Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xyWwBeafAvaLF8QSbaXfZEzKorQ.roa
File: xyWwBeafAvaLF8QSbaXfZEzKorQ.roa (raw, json)
Hash identifier: eXYmEj1V1yLSNAebmP/jxDgGgC+8Xqis7nJXt1Ta3Yk=
Subject key identifier: C7:25:B0:05:E6:9F:02:F6:8B:17:C4:12:6D:A5:DF:64:4C:CA:A2:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F4DB7012BDE1D08794F1EB4ECE356805
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xyWwBeafAvaLF8QSbaXfZEzKorQ.roa
Signing time: Sat 18 Mar 2023 13:14:27 +0000
ROA not before: Sat 18 Mar 2023 13:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f4:db:70:12:bd:e1:d0:87:94:f1:eb:4e:ce:35:68:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 13:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c725b005e69f02f68b17c4126da5df644ccaa2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:22:3e:06:8e:89:ee:84:80:4b:97:51:96:
70:ca:3c:a7:87:8b:63:9c:e0:04:53:61:68:da:e7:
7e:c1:91:00:00:45:d7:c3:59:e6:cc:28:6d:52:66:
c0:f7:aa:df:81:ef:e4:7f:7a:3e:5b:49:29:08:d4:
80:04:3e:c1:d4:35:ba:fb:06:8c:e5:84:fc:b8:91:
c1:7a:15:98:da:d9:a0:71:ee:d9:5c:79:32:45:91:
65:35:60:55:bc:c8:c0:f5:fa:21:bc:8d:e0:ba:28:
aa:e8:45:a6:b2:e4:f2:f5:01:4c:6b:98:2c:ef:2d:
99:08:4e:7d:76:11:6a:85:22:ef:11:ff:b6:bc:9c:
87:1d:af:31:4c:a5:b8:45:e0:34:5d:ea:37:5f:1a:
9d:d7:d2:a1:06:52:25:ad:20:e1:19:39:cc:3f:4a:
6d:70:8f:9e:b6:8b:5c:c9:78:b0:70:24:9f:1b:54:
1d:ca:33:63:d4:e3:1d:1b:84:1d:be:5c:00:94:ca:
49:d3:25:b0:ed:2c:5a:65:db:54:07:c7:fa:34:02:
27:78:7d:c9:c3:28:c0:8c:3d:c3:32:f7:b8:bf:53:
7c:b0:0b:b8:33:98:c8:7f:4a:57:9a:58:99:84:5e:
e3:cc:ba:52:42:fa:96:06:63:64:9d:1b:fb:50:24:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:B0:05:E6:9F:02:F6:8B:17:C4:12:6D:A5:DF:64:4C:CA:A2:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xyWwBeafAvaLF8QSbaXfZEzKorQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:4c:d6:2d:83:3b:6b:29:19:5d:49:84:b8:7d:d3:5e:1a:93:
10:3c:47:59:59:4b:65:37:93:65:87:b4:31:56:f2:f9:36:b4:
db:94:c4:1d:21:32:ed:2b:ac:d8:32:d2:5b:dc:cc:32:54:3f:
4f:7c:4a:52:38:3e:0a:a4:67:6b:a3:fb:2f:ed:4e:f7:54:ee:
35:4e:86:05:59:0b:89:ac:b1:4b:ce:f1:80:51:08:c6:a9:2a:
25:e9:61:a9:28:11:07:ee:e9:99:0c:aa:db:38:a6:ee:ba:e2:
24:0a:12:0d:45:32:b0:d2:d0:81:e6:48:9f:81:30:33:4b:71:
53:31:f4:20:ea:08:41:0b:2a:31:73:ca:6c:ab:ee:c1:03:81:
0f:26:db:b6:ad:73:b0:5b:09:eb:7b:e9:93:62:18:60:3f:92:
44:06:dd:98:36:d0:e6:77:56:c1:ac:a9:63:4c:0c:36:e0:96:
89:6c:0a:8c:0e:47:ad:5a:e7:3e:d6:e4:f0:fe:3a:46:93:89:
fe:ce:57:5b:ef:65:37:19:40:d0:30:93:d4:ae:b1:b2:e2:d4:
cc:2c:0f:9e:35:73:97:66:28:8c:ca:9f:3c:79:5e:e2:73:1d:
f8:dc:71:65:6d:06:18:ae:25:27:cd:c8:63:d6:93:0d:20:2a:
9e:70:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:48:40 2025 by rpki-client