Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xjFI31KS8CYxyidJ_RyvVJkFCNg.roa
File: xjFI31KS8CYxyidJ_RyvVJkFCNg.roa (raw, json)
Hash identifier: nAQ5xbP2UGojxSZZYIIDfApf+qBUUOKQX9gcBtr7Ed0=
Subject key identifier: C6:31:48:DF:52:92:F0:26:31:CA:27:49:FD:1C:AF:54:99:05:08:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8271AAD8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xjFI31KS8CYxyidJ_RyvVJkFCNg.roa
Signing time: Mon 09 May 2022 09:04:48 +0000
ROA not before: Mon 09 May 2022 09:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188487384 (0x8271aad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 09:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c63148df5292f02631ca2749fd1caf54990508d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:30:91:b3:db:a1:41:e4:9e:80:85:d1:e3:
39:ac:1d:02:52:03:dd:db:64:3b:f5:41:09:db:c6:
ab:1a:c9:de:75:6e:cd:35:ab:b9:fb:42:a9:8a:ec:
0f:d6:c0:e5:76:46:28:7e:40:6c:93:53:92:23:a1:
b9:e9:37:13:fc:2e:1f:ac:47:e8:41:67:58:98:e6:
26:eb:29:ff:41:19:7e:34:eb:c7:cd:67:4f:e7:e6:
f7:d9:8b:0b:d0:49:6f:3a:33:de:bf:6f:c6:1f:6a:
5f:78:6d:b9:ae:30:77:1b:32:52:d8:3f:31:ed:5f:
2d:a3:c6:37:7c:54:7f:2c:cf:7a:f4:fc:03:16:05:
ab:d7:dd:c9:94:0e:79:56:29:69:9c:f6:74:d9:75:
96:a3:f0:31:26:bd:d2:d7:20:0f:14:d5:ba:d1:62:
4f:00:09:ab:e7:e4:bf:4d:fc:a1:34:7a:f6:a4:f5:
74:b6:27:2b:4f:23:5e:2b:4a:0a:fe:18:b3:c0:55:
21:28:92:b4:bb:5c:6e:5b:e5:63:9f:08:c3:54:09:
ef:66:33:c9:49:66:10:f7:bb:ab:d9:a7:dd:3b:b7:
46:63:86:3c:47:5c:2c:9a:09:e6:51:02:98:23:a5:
e0:c1:5e:44:a3:13:f1:ba:65:29:48:9f:0b:b9:c0:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:48:DF:52:92:F0:26:31:CA:27:49:FD:1C:AF:54:99:05:08:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xjFI31KS8CYxyidJ_RyvVJkFCNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:8b:ff:f4:39:2b:c5:ac:25:fc:13:fa:94:70:a6:31:c7:2c:
8f:e0:ec:bd:19:f0:a3:09:38:fb:62:3b:46:5b:12:17:ad:f5:
1a:e5:9a:48:3d:c3:14:ef:15:e1:db:0a:b7:53:73:46:cb:19:
48:43:b3:60:11:97:ec:dc:ef:51:08:d8:b9:2f:18:21:5a:96:
9b:a6:94:0c:7a:bc:72:52:32:ac:ab:83:84:3e:3e:38:2b:70:
05:cb:6a:4b:6a:71:b0:57:a4:56:1a:33:9c:80:eb:d6:16:6f:
f1:40:e4:72:4d:4d:7d:bc:4a:39:ac:42:79:34:d3:c1:08:61:
4e:8f:dd:66:11:f9:6b:0a:cc:ed:49:44:fd:a3:8f:a8:87:8c:
85:ce:09:bb:1a:c4:c4:f1:4a:1b:f3:12:84:f7:9c:01:f8:8c:
e5:a8:1b:78:78:64:5e:b0:5b:3c:db:f0:86:56:a7:ad:c6:34:
0f:30:e8:77:df:f5:1e:be:21:2b:f4:e3:7e:62:52:42:66:f4:
d0:32:27:e2:b0:2b:b7:f2:6c:32:1a:bd:54:3c:7b:7e:0b:7a:
2f:ed:0f:48:31:4f:01:66:fa:a1:4e:9f:c2:a6:73:42:53:2b:
d1:0e:41:db:8d:5d:5c:f7:3a:f4:00:e9:33:56:b8:a9:ef:b1:
cb:1a:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:12 2025 by rpki-client