Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xs9QFlsDCnWX1VF5dV_5QNMLfwA.roa
File: Xs9QFlsDCnWX1VF5dV_5QNMLfwA.roa (raw, json)
Hash identifier: Fym2hSUEc+jBup4nr30X9TYNHXU+EOgz375+iGCKpsU=
Subject key identifier: 5E:CF:50:16:5B:03:0A:75:97:D5:51:79:75:5F:F9:40:D3:0B:7F:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844FAA5F598679EBF59370700100C8E66B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xs9QFlsDCnWX1VF5dV_5QNMLfwA.roa
Signing time: Mon 07 Nov 2022 01:17:56 +0000
ROA not before: Mon 07 Nov 2022 01:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4f:aa:5f:59:86:79:eb:f5:93:70:70:01:00:c8:e6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 01:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ecf50165b030a7597d55179755ff940d30b7f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:b8:17:17:d7:66:29:47:93:73:b4:3a:d7:
05:7e:ea:f2:52:46:03:1b:4b:00:91:07:70:c3:a3:
b6:8e:07:a9:a5:fd:fd:fa:b9:01:06:32:e3:b0:6b:
d7:be:fd:a3:68:b6:89:15:8a:5e:6c:bd:0f:0d:0b:
7e:8f:c0:f8:34:76:17:52:83:4b:83:ef:40:7f:98:
1e:4a:54:43:47:16:25:5d:6d:e2:9b:b5:de:ab:52:
9d:ff:c6:5c:e7:75:04:a4:fb:65:de:23:ad:31:73:
6d:4d:14:32:94:85:59:67:0a:ba:b6:d8:c7:8d:17:
5e:13:59:f2:1d:a9:9d:fa:dc:5e:8e:2e:24:57:95:
34:42:69:e1:38:66:79:8a:16:0a:61:5a:3e:46:ef:
99:a8:bc:14:c6:61:6c:21:7d:53:68:05:5e:79:78:
41:59:e5:15:de:3b:c6:8c:46:e3:38:4b:18:a0:c0:
0b:5d:b2:b6:0e:71:67:f9:dd:8b:a4:a2:b4:01:f6:
ee:0b:2b:9c:23:56:4f:96:0f:1e:1e:63:ca:55:eb:
08:35:ba:1c:95:b5:ed:1e:74:c6:4b:64:8f:78:5a:
29:31:1e:0b:e1:90:72:3e:1a:af:8f:3e:79:77:b9:
b8:37:14:ec:73:f8:58:a8:4d:42:65:4f:78:9f:d8:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:50:16:5B:03:0A:75:97:D5:51:79:75:5F:F9:40:D3:0B:7F:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xs9QFlsDCnWX1VF5dV_5QNMLfwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:d0:49:73:87:b7:8d:9a:96:74:e1:4f:58:7a:d8:ff:cb:46:
51:39:87:7c:4a:ab:58:11:87:90:f2:63:0a:85:47:b9:5b:6a:
47:c1:ee:4a:4c:6e:fe:c1:95:87:2e:13:8d:5f:e4:ab:61:0b:
77:47:ba:09:af:d7:16:24:24:d7:ca:57:5c:e2:6a:0d:9b:71:
8d:c5:9f:b4:f1:18:10:5c:1b:cd:01:9a:4c:f8:b1:76:05:bb:
d8:b1:17:12:6e:e1:91:f3:24:77:0c:fd:5f:e7:97:74:96:fd:
f9:20:ab:55:74:f4:0c:c2:87:a2:1c:7e:94:b5:c9:df:9b:6e:
90:35:8d:d8:bf:3e:69:80:f1:06:8e:f0:6d:bc:85:12:f0:31:
5e:48:98:38:70:d3:e0:ae:b7:c0:94:4f:85:84:38:75:95:e5:
8c:4b:c5:85:21:ee:55:6f:60:ff:a6:39:6d:25:37:a5:a2:06:
f0:0c:d2:19:81:cd:c7:43:23:69:63:08:21:a4:c4:16:02:64:
c6:e2:0b:9f:a6:b5:1e:2d:3d:91:5a:9d:26:f8:23:77:c9:71:
a8:11:ab:94:6b:98:ad:0f:2c:af:20:b5:92:29:76:cb:f3:42:
8c:36:3c:50:4d:d6:1a:d4:ed:7a:4c:f5:94:17:31:b9:99:ad:
53:9a:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:20 2025 by rpki-client