Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xkpDtodP9szct4Cy0hESLYx5D0I.roa
File: xkpDtodP9szct4Cy0hESLYx5D0I.roa (raw, json)
Hash identifier: KES0u52ORNEX5zjdZldvNvM6FLD2HYZPHjk/HeqViIY=
Subject key identifier: C6:4A:43:B6:87:4F:F6:CC:DC:B7:80:B2:D2:11:12:2D:8C:79:0F:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018550E9DCAF7BA596EDAC99A129A921C8E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xkpDtodP9szct4Cy0hESLYx5D0I.roa
Signing time: Tue 27 Dec 2022 00:09:41 +0000
ROA not before: Tue 27 Dec 2022 00:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:e9:dc:af:7b:a5:96:ed:ac:99:a1:29:a9:21:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 00:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c64a43b6874ff6ccdcb780b2d211122d8c790f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:c4:bd:9f:dd:66:45:2b:38:01:65:c3:07:
0d:4d:e5:13:e7:c5:bf:01:f6:da:6d:91:e2:04:58:
96:8b:d9:23:17:2d:68:20:40:c8:79:2f:fd:97:49:
ac:f1:52:2d:c3:ea:5a:7a:d7:cf:f9:fa:ad:14:21:
94:b6:c6:ef:13:11:8b:44:60:22:a2:33:17:3c:d4:
9d:46:0d:8d:9a:4a:dc:64:f6:f7:9c:2b:7a:d2:19:
d1:c7:74:35:38:86:ca:66:7b:2c:97:24:bd:7f:6e:
4a:a7:b3:cc:25:40:1d:93:5d:30:9f:c1:f3:1c:b6:
c5:52:8f:14:55:3f:b5:73:a5:ec:67:90:a1:99:8a:
f0:93:8b:27:f8:47:8e:ab:a7:37:84:4c:23:04:78:
38:cf:96:8c:2e:68:28:f6:78:92:0d:c1:84:37:68:
f7:b2:01:91:0e:62:b5:c8:91:aa:64:89:10:02:92:
db:eb:26:83:53:f0:be:b2:f8:3b:2f:c9:aa:7f:2e:
be:e2:64:13:d1:74:ec:0a:5d:02:2a:db:8f:e1:e0:
d5:5d:f4:cd:f0:e9:9e:a8:28:1d:4b:bd:44:16:3d:
5a:67:0e:c0:de:e9:f8:cf:04:90:1a:5e:fa:4c:29:
44:18:25:ea:7a:37:32:0c:cc:ca:10:ed:d4:99:e8:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:43:B6:87:4F:F6:CC:DC:B7:80:B2:D2:11:12:2D:8C:79:0F:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xkpDtodP9szct4Cy0hESLYx5D0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:8a:7c:fb:39:ef:df:bc:79:bc:9c:53:12:5f:5f:e9:4e:c3:
8b:0f:3e:67:93:a6:46:da:3f:38:60:02:85:c5:05:45:f4:c4:
63:07:d3:47:d6:07:c9:f2:63:3a:86:4d:f2:4d:30:03:93:bf:
71:3e:6d:ad:02:63:dd:18:aa:95:ce:17:c1:4f:dd:2c:eb:27:
16:df:74:83:21:ff:00:01:d1:5b:28:8d:ef:86:d2:1a:e5:5a:
43:74:e9:08:a7:6a:9a:e8:a2:97:0f:d7:24:0b:b6:32:d9:04:
b1:52:af:48:97:44:5d:db:50:4b:77:59:f8:22:4b:0d:93:0a:
fa:58:73:6a:df:50:7e:22:0c:7c:2c:af:3a:f2:be:9a:25:1a:
42:fe:63:7b:68:a7:af:f3:83:c1:6d:5e:ff:55:fa:59:bb:fe:
bc:14:eb:fb:a3:3d:88:2b:49:45:fd:42:26:df:c8:45:1c:d4:
b1:a7:5b:39:fd:6f:5c:b7:be:8f:d3:80:82:9b:8d:78:8a:52:
3d:1f:32:87:18:78:2d:f2:00:60:8c:a6:74:d7:42:f2:4b:3b:
90:c8:e0:2b:40:69:7d:cd:3b:e3:1f:37:2b:22:e6:ee:47:19:
16:8d:e2:ce:1a:5f:97:3c:52:f7:23:7c:86:35:eb:07:1c:44:
11:3c:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:23:49 2025 by rpki-client