Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZgH3H6J5p_vB3lpvFIWBdSIqbE.roa
File: xZgH3H6J5p_vB3lpvFIWBdSIqbE.roa (raw, json)
Hash identifier: LB7EMqv1ZSmQdfsDD3winV0qXp+mZSIqN3nmwlpDXDc=
Subject key identifier: C5:98:07:DC:7E:89:E6:9F:EF:07:79:69:BC:52:16:05:D4:88:A9:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 907844D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZgH3H6J5p_vB3lpvFIWBdSIqbE.roa
Signing time: Tue 28 Jun 2022 03:12:20 +0000
ROA not before: Tue 28 Jun 2022 03:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423801044 (0x907844d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 28 03:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c59807dc7e89e69fef077969bc521605d488a9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:5c:64:eb:35:10:40:11:ab:99:8b:50:42:
89:f2:e9:64:f3:10:3f:e2:01:30:2d:95:d0:ff:17:
ce:dc:b8:a4:2b:5b:66:70:d0:4a:a7:88:ef:7b:c4:
34:b2:ae:35:02:6b:aa:42:26:2a:25:35:f5:f8:3f:
2a:46:68:44:e7:40:af:3d:84:79:0b:d0:1e:9a:52:
f1:03:0c:ba:1a:51:55:a9:14:c5:ea:7c:a7:a9:0c:
82:45:e4:64:c4:a6:9c:85:1d:ea:27:ef:22:de:5a:
f6:6e:66:aa:f1:76:bd:b1:41:4f:0d:2d:3a:da:c8:
99:56:b6:3a:3f:f5:e8:01:3a:85:c2:4c:a0:e4:f0:
f5:64:7e:59:a6:1d:7a:86:a4:2c:87:52:b7:29:32:
14:e2:87:9e:41:c7:e0:c7:3d:f1:0d:50:30:e0:c6:
a6:1a:0d:5a:5f:4e:94:09:b7:2e:db:d9:c9:f6:6b:
03:88:c7:01:7e:45:76:52:fa:bc:3c:dd:42:48:44:
54:f3:60:29:e3:cd:ff:7b:d8:70:bb:62:69:47:d6:
9b:b3:15:8d:cf:e4:c5:99:09:06:14:fb:1e:d8:21:
a9:01:1a:6f:e4:ef:96:6e:06:84:4e:f7:53:8a:df:
b3:5f:7e:95:3c:4c:5e:de:67:fb:a4:68:bb:bb:c0:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:07:DC:7E:89:E6:9F:EF:07:79:69:BC:52:16:05:D4:88:A9:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZgH3H6J5p_vB3lpvFIWBdSIqbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:71:07:62:02:1f:43:d5:ec:80:40:4c:2f:8b:cf:12:f8:d9:
5e:54:9b:b6:f0:ca:e0:8f:25:2b:7a:bb:1f:bf:fb:d1:73:72:
ef:8f:a0:12:24:49:7e:a5:96:45:bc:b6:8e:25:16:98:66:b2:
24:e7:4f:73:a0:92:c8:03:1d:35:36:ed:ea:84:33:8a:a3:1a:
0c:72:99:88:84:2c:9b:14:d3:4c:09:a9:4c:28:0e:0e:fb:e9:
fc:97:78:84:7b:1f:c7:0a:a9:2f:d2:d4:c4:9f:30:6a:5b:ee:
ae:e1:7f:26:e3:ab:8d:74:f5:69:93:bd:94:1d:8e:d2:5c:f9:
c2:66:74:67:f2:b4:44:0e:25:c6:12:5b:cb:a3:7f:b0:cb:d1:
80:24:0d:1c:56:c0:62:55:7a:57:bf:15:a0:3f:32:da:5e:f2:
5d:4e:00:4e:e9:4e:73:4d:22:74:6b:42:04:13:c7:a6:06:15:
50:8f:5c:5c:52:32:2a:e1:86:84:1c:0c:1b:49:54:e6:94:58:
77:16:bc:58:f4:99:c4:4e:a6:57:7e:0d:61:5d:a7:b2:b6:13:
de:7e:91:0e:96:46:07:3c:3e:ee:07:02:65:3e:43:e8:d6:6f:
67:ec:98:91:9f:45:7d:9b:ad:2e:3e:ab:7e:55:d2:73:2e:8a:
f9:df:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:49:20 2025 by rpki-client