Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xztYw3g4LrUQRfvO5XaxuVKtBRE.roa
File: xztYw3g4LrUQRfvO5XaxuVKtBRE.roa (raw, json)
Hash identifier: HPzaaxuOlqVzg/avT7Qi39v3UL/jXT94ee3Tz3UygAQ=
Subject key identifier: C7:3B:58:C3:78:38:2E:B5:10:45:FB:CE:E5:76:B1:B9:52:AD:05:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018270EEA1E22EE6EC554AE1F5B292FAC668
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xztYw3g4LrUQRfvO5XaxuVKtBRE.roa
Signing time: Sat 06 Aug 2022 02:14:23 +0000
ROA not before: Sat 06 Aug 2022 02:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:70:ee:a1:e2:2e:e6:ec:55:4a:e1:f5:b2:92:fa:c6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 02:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c73b58c378382eb51045fbcee576b1b952ad0511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:a1:02:6d:fa:1d:3b:1a:b9:93:cf:3e:03:
01:58:d3:00:bf:5e:98:14:99:88:17:40:b9:8d:20:
c9:41:26:6b:5e:10:d1:c0:67:b4:24:8a:4f:c3:4b:
65:5a:12:d2:07:97:f5:94:46:b3:3e:3c:db:08:a3:
3b:a3:b2:fa:1f:9f:a9:4a:80:5b:30:9a:c7:b1:b2:
a8:89:7d:83:57:d6:10:6d:c8:c0:60:c1:06:9f:ce:
80:4a:6c:65:d7:92:bc:bf:19:ab:35:a0:2e:83:2e:
c4:fe:68:ca:be:b3:fd:4f:bd:44:34:02:6a:f4:eb:
a3:aa:7e:b6:f3:9a:45:6d:a5:7f:7a:06:a3:af:20:
d3:c5:ff:0b:c3:58:14:d7:76:a6:5b:1a:c8:d7:dc:
c4:f4:23:a0:ef:a0:3d:8b:fd:fd:3a:2a:88:c6:39:
af:fc:d3:b2:fa:44:95:1b:a3:c8:5b:85:bd:27:af:
d8:dc:4e:d7:b5:90:78:5d:2d:6a:12:c0:53:bb:2d:
c6:4c:75:64:1e:fa:31:03:c1:85:7b:bd:93:27:4b:
3c:70:f2:0e:d0:b9:7e:1c:cd:f6:d8:9d:ec:d7:19:
1b:f5:62:02:d6:63:d8:f2:57:74:91:f6:cb:2d:88:
63:b9:c8:d3:6f:2d:29:01:b5:05:cd:2c:64:06:40:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:58:C3:78:38:2E:B5:10:45:FB:CE:E5:76:B1:B9:52:AD:05:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xztYw3g4LrUQRfvO5XaxuVKtBRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ea:82:46:5c:93:ea:08:03:ad:39:ba:41:89:c0:21:01:6d:
97:87:78:99:2e:e7:07:31:42:25:f1:d5:09:c7:c1:e5:82:8b:
00:17:45:4c:a0:d8:ee:4f:17:09:25:a3:ca:54:33:dc:1c:ed:
b5:ed:fe:e3:12:4b:38:06:4b:2d:0d:e8:f2:cd:e6:83:9d:5a:
dd:4e:27:27:74:fb:08:25:f9:e0:da:62:0b:60:99:dd:f1:0c:
e2:f5:0d:ae:43:86:fd:b4:20:3d:ad:b6:0d:cb:3d:8e:c4:07:
89:cf:7d:4e:d1:57:c3:8e:c5:b8:3a:4c:58:41:67:9c:77:38:
07:70:0b:53:b9:db:1a:b5:e2:cc:26:97:bf:48:fb:88:45:c8:
44:40:c9:c2:34:13:99:56:13:70:9a:97:e3:37:6b:77:31:d8:
3e:b2:c8:bc:56:3d:6b:72:5e:ea:cf:f5:ef:a9:09:3f:13:c3:
a7:12:3f:b9:d2:b9:cb:1c:e0:3a:3c:2f:f1:97:b0:e4:17:43:
ec:b0:d5:e3:db:6a:9a:a5:d1:52:86:4d:17:6f:5c:cd:94:0d:
fa:c4:57:da:fb:3e:71:76:12:5f:b8:0d:86:52:79:23:a7:91:
3f:93:7d:8a:dd:f9:f1:8f:52:9d:f0:76:4b:0a:19:73:53:f3:
7d:a8:a0:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJw7qHiLubsVUrh9bKS+sZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA2MDIxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzNiNThjMzc4MzgyZWI1MTA0NWZiY2VlNTc2YjFiOTUyYWQwNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7qhAm36HTsauZPPPgMBWNMAv16Y
FJmIF0C5jSDJQSZrXhDRwGe0JIpPw0tlWhLSB5f1lEazPjzbCKM7o7L6H5+pSoBb
MJrHsbKoiX2DV9YQbcjAYMEGn86ASmxl15K8vxmrNaAugy7E/mjKvrP9T71ENAJq
9Oujqn6285pFbaV/egajryDTxf8Lw1gU13amWxrI19zE9COg76A9i/39OiqIxjmv
/NOy+kSVG6PIW4W9J6/Y3E7XtZB4XS1qEsBTuy3GTHVkHvoxA8GFe72TJ0s8cPIO
0Ll+HM322J3s1xkb9WIC1mPY8ld0kfbLLYhjucjTby0pAbUFzSxkBkCjJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMc7WMN4OC61EEX7zuV2sblSrQURMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveHp0WXczZzRMclVRUmZ2TzVYYXh1Vkt0QlJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE7qgkZck+oIA605ukGJ
wCEBbZeHeJku5wcxQiXx1QnHweWCiwAXRUyg2O5PFwklo8pUM9wc7bXt/uMSSzgG
Sy0N6PLN5oOdWt1OJyd0+wgl+eDaYgtgmd3xDOL1Da5Dhv20ID2ttg3LPY7EB4nP
fU7RV8OOxbg6TFhBZ5x3OAdwC1O52xq14swml79I+4hFyERAycI0E5lWE3Cal+M3
a3cx2D6yyLxWPWtyXurP9e+pCT8Tw6cSP7nSucsc4Do8L/GXsOQXQ+yw1ePbapql
0VKGTRdvXM2UDfrEV9r7PnF2El+4DYZSeSOnkT+TfYrd+fGPUp3wdksKGXNT832o
oB0=
-----END CERTIFICATE-----
Generated at Sat May 3 23:47:40 2025 by rpki-client