Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8AE-Txvj9ugTCe9QEO8uS_BXtCQ.roa
File: 8AE-Txvj9ugTCe9QEO8uS_BXtCQ.roa (raw, json)
Hash identifier: Nws+Oo7qLwpMaoB6px5sTqYfzNEd+J+q47IBmIAePrA=
Subject key identifier: F0:01:3E:4F:1B:E3:F6:E8:13:09:EF:50:10:EF:2E:4B:F0:57:B4:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874A0D8D13116449B5C745E6AE43A94621
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8AE-Txvj9ugTCe9QEO8uS_BXtCQ.roa
Signing time: Tue 04 Apr 2023 02:16:54 +0000
ROA not before: Tue 04 Apr 2023 02:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:0d:8d:13:11:64:49:b5:c7:45:e6:ae:43:a9:46:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 02:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0013e4f1be3f6e81309ef5010ef2e4bf057b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:4d:55:49:7d:de:ec:11:a9:d1:ea:c5:68:
76:29:8c:6b:3a:21:ef:b6:27:41:82:c5:42:51:7e:
20:44:d7:c6:4d:c1:a2:94:85:17:ad:47:c7:ad:f8:
08:a8:42:40:1e:03:68:73:2f:c8:76:2d:f2:a5:9b:
64:31:9e:12:6e:4e:63:aa:62:00:01:c5:b1:2a:5d:
05:00:96:4c:ce:60:6a:4c:7f:ea:66:21:96:a1:43:
0b:de:37:6e:5c:39:f3:71:09:6c:a3:aa:27:27:93:
47:2b:2e:f3:fe:9d:5e:fd:95:e5:e2:26:01:a5:d7:
fe:ba:a6:b7:44:13:79:03:35:0c:4f:6b:2f:39:97:
f0:62:ed:28:af:b3:c6:a1:e2:4f:21:84:14:6e:25:
9e:78:9f:1b:f9:d4:86:47:20:8d:d4:26:54:5c:5b:
55:02:42:8b:60:7f:d1:76:ad:6c:f8:82:78:a7:b8:
a7:c0:f9:a6:49:8d:df:ae:1c:74:fb:2f:bf:e6:78:
38:0a:b6:1c:33:20:e2:99:25:20:98:5d:43:9b:79:
8d:b6:a6:2f:ad:bf:28:31:90:d3:c4:17:be:af:d0:
77:90:fe:77:68:41:12:69:4d:55:f7:3d:71:64:e4:
af:12:97:a0:c6:5f:38:61:6a:b5:d8:27:fb:3f:4e:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:3E:4F:1B:E3:F6:E8:13:09:EF:50:10:EF:2E:4B:F0:57:B4:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8AE-Txvj9ugTCe9QEO8uS_BXtCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:76:16:6d:45:eb:4b:f5:11:77:cf:98:07:1b:d0:bf:34:86:
f6:b2:87:b3:08:a7:66:d0:97:7c:b1:52:fb:2d:c0:8f:2d:83:
5f:bd:c3:eb:9d:bc:fe:90:fd:1c:ee:03:39:79:65:87:07:7c:
c8:37:cd:94:11:95:14:69:15:09:97:7d:66:d7:2b:4f:7d:a5:
21:b5:57:5c:10:8d:1d:eb:ea:4e:ea:2d:f2:07:e4:42:69:46:
a7:95:2f:3d:a0:34:8e:a3:d8:04:24:d8:ed:bd:ae:15:e9:5c:
7e:c9:97:8e:a7:56:49:1a:73:57:4a:51:39:48:d3:5b:c0:e1:
51:5d:2b:a5:2b:f1:4a:1c:a4:0b:4a:6a:b5:24:0b:cc:3f:a2:
b6:ec:31:88:49:0f:bc:6a:a8:bd:26:23:88:7e:5f:ce:d7:3c:
57:36:be:c7:33:b4:a0:c0:80:4a:3a:78:d0:6b:2a:db:69:9d:
3a:ff:40:d9:b4:41:f1:0a:62:92:60:32:b4:fa:a0:52:a2:d3:
90:b2:a5:b8:b8:ce:77:a1:78:3d:8c:e1:17:f9:88:4c:86:4a:
59:ea:09:64:d5:3a:69:d7:17:fb:cf:ac:c6:f2:c5:95:95:f7:
71:81:49:d2:73:73:36:f2:46:fa:49:66:e5:ee:e9:34:1a:20:
e5:d0:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:21:58 2025 by rpki-client