Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1AQHkNMemGNrhHcmX3MhIfvdq6o.roa
File: 1AQHkNMemGNrhHcmX3MhIfvdq6o.roa (raw, json)
Hash identifier: ivk21CiJpzDega9p3RHzZQgowpeU3BN9RaMa4kZrRd4=
Subject key identifier: D4:04:07:90:D3:1E:98:63:6B:84:77:26:5F:73:21:21:FB:DD:AB:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893D25BB9A2777DFFED9AC368968A04605
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1AQHkNMemGNrhHcmX3MhIfvdq6o.roa
Signing time: Mon 10 Jul 2023 00:13:50 +0000
ROA not before: Mon 10 Jul 2023 00:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3d:25:bb:9a:27:77:df:fe:d9:ac:36:89:68:a0:46:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 00:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4040790d31e98636b8477265f732121fbddabaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:5a:63:5b:2a:54:40:f1:4a:34:30:22:b3:
e7:99:06:a2:3a:86:6c:5a:d6:68:3b:42:f1:88:dd:
d3:f8:97:3b:1a:6d:8f:4a:21:0d:90:13:f1:88:c7:
fe:73:cb:f8:28:6a:2e:c4:d6:ff:99:f1:1d:0f:d7:
be:98:07:aa:43:e0:1e:3e:84:2b:6c:e6:98:ee:ae:
72:25:d2:5f:44:aa:6e:f2:50:83:21:0a:d3:06:bd:
ec:b7:6d:e8:58:7f:da:b2:a1:7a:37:e9:d9:fd:55:
df:3b:c2:fa:db:4c:85:37:18:b8:f9:30:c8:f1:df:
92:b9:99:7e:0e:bd:e2:7a:ef:ad:a0:26:46:92:e2:
6b:e9:11:9b:ba:cb:48:68:e2:19:d4:91:2e:4b:5d:
d7:07:ba:17:b1:48:60:02:63:b9:20:9d:1f:53:ec:
47:8f:cc:98:ef:36:4f:06:d9:c7:2b:15:4d:fa:1b:
11:ef:ab:28:1c:64:0d:69:84:d4:81:41:8d:5f:92:
9c:df:5f:46:0c:b5:52:b3:49:68:2a:8d:2d:41:ad:
22:ae:af:3d:1c:00:a2:b6:32:2d:4a:ce:bb:9c:32:
f4:7f:60:6d:1a:87:4b:3b:b4:d8:7b:72:52:0a:52:
6a:ec:d4:7d:62:d9:37:4e:d5:9b:32:41:88:ca:8f:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:07:90:D3:1E:98:63:6B:84:77:26:5F:73:21:21:FB:DD:AB:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1AQHkNMemGNrhHcmX3MhIfvdq6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:fd:1b:8f:86:7e:52:5e:26:fd:bf:c6:52:4f:42:9c:bf:cc:
a7:71:a7:d7:b7:ba:73:91:03:39:2e:04:16:a3:97:32:02:5a:
c7:7f:d3:57:92:e2:a4:fc:e4:6c:5d:5d:18:73:f4:ac:2c:8e:
66:a8:54:5d:6b:2a:74:6f:88:b9:95:77:0a:c9:25:40:bd:b2:
2f:d6:86:25:26:70:04:18:32:83:95:45:c2:b6:cc:e2:56:fa:
ba:fc:fc:16:fb:99:7c:44:bc:31:d1:8c:fb:47:f2:24:d6:65:
26:5e:ba:f6:c2:37:13:b3:8d:0a:68:5e:8d:d8:96:d1:ba:36:
14:dd:48:33:fe:17:e8:fb:9d:1a:00:ab:d2:f8:e0:d2:05:7a:
7a:90:2d:f9:50:56:5e:8c:94:94:d4:a8:11:11:3a:92:59:c3:
a0:e4:5b:75:32:64:3e:7d:8b:2f:81:6a:cc:97:45:cd:c8:24:
bc:23:19:a2:3e:55:ae:53:ba:77:db:7d:e5:13:91:85:e0:9e:
ca:d5:42:1d:72:6c:44:dd:b4:de:a3:b8:84:0d:70:21:bd:18:
fb:25:dc:0b:b9:81:13:29:e0:eb:64:8e:66:d7:26:53:6b:01:
b5:18:2b:7f:28:1e:95:00:24:7f:bf:3a:09:ee:97:88:b3:d1:
c8:1f:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:49:24 2025 by rpki-client