Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-AEWrTABcAETcmuthFFn6zXzEKE.roa
File: 1-AEWrTABcAETcmuthFFn6zXzEKE.roa (raw, json)
Hash identifier: YyaZKOuCkcfqaQBmGrBSLx2H4DhEEA/ALub7NN8bQw8=
Subject key identifier: F8:01:16:AD:30:01:70:01:13:72:6B:AD:84:51:67:EB:35:F3:10:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4025951169F03F676E1B3AC6E3060722
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-AEWrTABcAETcmuthFFn6zXzEKE.roa
Signing time: Tue 29 Aug 2023 07:15:19 +0000
ROA not before: Tue 29 Aug 2023 07:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:25:95:11:69:f0:3f:67:6e:1b:3a:c6:e3:06:07:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 07:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f80116ad3001700113726bad845167eb35f310a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:9f:42:e2:d9:1b:d0:6c:9d:29:5e:6a:5a:
bf:f3:f4:10:6d:f3:ab:9e:1c:ec:a2:e8:74:8b:9e:
f3:55:69:d1:ae:50:c1:e3:76:8b:84:1b:98:e1:33:
ac:b2:fb:29:f4:58:b9:40:0a:cb:cd:26:e5:dc:ef:
ea:30:8c:1b:e6:4e:87:4d:c5:27:1d:c7:d2:ee:a9:
9c:bf:2b:a4:e1:dc:03:47:0d:d5:f4:4b:76:9c:59:
ed:db:30:53:02:16:c9:67:b5:76:0f:5b:57:a2:f8:
94:c3:d8:12:24:67:7c:7b:a8:a4:e9:f2:cf:76:1c:
9c:43:f7:92:21:7e:66:03:66:89:54:a7:45:47:5a:
ab:cd:d4:47:26:10:f2:b0:84:c7:ea:a5:a1:a9:3a:
52:7e:b1:42:f2:95:17:30:aa:67:03:c7:96:9e:d5:
4a:23:f6:67:d3:d8:c5:22:b9:12:2e:02:6e:d0:ac:
5d:a3:6e:6a:cb:9a:9d:fb:b2:2c:c6:d7:47:6f:76:
ee:27:01:69:ff:6a:72:4b:dd:16:fd:c8:3c:56:3f:
b2:e2:e2:51:ee:c7:b5:03:bd:a5:f0:57:11:bd:19:
67:75:5d:a9:f6:79:d6:09:11:8d:49:61:75:f6:cd:
e7:8e:17:05:f9:df:9c:18:8e:2f:7d:e0:3f:59:8d:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:16:AD:30:01:70:01:13:72:6B:AD:84:51:67:EB:35:F3:10:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-AEWrTABcAETcmuthFFn6zXzEKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:36:ef:90:81:d9:76:11:b3:b1:9a:48:7c:b9:54:0f:aa:26:
db:79:78:c5:d9:17:43:93:6e:3b:e6:42:c8:d7:d7:99:78:df:
b4:c6:b0:97:e2:79:70:d6:ea:75:f4:67:86:28:b1:81:04:8d:
f5:54:77:23:73:a0:06:45:1a:da:2c:37:7b:21:98:c8:06:0d:
ff:2a:31:77:96:41:b1:43:8e:bf:aa:f3:ae:68:d3:6e:4c:27:
d1:e0:27:35:6b:0a:90:b8:71:fc:44:1b:30:94:f6:d3:ed:eb:
3d:c5:75:2a:ca:59:6f:83:a5:3b:f6:51:dc:cf:5e:13:bc:5e:
ef:79:34:6d:14:51:76:5e:72:22:af:9d:34:3b:10:84:0d:32:
4e:69:7b:68:d3:1e:0a:12:cd:48:11:71:e8:16:a2:1e:2d:f9:
56:b9:18:24:2d:f9:02:44:bd:07:1f:ea:fa:b6:30:8f:5e:b5:
c2:e0:f6:6c:80:af:b7:06:b1:63:2b:11:bc:ea:ec:11:a1:a8:
cc:26:76:73:c5:f7:57:20:cb:5e:b1:8f:f5:f4:69:94:bf:cb:
fe:bf:5e:c1:78:33:ed:4e:6a:0a:86:bf:21:00:a0:c0:2e:3f:
71:01:cf:af:17:e1:ab:79:a9:0b:b4:0f:b7:56:9e:c2:1a:83:
7c:8e:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:43:16 2025 by rpki-client