Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XuSub6DeZF8f6Sy1A4Jl__APD1U.roa
File: XuSub6DeZF8f6Sy1A4Jl__APD1U.roa (raw, json)
Hash identifier: /NVTeXA/fMfroMnW2+X+zoUE0NhpldQsdd79BAkjUmo=
Subject key identifier: 5E:E4:AE:6F:A0:DE:64:5F:1F:E9:2C:B5:03:82:65:FF:F0:0F:0F:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018222258FA211027C5EEE02EB5AF1ED11D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XuSub6DeZF8f6Sy1A4Jl__APD1U.roa
Signing time: Thu 21 Jul 2022 19:04:23 +0000
ROA not before: Thu 21 Jul 2022 19:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:2225:887c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:22:25:8f:a2:11:02:7c:5e:ee:02:eb:5a:f1:ed:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 19:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ee4ae6fa0de645f1fe92cb5038265fff00f0f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:40:76:4a:91:2d:4b:8d:47:57:9c:9d:12:
cd:e0:b5:0a:e0:4c:c1:62:0c:3e:5c:d0:6d:29:20:
84:34:cd:7a:41:ed:e4:d4:eb:be:3f:cb:dc:cd:e2:
c0:3b:0b:5c:d4:cf:c6:1c:f5:22:71:d6:3f:2b:43:
f4:21:9b:7b:69:83:40:64:7f:d7:d8:6b:b2:96:c7:
74:90:43:c7:34:73:ff:de:a1:da:b0:29:14:9e:aa:
5a:f9:75:5e:d6:be:ae:09:93:9a:e8:24:36:2e:1f:
ad:29:bf:06:54:65:e8:2d:d4:70:d4:99:00:3b:b0:
9f:43:92:b7:89:63:87:27:89:5b:b0:ee:ec:9b:77:
e6:00:7e:05:7b:10:13:41:3d:31:cb:74:e5:87:5a:
12:5d:45:c8:05:9a:06:7f:14:ca:b1:b7:5c:80:e7:
4b:bb:94:13:8f:1d:f5:fe:57:b2:fe:49:2b:3e:54:
76:a9:ac:d5:a2:e3:25:f8:7f:3a:c3:c0:d3:15:16:
fb:a3:7d:5f:7d:da:dc:f4:68:df:3e:47:9f:44:ba:
a1:b8:6f:0c:b8:d6:96:0a:5a:b5:33:8c:1c:24:a4:
23:0f:3b:b0:ab:2e:35:a0:f4:03:38:2c:b7:da:05:
d9:30:01:fb:da:b2:2a:b6:6b:e9:02:2a:b2:07:5b:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:AE:6F:A0:DE:64:5F:1F:E9:2C:B5:03:82:65:FF:F0:0F:0F:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XuSub6DeZF8f6Sy1A4Jl__APD1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:f6:ba:16:46:5c:7a:58:9e:ad:12:85:3d:d5:b7:7a:dc:a2:
6c:84:49:56:9c:58:c5:62:7f:0d:13:a3:f8:0a:a1:d9:4c:84:
f0:f2:8a:b0:1c:69:92:86:ee:89:ea:94:cb:48:ff:75:29:0f:
8b:71:9f:79:26:d7:c8:1d:57:78:ef:aa:02:45:95:02:05:7b:
7b:20:e9:23:f5:ea:c9:b8:fd:88:ef:c9:68:8c:7a:6b:49:74:
b6:1f:ad:f9:50:fd:5c:77:42:0f:51:9a:81:98:40:cb:f4:78:
80:da:d6:0d:51:f1:90:ce:9a:d3:44:ab:8b:b6:45:80:9f:cc:
55:a7:86:d1:85:eb:e2:a6:45:69:1e:44:1b:41:76:c4:3d:a7:
b4:12:45:16:b2:9e:30:2f:31:ee:2c:36:d4:94:de:20:05:5b:
a7:1e:23:89:b1:a0:2b:c0:04:9c:7c:9c:cd:30:bc:f2:ec:4b:
97:2a:98:52:98:7d:b0:09:7c:39:2d:aa:8c:26:2b:64:8b:73:
5a:eb:69:c5:91:71:97:d2:6a:ce:dc:48:c3:c0:84:ee:43:f9:
18:87:f9:e2:6a:ae:27:5e:d6:6b:1e:e6:a5:cc:e6:8d:dd:f2:
97:6e:81:4e:00:85:0f:5a:17:a5:ad:54:48:85:7a:10:69:23:
64:9a:a1:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIiJY+iEQJ8Xu4C61rx7RHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIxMTkwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWU0YWU2ZmEwZGU2NDVmMWZlOTJjYjUwMzgyNjVmZmYwMGYwZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkedAdkqRLUuNR1ecnRLN4LUK4EzB
Ygw+XNBtKSCENM16Qe3k1Ou+P8vczeLAOwtc1M/GHPUicdY/K0P0IZt7aYNAZH/X
2Guylsd0kEPHNHP/3qHasCkUnqpa+XVe1r6uCZOa6CQ2Lh+tKb8GVGXoLdRw1JkA
O7CfQ5K3iWOHJ4lbsO7sm3fmAH4FexATQT0xy3Tlh1oSXUXIBZoGfxTKsbdcgOdL
u5QTjx31/ley/kkrPlR2qazVouMl+H86w8DTFRb7o31ffdrc9GjfPkefRLqhuG8M
uNaWClq1M4wcJKQjDzuwqy41oPQDOCy32gXZMAH72rIqtmvpAiqyB1tN/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF7krm+g3mRfH+kstQOCZf/wDw9VMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWHVTdWI2RGVaRjhmNlN5MUE0SmxfX0FQRDFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACT2uhZGXHpYnq0ShT3V
t3rcomyESVacWMVifw0To/gKodlMhPDyirAcaZKG7onqlMtI/3UpD4txn3km18gd
V3jvqgJFlQIFe3sg6SP16sm4/YjvyWiMemtJdLYfrflQ/Vx3Qg9RmoGYQMv0eIDa
1g1R8ZDOmtNEq4u2RYCfzFWnhtGF6+KmRWkeRBtBdsQ9p7QSRRaynjAvMe4sNtSU
3iAFW6ceI4mxoCvABJx8nM0wvPLsS5cqmFKYfbAJfDktqowmK2SLc1rracWRcZfS
as7cSMPAhO5D+RiH+eJqride1mse5qXM5o3d8pdugU4AhQ9aF6WtVEiFehBpI2Sa
oXo=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:15 2025 by rpki-client