Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpayNt9qvXbcrz-1oBIRGUmax1g.roa
File: xpayNt9qvXbcrz-1oBIRGUmax1g.roa (raw, json)
Hash identifier: 4ZJo/0mSl/T928v1kVWXin5ulGYH2e8D8xWzwcyfY8s=
Subject key identifier: C6:96:B2:36:DF:6A:BD:76:DC:AF:3F:B5:A0:12:11:19:49:9A:C7:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DE5D93997120DAAB8C6C6647787CE8FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpayNt9qvXbcrz-1oBIRGUmax1g.roa
Signing time: Fri 08 Jul 2022 15:11:23 +0000
ROA not before: Fri 08 Jul 2022 15:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:de:5d:93:99:71:20:da:ab:8c:6c:66:47:78:7c:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 15:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c696b236df6abd76dcaf3fb5a0121119499ac758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:19:af:e6:78:4c:d5:88:92:be:19:af:f5:
2b:8f:63:18:cb:93:f2:0f:12:1e:b6:63:77:de:61:
11:99:02:87:6f:ff:1c:35:59:b1:cb:57:36:b3:d5:
81:99:5e:9d:73:bc:e9:32:8c:c6:38:71:68:41:c3:
ce:f1:7d:4b:7c:44:7a:1e:9b:6b:9b:b4:90:b3:c5:
d8:b4:48:2f:8d:fb:95:76:ee:88:b0:65:e6:c7:ed:
ab:ee:b3:42:c8:28:55:b4:a2:51:db:18:84:c9:cc:
f4:91:13:f8:c0:b8:18:e5:de:9f:27:49:03:f3:1d:
35:3e:70:b2:4a:80:d3:ce:8f:12:f9:13:f4:8a:22:
a5:82:27:f6:a4:8c:53:75:d1:61:2a:11:85:f5:0c:
f4:a3:5b:d1:cb:87:4f:dd:b5:be:d7:d4:e6:4b:c9:
0b:5e:47:19:84:f2:2a:17:7e:c3:de:72:cf:f4:8a:
c7:73:fa:6a:8d:a2:39:22:f5:fe:90:0d:86:f1:6b:
97:f4:f3:52:2f:a5:22:cb:08:3a:6f:1a:2c:ac:bb:
26:4a:39:4e:68:b4:90:31:47:00:3b:e9:e3:1d:13:
c4:35:ba:ca:dc:36:46:74:d6:02:af:19:08:63:8a:
b5:fc:e7:5e:e7:1d:8b:d3:e5:98:cc:20:c8:86:a4:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:B2:36:DF:6A:BD:76:DC:AF:3F:B5:A0:12:11:19:49:9A:C7:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpayNt9qvXbcrz-1oBIRGUmax1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:b5:a5:7e:a3:5a:bb:bc:70:67:3c:7c:2b:be:10:f8:ee:6a:
d0:31:1b:fa:26:21:6b:5e:1b:95:d3:a4:a5:3a:e3:ee:07:fa:
ab:79:03:03:84:35:d2:fa:f6:05:1b:c6:2a:af:25:98:54:27:
f1:d2:a7:65:34:a2:81:fb:40:b5:9d:ca:09:ce:cb:52:1c:ec:
a8:8c:83:7f:96:4f:8e:e8:31:88:29:b3:4d:f0:7b:07:6b:4e:
a5:7e:c3:fa:c2:bb:a1:df:4f:21:4d:0b:c5:ab:3e:9c:9a:76:
d4:52:f1:62:0d:2b:01:a0:b9:43:21:0b:07:12:e1:1f:e9:77:
71:1f:34:35:d8:12:28:41:15:76:2a:02:c0:c2:00:da:d7:79:
34:11:b8:cf:65:19:7c:08:e7:a6:88:bd:3a:d4:2f:24:a2:ab:
ef:a6:a2:c1:c5:f1:01:22:f1:33:e4:97:49:33:5f:c2:0b:47:
82:46:aa:d3:11:8c:c0:f3:55:59:58:27:52:dc:3a:c5:f1:7d:
85:64:cb:18:75:11:88:0a:a1:d7:fa:e5:95:3c:8a:c3:45:3d:
d9:33:6a:9f:a0:f4:d3:24:76:65:dd:36:32:80:02:37:45:41:
40:9d:c9:3e:24:07:43:94:73:d9:7a:a2:9f:75:59:07:3a:ca:
e3:d5:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:26:39 2025 by rpki-client