Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xSA-XLqGE3xEDDEJaQLpeldjo-o.roa
File: xSA-XLqGE3xEDDEJaQLpeldjo-o.roa (raw, json)
Hash identifier: Qpy/paqtV7La5kJ+9j6qV5RZcmK3tOl56Xc/pi1mAx8=
Subject key identifier: C5:20:3E:5C:BA:86:13:7C:44:0C:31:09:69:02:E9:7A:57:63:A3:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188921D39103347C2EB307002F29B0B2651
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xSA-XLqGE3xEDDEJaQLpeldjo-o.roa
Signing time: Tue 06 Jun 2023 19:09:28 +0000
ROA not before: Tue 06 Jun 2023 19:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:1d:39:10:33:47:c2:eb:30:70:02:f2:9b:0b:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 19:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5203e5cba86137c440c31096902e97a5763a3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:fb:ac:db:c3:f4:ff:66:2f:db:60:00:08:
ee:be:74:9b:ff:3b:ee:1e:89:4d:82:3a:f1:ea:29:
f6:6e:21:17:3a:61:0d:ad:ca:3a:8f:dc:c3:e8:3f:
d1:21:26:38:b3:25:bf:19:e0:7f:a0:81:33:d3:1b:
d2:ff:d4:bd:85:98:26:82:d8:8d:fd:da:cd:38:26:
84:78:83:4b:29:36:96:56:ad:46:88:78:f4:4e:dd:
09:37:bc:cf:24:d3:bc:a1:2b:80:21:3f:40:51:34:
6e:19:a7:74:78:0a:0c:3d:32:56:3a:ef:63:af:07:
1c:5a:e1:43:dc:7e:11:ab:34:92:b8:b6:b9:18:74:
b2:57:b2:0f:a9:05:a4:47:09:e7:71:d1:d3:22:ac:
37:17:74:bc:09:56:38:6a:ab:59:fa:00:8c:72:d6:
bd:9c:1d:c3:66:c2:82:48:5f:89:5d:68:c6:6b:fd:
75:de:0c:d3:fc:4f:09:0a:f0:e0:79:1c:d1:8e:0d:
58:81:5f:0f:c6:2a:32:aa:fa:09:20:dd:4e:4b:2c:
2a:38:8e:64:7b:e1:9f:6b:11:b9:9e:3e:38:48:2d:
86:0f:44:a2:8d:7f:d5:92:1b:c0:2b:10:97:13:cc:
be:5e:4d:6f:12:57:16:32:e5:d2:4f:2e:4d:72:2a:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:3E:5C:BA:86:13:7C:44:0C:31:09:69:02:E9:7A:57:63:A3:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xSA-XLqGE3xEDDEJaQLpeldjo-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:9a:47:6a:f9:82:a3:1e:9d:12:c8:d8:e1:69:12:a8:6a:8f:
bd:82:5e:bc:9f:f3:a9:85:cf:e9:08:84:54:71:d6:be:99:61:
a9:d5:35:91:bd:2b:26:35:16:09:3c:96:f8:ee:0c:ae:e4:0c:
60:56:db:3f:eb:19:3f:fa:f9:de:3e:c5:e1:96:15:92:66:8c:
cf:e2:af:82:fc:59:a5:74:94:ae:17:da:69:d8:b9:39:d0:15:
5f:06:c2:03:da:4d:0d:d2:78:11:07:22:d9:89:67:4c:1e:d5:
94:f8:ea:03:22:27:be:76:01:78:69:64:e9:d5:3e:c7:22:fd:
06:32:55:98:bd:a5:d6:ca:55:8c:f9:88:8a:35:7d:31:73:90:
ff:3c:68:a6:bf:72:2b:3c:38:24:56:6d:4b:1d:f7:be:de:8a:
1a:8e:60:78:ab:44:f1:a5:92:5d:56:3e:36:f0:fb:ef:80:04:
5e:bc:6e:23:96:16:05:5e:ee:94:d7:93:b4:c7:98:a3:05:3f:
8e:b1:60:6e:a8:55:f3:af:6f:34:44:ec:01:a5:a7:75:87:f3:
96:b1:76:26:5f:40:fd:55:bf:8b:bb:a7:12:23:9c:7a:94:54:
30:53:49:b3:e0:79:8c:11:c0:61:90:9d:a8:18:34:47:8e:64:
48:37:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:22:56 2025 by rpki-client