Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XCtAauzO994No0YE08K9ZQpI3Bs.roa
File: XCtAauzO994No0YE08K9ZQpI3Bs.roa (raw, json)
Hash identifier: 0JWk5O43uWeMqfG1SHBNxW2x4LIR8Po5V3CWVnT91vg=
Subject key identifier: 5C:2B:40:6A:EC:CE:F7:DE:0D:A3:46:04:D3:C2:BD:65:0A:48:DC:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BB19CFDFD055B9AB9DC398C9554F82A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XCtAauzO994No0YE08K9ZQpI3Bs.roa
Signing time: Thu 03 Aug 2023 11:12:58 +0000
ROA not before: Thu 03 Aug 2023 11:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:19:cf:df:d0:55:b9:ab:9d:c3:98:c9:55:4f:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 11:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c2b406aeccef7de0da34604d3c2bd650a48dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:65:a2:a5:d3:5f:24:3f:31:67:bd:49:85:
2b:01:61:a9:86:d6:3d:85:0c:e9:1e:f6:4b:07:f3:
8f:f4:20:e1:6b:cd:83:c3:d4:ec:04:5e:db:aa:dd:
6d:d9:0b:e5:07:d0:df:79:bc:43:71:74:96:3b:04:
19:13:5a:0f:05:da:19:88:b5:1e:9c:ec:91:3a:69:
4d:72:a7:3e:84:07:d0:6f:39:15:2a:2d:59:10:fa:
57:24:fd:86:55:02:14:89:58:cd:46:82:98:f8:af:
68:32:e8:c8:82:12:01:cd:3f:78:01:86:b0:cb:11:
95:3c:16:79:ca:d0:e7:8e:f2:d9:77:28:ab:f6:fe:
4a:92:70:3b:b4:17:ba:8f:7c:9c:eb:1c:24:bc:46:
0b:af:30:c2:75:dd:69:6a:62:32:fe:0c:36:27:3d:
f7:50:9e:42:05:7b:87:5b:15:44:46:26:6b:92:23:
8c:35:c1:7d:55:90:49:24:ce:88:b8:46:58:c2:39:
7c:66:e2:d0:46:57:94:4f:cb:ce:8c:5a:7f:d3:19:
17:e4:38:00:66:a5:d9:91:d6:70:a3:66:b8:9d:f6:
e3:f7:79:1d:6f:c9:49:a8:64:1b:06:a0:6e:07:44:
57:25:c6:29:e2:58:f6:84:f5:d6:12:d5:7f:f7:19:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2B:40:6A:EC:CE:F7:DE:0D:A3:46:04:D3:C2:BD:65:0A:48:DC:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XCtAauzO994No0YE08K9ZQpI3Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:31:7d:f6:de:4d:1e:5d:89:f4:e4:db:d7:54:7a:3e:80:c5:
7d:b1:01:92:eb:37:d9:9c:a6:4d:d3:51:ab:07:02:56:19:de:
c9:f9:95:20:11:3f:40:d9:3e:2f:6e:c3:ef:f3:51:d2:50:2b:
96:d0:1b:da:bc:f3:7e:a2:eb:7c:0c:66:93:f5:80:82:41:9c:
ed:95:fc:a6:9e:9b:07:21:97:1f:a2:ed:b5:71:5e:36:8d:e8:
35:c7:38:34:b7:77:67:2a:b7:31:bb:47:21:a1:a8:cb:97:3d:
25:a4:9f:6d:19:05:87:d2:53:2f:90:c0:7e:5f:6f:98:91:05:
f0:7a:98:e3:7c:07:e1:67:7c:bf:be:7b:dd:1a:19:5c:b2:e3:
a3:3b:6f:a1:dd:ee:83:fb:a1:31:db:f9:a3:c4:59:fd:b6:0e:
a9:20:e4:99:68:5f:94:a1:55:19:5d:db:2d:ae:61:9f:15:75:
87:74:0c:f4:ee:8c:7e:02:78:11:f3:85:ea:92:4d:21:09:a8:
8c:1d:31:73:2d:75:52:73:ea:bb:0d:86:9d:c9:80:2c:f1:da:
58:1b:62:33:8b:ef:0d:f0:42:76:66:38:f4:35:d2:93:99:08:
11:33:2b:c7:9d:0c:0a:26:08:54:c7:58:4a:c9:21:ea:15:84:
67:9c:74:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm7Gc/f0FW5q53DmMlVT4KiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMTExMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzJiNDA2YWVjY2VmN2RlMGRhMzQ2MDRkM2MyYmQ2NTBhNDhkYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArARloqXTXyQ/MWe9SYUrAWGphtY9
hQzpHvZLB/OP9CDha82Dw9TsBF7bqt1t2QvlB9DfebxDcXSWOwQZE1oPBdoZiLUe
nOyROmlNcqc+hAfQbzkVKi1ZEPpXJP2GVQIUiVjNRoKY+K9oMujIghIBzT94AYaw
yxGVPBZ5ytDnjvLZdyir9v5KknA7tBe6j3yc6xwkvEYLrzDCdd1pamIy/gw2Jz33
UJ5CBXuHWxVERiZrkiOMNcF9VZBJJM6IuEZYwjl8ZuLQRleUT8vOjFp/0xkX5DgA
ZqXZkdZwo2a4nfbj93kdb8lJqGQbBqBuB0RXJcYp4lj2hPXWEtV/9xmcVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFwrQGrszvfeDaNGBNPCvWUKSNwbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWEN0QWF1ek85OTRObzBZRTA4SzlaUXBJM0JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACgxffbeTR5difTk29dU
ej6AxX2xAZLrN9mcpk3TUasHAlYZ3sn5lSARP0DZPi9uw+/zUdJQK5bQG9q8836i
63wMZpP1gIJBnO2V/Kaemwchlx+i7bVxXjaN6DXHODS3d2cqtzG7RyGhqMuXPSWk
n20ZBYfSUy+QwH5fb5iRBfB6mON8B+FnfL++e90aGVyy46M7b6Hd7oP7oTHb+aPE
Wf22Dqkg5JloX5ShVRld2y2uYZ8VdYd0DPTujH4CeBHzheqSTSEJqIwdMXMtdVJz
6rsNhp3JgCzx2lgbYjOL7w3wQnZmOPQ10pOZCBEzK8edDAomCFTHWErJIeoVhGec
dLM=
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:36:25 2025 by rpki-client