Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuifeqGGh8U7YpAhAXkIHBBf5Mg.roa
File: xuifeqGGh8U7YpAhAXkIHBBf5Mg.roa (raw, json)
Hash identifier: vsUN+b2Xah37sBY75vRIwBQUK4Dgvsyaz/9k/Tjz1T0=
Subject key identifier: C6:E8:9F:7A:A1:86:87:C5:3B:62:90:21:01:79:08:1C:10:5F:E4:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182561C2DEF30FBE2A2A2BEB3B8E5B99664
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuifeqGGh8U7YpAhAXkIHBBf5Mg.roa
Signing time: Sun 31 Jul 2022 21:14:23 +0000
ROA not before: Sun 31 Jul 2022 21:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:1c:2d:ef:30:fb:e2:a2:a2:be:b3:b8:e5:b9:96:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 21:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6e89f7aa18687c53b6290210179081c105fe4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:6a:d0:16:d7:17:f8:2b:f6:e1:67:cb:95:
d9:b8:f3:4d:d9:e0:4e:d0:51:4f:f8:9c:6c:45:56:
87:d4:52:c2:6a:c5:83:16:c4:79:fd:59:66:f3:f2:
e2:f6:6d:c5:03:31:05:95:96:b9:56:65:96:da:12:
f9:f5:ac:59:88:e8:f7:c7:f7:60:cf:9a:a1:64:8e:
97:44:bb:fa:87:50:9c:b0:3a:c6:e9:c9:9f:b3:18:
93:c9:7e:5f:e1:08:c6:a9:80:59:04:cd:52:59:82:
84:bd:eb:52:36:0b:c0:aa:c8:1a:9b:b2:54:01:a9:
84:52:b1:29:08:72:0a:5a:2f:25:68:5f:65:f0:13:
15:bd:f8:01:b5:db:a2:4f:12:a6:fb:fb:15:7f:df:
b6:50:f0:03:6a:6a:06:78:1c:de:e0:22:8d:29:71:
80:be:66:16:b0:0b:cd:35:d1:c5:f4:d6:46:c5:dd:
db:8d:cd:a0:ee:67:81:44:9d:c3:ba:07:71:af:d7:
a5:1e:76:1b:6b:d2:5c:a4:de:81:1a:cb:13:99:45:
59:f1:6b:89:23:6e:25:3e:37:27:58:e4:b3:f7:d6:
93:90:09:81:56:ef:76:d7:c1:88:50:6a:d0:3b:0b:
5a:45:35:f7:44:11:d1:b0:a5:42:a4:62:66:ac:52:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:9F:7A:A1:86:87:C5:3B:62:90:21:01:79:08:1C:10:5F:E4:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuifeqGGh8U7YpAhAXkIHBBf5Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:91:e5:56:c3:a1:ff:8d:c3:b3:90:24:fd:16:cb:45:1e:b3:
a5:59:3a:63:12:94:78:b7:2b:91:c8:30:3d:db:0f:8d:7f:2a:
15:5c:45:dd:06:89:79:3f:dd:0e:09:9e:3b:d7:32:3f:97:97:
d1:4b:66:c6:93:95:99:d8:5d:48:5e:18:8d:91:8d:ce:2d:70:
71:0f:63:7c:3b:dc:c6:b9:60:df:35:48:9c:41:66:35:99:11:
f7:23:fe:11:b1:7a:c3:8d:23:92:63:5f:6e:d2:67:ac:8d:c5:
b7:e4:6f:c3:68:b0:b2:95:2d:51:13:db:f6:c7:56:22:bc:81:
f6:92:77:be:8e:85:c4:0f:43:d9:24:3b:ef:ce:f5:d4:2b:c2:
1a:11:52:29:d7:9d:8a:d8:fa:a4:8c:3e:22:29:da:5f:38:b6:
65:d7:69:82:88:06:5d:d8:bc:0e:6c:3b:d8:ba:a1:28:d2:5d:
d0:7a:ac:d2:b3:06:97:ba:34:33:cb:30:7d:43:a8:02:ec:9f:
d4:e2:e2:b1:a8:a6:b1:5f:80:e5:50:ac:c8:e9:38:6b:6a:81:
38:9d:f9:13:d6:3b:75:75:fa:22:d1:f3:02:32:a2:b1:4e:83:
da:b6:80:8c:6e:1d:2f:84:a6:b4:d2:2f:b8:02:4a:66:a9:74:
80:51:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:20 2025 by rpki-client