Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XKTu_C7MjQsA00rOLt98r9vYORk.roa
File: XKTu_C7MjQsA00rOLt98r9vYORk.roa (raw, json)
Hash identifier: DnFgonzEITKEmYy5D87Ih9QQm6aR9u4yIkytdJlR3CM=
Subject key identifier: 5C:A4:EE:FC:2E:CC:8D:0B:00:D3:4A:CE:2E:DF:7C:AF:DB:D8:39:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A9995D0579AAB56F6DD116C091242E85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XKTu_C7MjQsA00rOLt98r9vYORk.roa
Signing time: Thu 24 Nov 2022 12:25:11 +0000
ROA not before: Thu 24 Nov 2022 12:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:99:5d:05:79:aa:b5:6f:6d:d1:16:c0:91:24:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 24 12:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ca4eefc2ecc8d0b00d34ace2edf7cafdbd83919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:5e:aa:0c:80:8c:59:ce:33:93:af:80:0f:
1e:1b:c4:9e:06:91:0d:5b:f0:7f:58:ec:dd:c8:e3:
af:d4:89:90:1f:b2:de:1d:92:96:4e:7f:1c:71:e0:
ed:80:eb:3b:b7:82:5d:ec:0c:af:dd:a5:23:39:1c:
2a:0b:d2:bd:39:f2:c7:32:02:00:a2:59:7c:9f:60:
97:92:25:bf:a7:7d:2b:4b:ca:8d:2e:4c:d0:9b:bf:
ea:3b:d4:8b:f1:77:bf:35:a7:65:49:eb:55:6e:25:
02:ec:ac:0b:b5:b5:24:01:40:de:e2:ff:5d:e8:3f:
3a:60:c5:09:6e:51:10:9e:f6:60:ae:f2:ce:08:34:
f8:87:68:13:c8:b9:a6:a0:36:1a:17:2f:1c:9f:8a:
3e:2c:7c:e9:4d:c0:2d:9c:f8:bc:27:7c:fe:fc:61:
89:cd:d6:c3:93:57:22:d7:f4:91:45:ca:8d:65:2c:
e8:a8:45:48:5e:41:a3:78:0e:ba:1e:3f:24:71:7c:
15:17:7a:20:80:07:60:94:c7:13:14:a0:7d:e1:46:
a9:cc:74:ec:0c:4a:e0:42:df:00:e6:0d:e8:6b:df:
93:11:82:ec:4e:dd:e1:15:44:3a:ce:69:76:4c:15:
29:b0:f9:23:ff:ae:25:b3:3d:3d:8d:e8:c6:7e:60:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:EE:FC:2E:CC:8D:0B:00:D3:4A:CE:2E:DF:7C:AF:DB:D8:39:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XKTu_C7MjQsA00rOLt98r9vYORk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:50:5f:3f:83:3f:4c:01:21:e3:70:bd:62:fb:b6:00:8d:9c:
29:d1:78:90:2e:31:c1:ee:43:3b:9b:e9:bf:69:55:8a:9b:34:
25:88:93:44:e9:12:82:be:6e:ef:14:d9:d1:58:a3:82:9c:ec:
e0:93:43:3b:32:ec:97:18:a5:03:a2:f3:52:1f:16:dc:a3:00:
06:c3:04:42:99:d8:15:8a:83:3e:8b:81:3b:7c:87:87:e2:b6:
b5:b0:26:c3:6f:a6:14:d3:52:dc:b8:dd:28:8f:26:fc:fe:99:
e4:5a:e2:97:4b:96:1f:0f:63:d6:9f:e4:e6:11:a9:d3:9f:eb:
03:78:1a:e6:66:fe:88:9c:48:31:cf:0d:c9:b7:ea:e9:b4:f9:
e0:44:78:ac:79:6d:1f:c7:fb:a6:05:76:48:e9:79:88:bc:ed:
da:88:07:80:f2:63:71:27:8d:e7:56:02:ed:5c:66:74:5c:3e:
22:38:cc:48:2d:ca:e5:1b:86:20:a5:2c:49:8c:5b:27:68:dc:
c7:80:a0:05:4f:51:1b:11:1e:94:d4:cb:85:ef:2a:22:e6:cf:
5e:b2:08:e7:b0:88:17:83:eb:91:5c:4f:82:3b:08:6e:d4:0f:
96:0a:72:35:95:f4:48:d0:5a:18:51:34:b2:72:95:c1:92:71:
01:65:81:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSpmV0Feaq1b23RFsCRJC6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI0MTIyNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2E0ZWVmYzJlY2M4ZDBiMDBkMzRhY2UyZWRmN2NhZmRiZDgzOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9eqgyAjFnOM5OvgA8eG8SeBpEN
W/B/WOzdyOOv1ImQH7LeHZKWTn8cceDtgOs7t4Jd7Ayv3aUjORwqC9K9OfLHMgIA
oll8n2CXkiW/p30rS8qNLkzQm7/qO9SL8Xe/NadlSetVbiUC7KwLtbUkAUDe4v9d
6D86YMUJblEQnvZgrvLOCDT4h2gTyLmmoDYaFy8cn4o+LHzpTcAtnPi8J3z+/GGJ
zdbDk1ci1/SRRcqNZSzoqEVIXkGjeA66Hj8kcXwVF3oggAdglMcTFKB94UapzHTs
DErgQt8A5g3oa9+TEYLsTt3hFUQ6zml2TBUpsPkj/64lsz09jejGfmCLSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFyk7vwuzI0LANNKzi7ffK/b2DkZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWEtUdV9DN01qUXNBMDByT0x0OThyOXZZT1JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFFQXz+DP0wBIeNwvWL7
tgCNnCnReJAuMcHuQzub6b9pVYqbNCWIk0TpEoK+bu8U2dFYo4Kc7OCTQzsy7JcY
pQOi81IfFtyjAAbDBEKZ2BWKgz6LgTt8h4fitrWwJsNvphTTUty43SiPJvz+meRa
4pdLlh8PY9af5OYRqdOf6wN4GuZm/oicSDHPDcm36um0+eBEeKx5bR/H+6YFdkjp
eYi87dqIB4DyY3EnjedWAu1cZnRcPiI4zEgtyuUbhiClLEmMWydo3MeAoAVPURsR
HpTUy4XvKiLmz16yCOewiBeD65FcT4I7CG7UD5YKcjWV9EjQWhhRNLJylcGScQFl
gX8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:24 2025 by rpki-client