03:4b:66:78:01:42:84:21:8e:6f:c2:42:8d:a2:
42:ab:6b:a1:55:f6:85:d6:a5:09:39:f9:be:d7:6e:
ce:72:f5:63:cb:11:5c:73:63:f6:30:0b:c0:24:6a:
83:18:3c:64:25:a2:57:d4:6f:85:65:b6:c4:db:6a:
d6:a3:38:50:5a:2b:39:73:fa:b8:32:95:fe:9d:3d:
ee:97:58:43:4a:38:ca:67:90:98:b2:2c:dd:3c:57:
a5:0b:f1:fe:57:8f:5b:81:01:5c:f7:5c:e3:50:6d:
77:c3:4e:86:d9:f1:77:d8:2c:08:bb:57:35:b7:c5:
30:b6:44:05:33:73:94:a5:81:90:d4:80:be:d7:41:
65:52:14:4f:0a:83:cc:06:eb:13:1c:9e:b3:a5:39:
54:d5:d6:d5:8d:af:a7:11:70:c5:79:78:f2:c4:28:
2c:57:f8:b3:c0:d5:16:2f:ff:a6:e5:8b:74:b1:19:
a1:26:6b:47:1c:bd:48:a4:06:dc:e5:f2:f2:25:96:
77:43:1c:21:3b:09:42:71:f7:bd:f7:98:59:9f:dc:
0a:77:ce:c7:9c:59:7c:1f:d4:6f:68:52:19:f9:46:
97:bb:ff:99:de:5e:15:19:6f:03:5a:1a:41:de:f2:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DF:96:77:A4:0B:59:5B:78:F0:8E:B0:55:3D:0C:18:D6:9F:D3:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xt-Wd6QLWVt48I6wVT0MGNaf0xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:48:ba:88:b3:a4:a4:6f:95:eb:ca:62:aa:ad:20:e3:b8:5d:
37:28:a0:40:be:29:72:bb:d2:cc:d2:13:5b:37:a4:9b:33:b2:
dd:65:bb:64:ca:d5:59:36:b9:07:3f:45:57:04:45:cd:79:27:
0b:26:ed:f0:90:1a:ca:83:fa:75:5f:b2:d0:07:ad:03:fc:4e:
cc:0a:00:fc:ac:c7:a2:b3:ea:84:e6:37:28:f5:a9:7d:0f:23:
95:eb:8c:c0:9c:8d:d1:8b:da:38:f7:da:be:20:1f:e6:1c:dd:
fe:5e:67:af:86:e7:c6:20:fd:06:3a:28:2b:4e:4a:95:32:17:
46:2e:6b:0c:c5:86:eb:84:b9:a9:f3:ec:9a:e6:c6:b6:4d:92:
c5:44:80:8b:67:74:22:88:7a:9e:f7:87:e6:80:e6:f8:ef:a5:
a7:08:18:49:71:73:dd:ef:be:0b:b0:91:3a:77:d5:f1:de:6c:
91:67:fe:58:3e:8f:0a:20:5a:69:6f:89:e6:a8:82:69:86:47:
8a:1e:90:2c:e6:6c:ca:c5:2c:83:7f:d9:92:ad:67:33:c7:0e:
a8:61:50:10:e5:8f:79:e6:d0:c7:68:92:9d:d2:3e:0a:cb:c1:
9c:5c:90:55:57:12:f5:af:95:9f:ae:26:02:c6:6a:7c:4d:0e:
5f:db:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:39:13 2025 by rpki-client