Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xn3vliOAZqnSRJ_hi-ID8nXMITo.roa
File: Xn3vliOAZqnSRJ_hi-ID8nXMITo.roa (raw, json)
Hash identifier: ZtI0hd0ljMmE0xGFYK6rfHKbTirIenY57MIszkj8rr0=
Subject key identifier: 5E:7D:EF:96:23:80:66:A9:D2:44:9F:E1:8B:E2:03:F2:75:CC:21:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188ABDCF027237875CBC8A056BB38B00687
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xn3vliOAZqnSRJ_hi-ID8nXMITo.roa
Signing time: Sun 11 Jun 2023 19:09:23 +0000
ROA not before: Sun 11 Jun 2023 19:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ab:dc:f0:27:23:78:75:cb:c8:a0:56:bb:38:b0:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 19:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e7def96238066a9d2449fe18be203f275cc213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:b0:13:50:28:8e:b0:32:f0:88:d3:bc:1e:
ab:d0:14:77:55:46:bc:2d:4b:23:34:de:69:18:11:
18:7b:05:6c:e3:cc:90:0c:88:eb:86:92:ef:3c:60:
51:45:1c:57:d4:1c:aa:79:87:ce:ad:67:4e:27:c4:
89:59:3d:7c:14:49:eb:11:e1:d2:1e:dc:03:03:be:
b7:aa:c9:eb:67:1d:f7:a5:14:34:4f:64:1c:8b:cb:
d9:65:ef:a1:80:f3:80:3e:1e:fc:4e:5c:ab:40:e5:
f0:0e:c8:14:c1:f1:fb:7b:e1:ba:04:ed:9b:56:b3:
66:be:9c:f3:5e:62:4d:54:b7:55:b7:97:e7:86:35:
1b:c0:45:06:29:89:79:b2:b3:42:1b:a7:99:37:e6:
03:c1:4c:0c:0d:e2:37:2a:3e:34:0a:c6:7b:69:87:
eb:9b:46:b4:85:f7:95:ee:c7:82:a9:71:70:dc:d4:
55:bd:84:f4:89:95:c2:8e:ee:7b:90:1f:8b:ba:46:
c9:23:cb:be:2c:f8:a4:7a:18:44:27:66:3b:02:74:
06:56:07:11:d1:ca:0c:d5:b1:36:2f:5e:ab:bb:6b:
3d:5c:58:0c:8f:76:d3:8f:78:53:08:73:b1:57:31:
10:d4:90:67:34:c5:0b:28:a5:d5:fb:78:4b:2c:01:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:EF:96:23:80:66:A9:D2:44:9F:E1:8B:E2:03:F2:75:CC:21:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xn3vliOAZqnSRJ_hi-ID8nXMITo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:39:72:5a:d1:15:0c:eb:f2:f0:18:c7:af:f7:b4:b6:23:92:
f3:32:d1:6a:4b:63:30:c2:dc:84:1e:3a:a3:ea:d5:b8:00:a6:
dd:01:a2:43:e8:74:f9:12:a0:2a:ca:54:5b:1b:a9:f4:c7:0a:
af:8e:82:c5:c0:35:2f:32:d6:da:cc:f4:9f:ce:41:61:77:02:
a8:c2:eb:0b:cf:01:6f:cd:57:f3:35:aa:2f:34:48:6f:23:15:
9b:4f:24:f5:32:f3:db:0d:9c:5c:9c:f7:d9:3a:43:f4:9e:01:
47:7a:99:63:c7:dd:65:14:18:4d:07:52:fa:38:fe:7e:d5:d3:
57:3f:64:b5:86:8d:e0:fd:0b:65:e1:7e:34:a7:60:44:24:ba:
7f:09:aa:1a:fa:4e:61:e7:b9:dc:9b:22:76:6f:27:fc:01:08:
04:e6:36:58:2f:a7:27:a0:46:43:e6:a4:22:ed:26:7f:23:f7:
3b:9d:9d:44:f3:65:2d:30:36:0d:91:2d:28:1d:21:52:dd:1f:
0d:e3:dd:35:8a:06:cd:cb:14:57:e8:23:51:17:b7:ae:9f:cf:
05:b2:24:eb:3e:d2:26:4b:20:11:b2:a2:04:f0:12:b7:53:20:
e9:36:a5:b1:53:16:cd:13:38:6d:65:56:21:da:9c:44:ac:48:
3f:fd:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:28 2025 by rpki-client