Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xum313REqqmx03tQAPJ1kv5TExw.roa
File: xum313REqqmx03tQAPJ1kv5TExw.roa (raw, json)
Hash identifier: NtGzePWZfTV6W11cFzLR+0PEND1P/OhM0oBDVgaC67E=
Subject key identifier: C6:E9:B7:D7:74:44:AA:A9:B1:D3:7B:50:00:F2:75:92:FE:53:13:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D0FBD21A9FED297CD1A7B11171B7241B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xum313REqqmx03tQAPJ1kv5TExw.roa
Signing time: Mon 19 Jun 2023 00:09:04 +0000
ROA not before: Mon 19 Jun 2023 00:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d0:fb:d2:1a:9f:ed:29:7c:d1:a7:b1:11:71:b7:24:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 00:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e9b7d77444aaa9b1d37b5000f27592fe53131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:26:89:3e:9b:17:22:80:59:5d:3d:06:a3:
75:16:b3:c6:af:2f:66:b3:f5:bd:00:6b:9b:82:0c:
45:4d:38:d6:d7:a6:17:b6:8c:22:d6:c3:65:18:f2:
ba:69:fe:fc:12:84:b4:da:92:7d:2d:6d:e4:50:8f:
25:48:89:b7:78:73:2d:c1:7d:49:e5:b8:2e:b6:49:
7d:7e:ad:92:cf:63:5b:e2:52:cb:72:e7:c4:87:76:
0f:63:71:52:12:b0:80:df:ac:0e:c5:d7:45:de:eb:
52:fa:03:8d:df:e9:d4:53:9a:85:99:9a:cd:4f:f7:
3d:c9:57:86:ed:8f:7f:0e:83:c3:ef:e8:96:73:1e:
af:1d:ff:1b:96:3b:f2:66:ac:08:99:8b:86:33:ea:
8a:50:56:78:23:76:e0:28:38:2a:98:12:6f:81:fa:
4c:13:f6:a1:1a:00:34:a1:2a:4a:23:a3:7a:62:39:
e7:43:fb:d9:75:4c:29:25:8d:9a:f6:73:4d:cb:6f:
db:86:81:73:b4:20:0e:e4:11:36:91:ab:5b:92:1c:
40:40:bc:f9:4c:da:c8:1c:75:46:b1:5e:ec:cb:40:
cf:72:23:75:82:b8:bd:a2:9e:1e:e2:f3:e2:ea:d1:
4e:3e:dd:9b:55:69:c3:fd:10:da:dc:09:ab:9f:74:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:B7:D7:74:44:AA:A9:B1:D3:7B:50:00:F2:75:92:FE:53:13:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xum313REqqmx03tQAPJ1kv5TExw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:8e:87:93:d6:16:20:50:1d:fa:aa:ce:8a:e7:0f:81:b0:dd:
90:89:22:3a:97:b4:03:ab:3c:ea:3a:ef:7f:e7:17:f1:8b:a0:
4a:e7:75:5b:00:7e:5c:8f:b9:10:94:46:61:aa:ea:12:10:89:
e9:e2:89:c2:e3:56:70:3c:39:c3:9c:7c:ae:a2:f3:43:c6:71:
5d:f8:d4:35:aa:de:af:9f:6e:a2:db:d3:e1:b3:e9:10:42:d7:
64:1b:67:72:04:e0:1e:83:11:54:95:a8:c8:b8:df:5f:61:c1:
8e:42:1c:f4:0c:7b:90:38:82:a5:f4:63:df:18:d1:52:1a:87:
c9:99:b5:f8:6e:cc:55:43:8e:e9:ff:5b:37:6e:28:6e:c0:f2:
ec:e9:7b:d3:09:4d:f0:fc:d2:34:5d:39:49:53:3c:77:ea:a3:
bd:2b:31:08:fe:27:71:2e:c1:08:70:00:2e:89:2c:a1:49:17:
80:47:a6:b5:5d:b8:d8:cc:ce:e8:ce:31:65:ec:9d:c8:32:87:
03:67:57:95:f2:bc:1c:71:20:06:21:b8:ac:4b:d1:9d:ec:24:
54:73:6c:7e:a3:3f:b3:16:d0:73:3c:cd:a4:bc:91:a3:8f:61:
f3:19:8d:2e:78:49:89:58:6a:cf:96:71:6d:86:02:79:b2:1f:
da:d4:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:39 2025 by rpki-client