Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOKYDxDzAkk2fjWZ5uxT0F5Htl8.roa
File: XOKYDxDzAkk2fjWZ5uxT0F5Htl8.roa (raw, json)
Hash identifier: oaJLgHOGpmO/Da0v1uzvZ8Ts3h6VPUuhxcnALFQynJc=
Subject key identifier: 5C:E2:98:0F:10:F3:02:49:36:7E:35:99:E6:EC:53:D0:5E:47:B6:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886FFFF2FB577D282524FA6352D4214584
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOKYDxDzAkk2fjWZ5uxT0F5Htl8.roa
Signing time: Wed 31 May 2023 04:10:24 +0000
ROA not before: Wed 31 May 2023 04:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6f:ff:f2:fb:57:7d:28:25:24:fa:63:52:d4:21:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 04:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce2980f10f30249367e3599e6ec53d05e47b65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:5c:12:ff:99:75:3d:2f:1e:2b:ba:ce:ad:
aa:bc:60:06:5e:7e:8e:14:d3:59:f2:e1:0f:1d:0d:
cb:0c:e9:da:6c:e7:9e:1d:93:b5:d0:b6:d7:c6:de:
80:d8:a8:e9:2f:05:88:ff:d9:8a:bc:be:8c:05:a2:
d4:03:ac:74:ac:40:c2:6f:84:5c:1b:ba:82:a0:2c:
de:9f:f2:1f:6a:52:55:e8:5b:d7:bc:38:5c:51:7c:
61:43:81:62:2c:e2:60:38:e7:8c:af:15:24:03:b9:
bc:f1:ea:b3:d5:73:f6:f5:8b:2a:a8:76:a0:68:e8:
0e:1b:06:0b:9b:ab:96:7a:62:13:ea:11:7a:76:c3:
28:d3:92:02:3c:24:ae:53:e8:2a:41:56:a5:ee:b7:
d2:48:f8:14:7b:90:66:92:ca:e9:de:16:30:1c:c5:
cf:0c:8b:d9:37:84:f1:89:55:54:33:88:44:8c:02:
e6:07:a9:b0:05:80:d4:ae:fa:fb:19:b7:96:d4:33:
35:66:5f:36:6c:18:b0:dd:0e:a0:d5:0a:4c:60:6e:
85:05:37:71:1d:34:3a:41:c7:6b:90:5d:eb:88:b9:
46:d6:10:ff:98:67:fa:e5:42:90:42:b7:66:5e:5e:
89:a9:38:13:a8:42:c8:ea:50:6a:45:e5:c4:39:85:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:98:0F:10:F3:02:49:36:7E:35:99:E6:EC:53:D0:5E:47:B6:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOKYDxDzAkk2fjWZ5uxT0F5Htl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:a7:23:c9:2f:f6:1b:5e:43:dd:80:e4:fc:ff:f8:50:e5:f4:
77:4c:09:10:6a:35:50:40:cd:b5:3a:1c:fa:1e:78:75:6d:42:
ba:51:ae:30:9e:9d:aa:e1:64:70:d5:c5:de:08:73:e2:81:12:
c4:0f:8b:46:ee:22:b7:ba:a2:e3:67:b0:2d:08:ef:c7:a2:61:
0b:69:86:59:3f:24:54:09:df:b4:42:9c:e7:e9:69:c8:79:2b:
f1:c5:9f:e0:a9:c5:59:fe:d0:b6:46:37:8c:c8:fb:4b:ab:b9:
7d:9b:36:ab:e2:2e:ad:d4:51:15:f2:90:cc:11:e6:e2:3c:4f:
84:fe:57:25:8f:b9:ea:65:9c:15:8a:d1:ab:27:67:12:81:dd:
0b:1c:3c:ce:53:0f:2f:2d:b5:50:cb:39:9b:1d:71:7b:b4:3c:
8f:1b:59:19:0e:98:6b:c8:7a:f4:f8:4a:63:46:6d:09:05:3a:
31:5d:b5:51:e6:8d:07:62:1a:b0:65:31:59:64:c8:f1:59:19:
79:06:c3:fb:e6:e4:7b:98:35:83:41:3e:36:95:9b:24:ed:3c:
eb:df:d9:17:3a:2c:3d:95:05:22:81:dc:18:c7:f2:54:75:ba:
19:eb:68:64:36:d3:1a:53:ec:2e:16:7b:a2:50:83:23:24:de:
74:8e:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:25:48 2025 by rpki-client