Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xtu23SCcWuHGgzrgU-ERb-H1Hrs.roa
File: Xtu23SCcWuHGgzrgU-ERb-H1Hrs.roa (raw, json)
Hash identifier: BmKKFEDt831Bi/xsNgeKLyGOe2xHuk1yC5/I1MTdTuw=
Subject key identifier: 5E:DB:B6:DD:20:9C:5A:E1:C6:83:3A:E0:53:E1:11:6F:E1:F5:1E:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825198C73ACB35B5169668A78CE53335C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xtu23SCcWuHGgzrgU-ERb-H1Hrs.roa
Signing time: Sun 31 Jul 2022 00:12:23 +0000
ROA not before: Sun 31 Jul 2022 00:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:51:98:c7:3a:cb:35:b5:16:96:68:a7:8c:e5:33:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 00:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5edbb6dd209c5ae1c6833ae053e1116fe1f51ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:0c:e6:f9:a7:78:ff:f8:cc:bf:81:fc:10:
dc:95:bd:89:82:ad:d0:ac:55:95:8a:44:56:c7:fb:
b7:5a:07:82:b1:4d:b4:c3:28:a3:9d:0a:46:aa:d6:
8c:3d:0a:6b:f4:6e:46:9f:69:80:91:7b:96:8a:6a:
12:e7:aa:3a:64:98:53:fb:0e:4b:d1:45:5b:10:12:
f3:3c:16:26:89:96:bd:1b:ec:e2:03:33:3f:21:1e:
c9:ab:f3:3b:27:b1:21:fd:88:7c:7a:82:0b:8e:7a:
5b:86:be:4b:b8:69:53:df:2c:dd:b5:c1:18:80:23:
7a:5f:b7:d7:c9:2e:56:f2:ef:db:ac:a4:30:6c:25:
4f:74:1b:64:5c:b4:0a:b6:bc:ce:c6:1c:9a:9b:46:
f1:1c:63:d0:2a:9e:6f:d6:4a:9e:21:a2:a1:df:fa:
f1:3b:29:75:c8:2e:1f:23:04:f5:3e:58:74:d3:78:
f7:89:05:e9:a2:a6:af:69:f6:6f:04:83:56:9b:c1:
24:3a:ff:62:30:b1:4d:91:37:86:20:d9:38:96:07:
72:f7:fe:3f:f8:0a:be:95:3e:31:79:ce:4c:17:93:
27:5b:bd:87:eb:11:c9:ee:3b:12:13:b6:0e:e6:b9:
68:31:9d:e1:26:76:da:be:52:f6:e3:10:88:36:54:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:B6:DD:20:9C:5A:E1:C6:83:3A:E0:53:E1:11:6F:E1:F5:1E:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xtu23SCcWuHGgzrgU-ERb-H1Hrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:c8:8f:cf:43:d2:1d:8d:60:e2:09:a7:af:e4:3d:4a:20:61:
82:4a:96:08:35:4b:59:93:6b:8a:83:cc:27:01:1b:77:ac:7c:
40:cb:21:71:6d:a4:a6:09:7e:a6:59:90:67:23:e5:f0:5a:69:
65:5d:33:4e:ab:fb:c0:db:0b:ff:d0:3a:73:99:6b:09:62:76:
ca:4a:14:4c:04:57:20:54:e9:e8:d2:8a:a4:ec:e6:04:59:c3:
da:f4:2f:c5:7f:e2:11:09:5c:e4:b4:77:59:e9:6f:a2:ff:38:
3f:f5:86:19:78:f5:b6:c0:8e:b4:f7:ce:f5:85:6f:d8:ae:e8:
bd:62:12:87:b8:79:1b:fd:de:78:c1:1d:6e:f7:6f:0c:f2:0b:
e8:12:0f:20:87:9b:17:3d:a4:5c:f4:52:15:27:fa:71:3e:db:
d1:95:c3:15:5a:28:fa:1a:c8:f1:cf:53:62:f5:a6:7d:4b:29:
b5:d8:96:04:4d:39:43:5c:da:8d:c9:80:ef:3a:84:65:b9:29:
e9:60:64:26:9d:a1:1b:92:73:c6:16:a5:c2:21:42:1c:02:cb:
9c:d6:8c:43:a5:34:e2:a4:dd:da:25:02:55:0d:00:f8:63:46:
2a:aa:78:6c:03:4c:0e:ef:2b:1f:29:52:3d:dd:7d:29:a6:d8:
ee:7b:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:45 2025 by rpki-client