Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuCWcp4nmQBYTkPn_LbAZ6Ta6Vk.roa
File: xuCWcp4nmQBYTkPn_LbAZ6Ta6Vk.roa (raw, json)
Hash identifier: OFNQz0IMKyGvMvq295qz2MYZ1dt1GwD4ajvLjL9C67s=
Subject key identifier: C6:E0:96:72:9E:27:99:00:58:4E:43:E7:FC:B6:C0:67:A4:DA:E9:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D0CC25BF55478A39D536AC1217512F78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuCWcp4nmQBYTkPn_LbAZ6Ta6Vk.roa
Signing time: Fri 20 Jan 2023 20:08:37 +0000
ROA not before: Fri 20 Jan 2023 20:08:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:cc:25:bf:55:47:8a:39:d5:36:ac:12:17:51:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 20:08:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e096729e279900584e43e7fcb6c067a4dae959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:4e:0b:c9:a1:97:fa:3f:ef:df:e3:74:4d:
f4:07:5f:c6:f9:38:c2:d7:a3:4c:3b:cd:40:b3:24:
f6:5a:0a:4d:e2:6c:d2:b3:e3:19:e3:8f:f0:73:d6:
a1:e7:df:67:31:3b:63:9a:86:23:91:55:ae:0e:9c:
37:a1:9d:a3:2b:f6:13:e7:b2:ef:d4:a3:f7:9f:46:
f4:af:f0:b3:f0:83:86:ff:d6:e6:12:e7:31:75:2f:
59:d7:3c:e5:6e:6b:7f:c3:4b:ce:a7:9b:84:fd:85:
ea:62:0e:f2:23:2b:0b:23:7a:42:d4:3b:57:68:a6:
6b:5f:99:fc:e0:19:9e:66:77:26:2e:90:5c:9b:88:
cf:b0:67:e2:3f:36:03:db:72:86:67:8a:9f:ec:c5:
cb:60:b1:7e:95:48:f8:c5:f1:88:e5:14:ea:d9:e4:
41:7b:52:46:c6:40:0f:6e:14:64:a8:30:de:80:c9:
d5:19:bd:fa:fa:a1:80:2a:5f:b5:2a:9b:f6:70:0d:
cf:6c:db:eb:97:00:97:68:6b:2e:b2:12:af:7c:ce:
6b:13:19:67:59:e6:56:c5:db:d6:4c:91:28:81:3d:
e1:dc:83:cb:65:fd:da:52:e9:95:c5:ea:3a:c7:93:
75:0c:20:db:6b:2c:26:a5:e0:13:00:8c:b8:e8:5c:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:96:72:9E:27:99:00:58:4E:43:E7:FC:B6:C0:67:A4:DA:E9:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuCWcp4nmQBYTkPn_LbAZ6Ta6Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:87:3e:89:0a:2e:00:cb:9e:d4:38:9b:50:44:2c:9e:f4:e8:
26:02:00:b6:3e:aa:bc:29:b1:4a:14:0e:7b:fa:2b:90:8a:95:
d5:87:fa:be:dc:9f:3b:f0:8e:e8:ff:08:5d:ea:84:7f:de:c9:
9a:5f:9f:df:de:92:45:ff:3e:0f:62:0f:1b:99:57:3d:f9:f9:
e4:5a:a3:d9:27:f1:d7:cc:35:42:4a:67:43:27:c4:05:0f:fe:
79:a2:f3:0e:73:a5:ca:a2:11:ef:a0:b9:0d:21:bd:99:f8:08:
3c:39:ea:8b:4e:48:8d:ea:62:36:d5:e4:99:a0:1e:60:2e:35:
54:3d:b0:27:d8:b2:65:5e:4e:39:53:f2:58:7c:fd:6e:1a:dd:
a9:82:b2:5a:0b:be:11:0a:e2:fc:3b:f5:fd:0c:c3:f9:b2:0b:
14:be:db:2c:e1:98:09:e9:99:be:98:fd:bd:cc:3e:cd:95:a8:
b5:08:15:04:7a:1e:32:d7:06:82:18:f2:9f:e3:cd:42:c9:3d:
ed:59:a3:ae:ad:2c:8f:1c:21:ce:53:1f:21:bf:d4:86:67:bc:
cf:3d:06:11:c5:88:48:5e:6a:d7:20:cc:36:92:59:78:d4:22:
b9:1f:9b:18:b7:5b:bc:c3:d1:c0:4d:c9:13:09:96:aa:c5:75:
2a:f0:2c:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXQzCW/VUeKOdU2rBIXUS94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTIwMjAwODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmUwOTY3MjllMjc5OTAwNTg0ZTQzZTdmY2I2YzA2N2E0ZGFlOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPxOC8mhl/o/79/jdE30B1/G+TjC
16NMO81AsyT2WgpN4mzSs+MZ44/wc9ah599nMTtjmoYjkVWuDpw3oZ2jK/YT57Lv
1KP3n0b0r/Cz8IOG/9bmEucxdS9Z1zzlbmt/w0vOp5uE/YXqYg7yIysLI3pC1DtX
aKZrX5n84BmeZncmLpBcm4jPsGfiPzYD23KGZ4qf7MXLYLF+lUj4xfGI5RTq2eRB
e1JGxkAPbhRkqDDegMnVGb36+qGAKl+1Kpv2cA3PbNvrlwCXaGsushKvfM5rExln
WeZWxdvWTJEogT3h3IPLZf3aUumVxeo6x5N1DCDbaywmpeATAIy46FxlVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMbglnKeJ5kAWE5D5/y2wGek2ulZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveHVDV2NwNG5tUUJZVGtQbl9MYkFaNlRhNlZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADWHPokKLgDLntQ4m1BE
LJ706CYCALY+qrwpsUoUDnv6K5CKldWH+r7cnzvwjuj/CF3qhH/eyZpfn9/ekkX/
Pg9iDxuZVz35+eRao9kn8dfMNUJKZ0MnxAUP/nmi8w5zpcqiEe+guQ0hvZn4CDw5
6otOSI3qYjbV5JmgHmAuNVQ9sCfYsmVeTjlT8lh8/W4a3amCsloLvhEK4vw79f0M
w/myCxS+2yzhmAnpmb6Y/b3MPs2VqLUIFQR6HjLXBoIY8p/jzULJPe1Zo66tLI8c
Ic5THyG/1IZnvM89BhHFiEheatcgzDaSWXjUIrkfmxi3W7zD0cBNyRMJlqrFdSrw
LNc=
-----END CERTIFICATE-----
Generated at Thu May 1 08:13:45 2025 by rpki-client