Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuiGdNvWtuen4isi1cfLt8rnosk.roa
File: xuiGdNvWtuen4isi1cfLt8rnosk.roa (raw, json)
Hash identifier: 5HKnIe+XgwAEAOCOhSoRlhYQ8oEdJyeC2hpjkl/thSk=
Subject key identifier: C6:E8:86:74:DB:D6:B6:E7:A7:E2:2B:22:D5:C7:CB:B7:CA:E7:A2:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188499AD8D2B10C3CDD1BFFB76F29E6F596
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuiGdNvWtuen4isi1cfLt8rnosk.roa
Signing time: Tue 23 May 2023 17:14:24 +0000
ROA not before: Tue 23 May 2023 17:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:9a:d8:d2:b1:0c:3c:dd:1b:ff:b7:6f:29:e6:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 17:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e88674dbd6b6e7a7e22b22d5c7cbb7cae7a2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:35:c7:5a:ab:39:9f:e7:36:16:f3:16:5c:
3c:6f:4a:e5:69:7d:20:6d:7b:cf:d0:88:52:95:d2:
d3:b7:3b:91:e4:95:03:26:ea:4c:45:01:ae:36:b1:
4b:ac:1c:ec:2c:9c:37:60:d0:11:c9:bd:b9:c5:46:
11:f7:10:3f:17:ea:b1:9b:3b:40:cd:b9:31:7b:a9:
70:d7:04:da:1d:1b:cb:59:77:bd:65:5f:ca:7b:72:
06:c4:5d:ed:9a:39:c5:bd:79:f6:5d:53:26:5e:9f:
70:91:f4:e2:9d:b1:37:15:0b:51:42:26:85:77:50:
82:f3:29:79:89:b7:fc:76:4a:41:77:96:21:1d:83:
50:f8:2b:06:82:29:d2:89:f2:37:b3:ad:d4:e8:ae:
d6:31:24:b0:41:c0:d4:a9:c2:a7:86:04:6f:0a:02:
0b:3a:4d:dc:41:3e:95:de:b5:02:06:36:92:ed:73:
bc:cd:12:10:05:a1:11:17:4f:55:f4:92:5e:eb:f9:
a5:a0:b8:8c:88:17:89:a4:3c:0c:23:6e:5d:f4:e6:
9c:b0:94:9c:da:43:b2:e1:02:ef:3f:84:c0:d7:98:
ff:15:9a:b5:67:34:36:47:4b:ea:16:87:17:89:0a:
5a:b8:db:4b:80:ca:69:6a:8b:71:65:09:45:88:f1:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:86:74:DB:D6:B6:E7:A7:E2:2B:22:D5:C7:CB:B7:CA:E7:A2:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuiGdNvWtuen4isi1cfLt8rnosk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:84:1e:20:b1:b4:51:5d:15:45:32:64:1b:cf:b6:09:1d:6c:
ce:1e:35:47:b1:25:9e:52:7a:30:80:1d:fa:75:07:38:a6:bc:
86:61:c5:0f:ee:3d:a4:19:ac:e3:69:bd:d1:4d:67:93:0c:b5:
fb:38:29:e6:d1:56:42:a6:49:55:f6:6b:a9:a2:23:54:13:f7:
08:b7:f3:6f:40:7f:91:85:40:d1:7d:db:b9:cd:2a:e7:1c:4b:
a7:bf:ab:56:98:b4:4c:13:c1:00:1a:62:31:9a:eb:4d:ef:11:
b3:2b:22:5b:3e:ae:a9:2b:54:e7:d6:0e:4d:2f:72:1c:8a:84:
35:d7:4b:aa:84:13:99:ed:91:96:70:58:b3:48:b7:5e:bc:15:
9a:84:9e:c2:1a:78:f0:0c:b4:eb:90:10:5c:46:1e:fd:34:be:
d4:2b:2a:97:41:16:c2:f6:48:e9:08:25:71:43:fb:a3:86:8c:
13:db:a8:a4:42:17:1e:a0:88:3b:68:ac:bf:a0:eb:16:78:f8:
9c:e1:6d:40:c9:2f:49:ad:cc:2e:c8:e0:c9:ca:b0:7c:28:20:
a1:f7:df:19:35:80:da:1b:ac:6b:14:73:35:16:66:45:a5:33:
21:3c:f0:42:10:35:77:3e:d1:00:c7:f3:50:36:bb:de:29:a2:
f5:1a:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:30:07 2025 by rpki-client