Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbUSVQeFJWV9EQ4e_6ggBSqk6O8.roa
File: xbUSVQeFJWV9EQ4e_6ggBSqk6O8.roa (raw, json)
Hash identifier: fjapclgoIzlBpYIhIGq1pW+CGm0DrgTlP7QBx3/kjOI=
Subject key identifier: C5:B5:12:55:07:85:25:65:7D:11:0E:1E:FF:A8:20:05:2A:A4:E8:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A68918986EB867DCA510903497007CF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbUSVQeFJWV9EQ4e_6ggBSqk6O8.roa
Signing time: Wed 05 Oct 2022 05:05:46 +0000
ROA not before: Wed 05 Oct 2022 05:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:183:a688:3fb1/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:89:18:98:6e:b8:67:dc:a5:10:90:34:97:00:7c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 05:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5b51255078525657d110e1effa820052aa4e8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:2e:b9:1f:fc:10:06:ff:c7:7a:0a:ca:49:
36:9b:dd:1e:5e:2d:00:f5:38:be:49:6f:9d:a6:c9:
21:e2:c6:4c:68:14:37:0c:1a:69:52:47:cc:87:9a:
42:dd:92:00:47:48:19:00:7e:97:18:d2:84:cf:2f:
dd:b1:66:3c:d4:74:4d:41:76:23:8f:43:ff:eb:6f:
40:e8:f8:0f:6b:9b:49:e3:16:f9:9c:42:96:7c:61:
02:ce:aa:5b:a7:5c:da:94:fa:96:4b:9b:8a:e7:b9:
94:d1:53:e6:1f:9b:03:d8:fa:11:ab:5a:a3:f5:15:
6a:ca:c5:f2:99:5a:7d:79:8d:34:e8:d6:60:9a:a4:
3a:0a:04:94:46:e0:2f:02:42:fb:ca:09:fc:3e:51:
0e:d8:e8:e3:58:c5:70:9b:23:da:59:1b:3f:c3:18:
ad:1c:00:5c:db:03:c2:f8:e0:80:de:9d:f9:c2:81:
03:32:2c:c9:f7:d3:1f:a0:7c:ed:72:94:c5:f4:f3:
cd:8f:62:b3:30:da:12:e3:8c:fc:01:bf:9a:35:cc:
5b:4d:68:88:fb:63:66:c0:b4:24:f2:b4:fd:f7:88:
3f:62:e1:55:c6:c2:1c:a5:9d:34:01:43:f2:3d:a5:
68:64:da:96:9a:1e:35:74:3b:58:f7:44:62:4f:1f:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:12:55:07:85:25:65:7D:11:0E:1E:FF:A8:20:05:2A:A4:E8:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbUSVQeFJWV9EQ4e_6ggBSqk6O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:d0:80:71:3f:9f:3c:24:62:78:7e:89:58:bd:f2:e8:29:dc:
e2:5e:23:11:11:c0:23:04:cb:86:17:f2:94:78:36:07:e8:dc:
d4:da:3b:7d:0b:77:ab:26:9e:61:79:e1:e4:5f:5e:10:8f:58:
e4:74:7f:a5:f8:5e:75:e7:41:7c:f6:4e:58:b6:d5:60:2c:00:
42:61:50:85:70:05:f1:f2:ee:94:1e:15:db:62:23:69:a9:30:
45:22:c3:84:c1:10:26:90:18:51:cd:7c:47:c2:1f:c5:aa:30:
15:cb:63:fb:8d:32:5e:7c:45:59:b5:f4:0e:0b:5b:71:a8:17:
67:8c:e5:9f:9e:5a:7b:93:98:e8:d8:2c:06:13:02:28:e1:a0:
c8:2e:79:3c:05:ba:c4:ce:ee:6a:dd:60:9a:43:68:e5:93:2f:
30:9d:5e:7d:ed:54:62:42:17:fe:9f:e4:c1:45:d1:65:49:a1:
1f:7a:24:13:d3:ac:7f:79:14:d3:26:1c:a9:40:68:95:1e:37:
05:5d:76:28:0e:4a:14:0c:fc:15:3f:9a:91:64:3c:a3:75:25:
ef:46:58:18:ea:1a:3f:bf:54:c1:ca:ab:8b:4f:6c:ed:71:48:
d7:37:8c:7a:73:b2:6a:97:1f:47:39:32:e5:79:66:b6:8a:6b:
89:d3:39:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYOmiRiYbrhn3KUQkDSXAHzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA1MDUwNTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWI1MTI1NTA3ODUyNTY1N2QxMTBlMWVmZmE4MjAwNTJhYTRlOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNQuuR/8EAb/x3oKykk2m90eXi0A
9Ti+SW+dpskh4sZMaBQ3DBppUkfMh5pC3ZIAR0gZAH6XGNKEzy/dsWY81HRNQXYj
j0P/629A6PgPa5tJ4xb5nEKWfGECzqpbp1zalPqWS5uK57mU0VPmH5sD2PoRq1qj
9RVqysXymVp9eY006NZgmqQ6CgSURuAvAkL7ygn8PlEO2OjjWMVwmyPaWRs/wxit
HABc2wPC+OCA3p35woEDMizJ99MfoHztcpTF9PPNj2KzMNoS44z8Ab+aNcxbTWiI
+2NmwLQk8rT994g/YuFVxsIcpZ00AUPyPaVoZNqWmh41dDtY90RiTx/ACQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMW1ElUHhSVlfREOHv+oIAUqpOjvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveGJVU1ZRZUZKV1Y5RVE0ZV82Z2dCU3FrNk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA/QgHE/nzwkYnh+iVi9
8ugp3OJeIxERwCMEy4YX8pR4Ngfo3NTaO30Ld6smnmF54eRfXhCPWOR0f6X4XnXn
QXz2Tli21WAsAEJhUIVwBfHy7pQeFdtiI2mpMEUiw4TBECaQGFHNfEfCH8WqMBXL
Y/uNMl58RVm19A4LW3GoF2eM5Z+eWnuTmOjYLAYTAijhoMgueTwFusTO7mrdYJpD
aOWTLzCdXn3tVGJCF/6f5MFF0WVJoR96JBPTrH95FNMmHKlAaJUeNwVddigOShQM
/BU/mpFkPKN1Je9GWBjqGj+/VMHKq4tPbO1xSNc3jHpzsmqXH0c5MuV5ZraKa4nT
OU4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:26 2025 by rpki-client