Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XKW-xaWXJoihY9c0x7EtXVSgYgs.roa
File: XKW-xaWXJoihY9c0x7EtXVSgYgs.roa (raw, json)
Hash identifier: oAUz+o/GnR5H5U4uThhY+4QhABIhl3/goOXpgAfP1bg=
Subject key identifier: 5C:A5:BE:C5:A5:97:26:88:A1:63:D7:34:C7:B1:2D:5D:54:A0:62:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D95A43668F87E36D55495CD5404CC658
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XKW-xaWXJoihY9c0x7EtXVSgYgs.roa
Signing time: Wed 09 Aug 2023 08:11:58 +0000
ROA not before: Wed 09 Aug 2023 08:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:5a:43:66:8f:87:e3:6d:55:49:5c:d5:40:4c:c6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 08:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ca5bec5a5972688a163d734c7b12d5d54a0620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:30:f8:26:44:da:18:85:8a:43:63:5c:b2:
05:c4:41:68:5d:65:55:26:06:49:86:6c:72:97:cb:
c3:7a:f9:5a:68:05:4e:67:c4:2d:63:60:ca:83:83:
55:10:fa:68:3a:3a:e7:29:3a:87:be:38:fe:8e:2a:
61:74:67:25:36:8d:45:89:65:0f:40:bc:3f:ff:02:
87:3b:3c:83:83:e1:2a:8d:66:7d:02:8d:de:66:61:
c5:3f:b1:90:8f:e1:5d:2e:d1:27:80:ca:1b:62:e6:
41:68:3c:ae:96:ce:30:89:81:a1:75:f3:6e:94:4b:
35:e6:b7:b6:18:74:cf:73:de:b4:12:a8:7b:47:f9:
a1:19:cb:99:4c:e4:68:26:55:4b:ec:7f:07:f7:d0:
e1:54:7c:ea:6a:72:9d:c0:a2:13:77:f2:02:b7:20:
44:79:d6:77:ec:92:6d:80:b5:40:75:4a:4f:ab:ae:
98:4f:a9:b6:1d:56:04:58:6f:69:3c:3f:66:9c:00:
53:c3:00:34:9d:79:00:b0:f4:2c:b9:0f:35:29:36:
f8:3f:3e:2c:34:d1:e0:39:5d:f3:a6:ea:67:58:53:
82:c7:cb:40:1e:41:23:71:ba:be:f8:be:a2:40:8d:
5f:78:f3:3f:9d:f8:74:60:22:93:fe:a7:88:2b:a4:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:BE:C5:A5:97:26:88:A1:63:D7:34:C7:B1:2D:5D:54:A0:62:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XKW-xaWXJoihY9c0x7EtXVSgYgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:45:c0:65:52:06:e5:34:3e:b1:f9:66:63:f8:9d:b0:be:53:
34:1d:82:ee:c7:ca:e4:62:22:31:c4:0c:3f:e0:64:24:ff:e2:
a7:db:f9:ce:39:65:75:17:4e:b2:13:8e:5c:48:0e:50:2c:7b:
b8:c5:4f:10:8f:9b:b2:12:b9:db:73:b2:c2:20:2e:a0:34:3c:
9e:27:2a:84:4b:8a:40:fd:ad:72:2d:1e:82:bb:25:da:1a:60:
69:53:71:62:ff:ae:5e:3f:58:07:d3:a5:6a:be:99:3d:83:ce:
3c:26:c4:2b:f0:80:f6:4c:f1:0d:24:49:77:a6:36:97:aa:2a:
fe:82:b3:ad:60:36:5b:fe:e4:a3:d9:63:83:ee:5c:e7:25:67:
5a:1d:32:35:3f:04:a4:2f:b0:0b:db:69:56:80:68:b0:a0:e1:
ba:d7:b8:d5:f1:37:1d:ab:14:b5:be:11:27:f1:a9:73:17:88:
ed:61:1b:c5:45:08:1e:84:fd:6f:7c:be:27:87:b6:20:6d:e2:
93:3a:3c:f8:e7:5e:fa:b1:ce:36:a8:5b:fd:72:1a:40:73:50:
3a:9c:db:88:f2:68:0a:0d:84:d2:75:9e:43:fc:63:89:c0:86:
2b:55:09:21:bb:35:78:54:f0:8c:cc:14:a1:42:6c:39:d7:4c:
fb:44:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:33 2025 by rpki-client