Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xzVw2ce4YNuFZ09gMNA9Pl97sXE.roa
File: xzVw2ce4YNuFZ09gMNA9Pl97sXE.roa (raw, json)
Hash identifier: 10wtjpFsoLcoDCf6e3JYhvN/qnEbKWV1q9dzP4uuqvA=
Subject key identifier: C7:35:70:D9:C7:B8:60:DB:85:67:4F:60:30:D0:3D:3E:5F:7B:B1:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857D8C9051C698220007A7659EB10577C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xzVw2ce4YNuFZ09gMNA9Pl97sXE.roa
Signing time: Wed 04 Jan 2023 16:10:42 +0000
ROA not before: Wed 04 Jan 2023 16:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:8c:90:51:c6:98:22:00:07:a7:65:9e:b1:05:77:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 16:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c73570d9c7b860db85674f6030d03d3e5f7bb171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:15:28:b5:60:89:ba:81:c4:7f:3f:a1:8d:
c7:9f:21:93:39:ab:9f:44:1d:4b:a4:70:a3:76:c3:
97:96:ff:35:5d:e2:cf:82:b0:40:25:45:49:d3:7b:
b5:47:ba:f6:42:d4:09:7f:2b:31:61:67:46:e6:5d:
16:6c:0f:e0:cb:40:3c:51:30:8c:17:fb:f8:27:e9:
f3:8e:cf:a0:17:74:0b:a3:a2:38:69:0b:dc:4b:10:
b8:df:12:99:33:a3:46:47:1a:39:0e:ec:20:ca:4b:
83:3e:5f:01:ba:7e:9b:c2:b2:0c:1d:9c:67:3f:5c:
61:40:cc:25:f4:eb:69:2b:6d:e5:a2:c6:56:ec:06:
4f:08:58:dc:c5:7f:73:7c:44:af:e4:3f:7f:cc:ce:
2d:d7:04:04:06:5e:ed:72:ee:8a:bf:d7:db:c8:2b:
d4:f1:74:79:79:10:db:06:93:20:4f:8d:4a:98:d6:
b5:dd:9f:de:bc:99:aa:0a:13:49:f3:c5:91:e3:34:
ac:52:70:36:5d:23:b9:ff:6d:fd:9c:aa:d4:45:a1:
52:60:5c:01:ab:77:78:00:e8:fe:cd:3d:5f:f0:d4:
e3:24:7d:a3:36:54:2e:13:ef:26:1e:e0:91:56:e5:
d7:47:2f:39:b4:d0:6c:c9:9b:56:a1:1b:ea:2f:05:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:70:D9:C7:B8:60:DB:85:67:4F:60:30:D0:3D:3E:5F:7B:B1:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xzVw2ce4YNuFZ09gMNA9Pl97sXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:35:85:96:e7:98:00:17:8c:e7:1c:5f:e2:3e:78:4f:6d:60:
e1:85:84:b5:e7:dc:45:64:4a:c2:b5:15:91:c9:0d:1c:40:17:
50:24:7c:0b:18:c0:f5:a8:09:90:5e:b1:51:ff:a7:76:81:fd:
d0:e4:80:99:7e:89:83:a1:41:07:9e:0f:d8:53:b2:50:16:99:
c5:80:0b:c7:d6:70:71:c4:75:02:5e:0d:ef:5b:04:bd:46:3a:
91:26:44:46:02:80:da:48:d4:9b:24:1b:c9:5c:7d:c5:44:53:
de:56:1a:32:f8:4c:cb:98:fd:c0:c8:43:1f:0e:a1:3a:de:7d:
dd:80:53:f7:1d:49:29:ec:62:aa:12:b2:b5:76:e5:e8:a3:f9:
0f:27:bd:ca:03:76:20:0f:54:e9:c9:40:be:3f:fb:18:a9:d2:
4a:64:7d:73:c8:8c:75:f3:00:43:5b:42:c2:ba:f1:f9:88:8e:
40:a0:7d:13:9e:7b:01:4b:14:00:96:ab:a6:ec:7f:90:ee:67:
9b:83:39:d3:10:21:45:5b:9b:83:07:c7:bc:a0:43:cd:b2:f0:
d4:39:45:68:b6:cb:d4:7a:1b:97:8f:9f:b3:9c:e9:38:27:46:
c9:60:72:51:14:ac:3f:cc:91:fd:b5:cc:58:6e:ed:b3:14:65:
a5:a9:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:00:13 2025 by rpki-client