Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2AcafERUZiGqY2Q9_3VHM5YY3I.roa
File: A2AcafERUZiGqY2Q9_3VHM5YY3I.roa (raw, json)
Hash identifier: X8L37Uz4gUgP285EsE0cB1B9hbhU/SWkF9TBCzrMwuA=
Subject key identifier: 03:60:1C:69:F1:11:51:98:86:A9:8D:90:F7:FD:D5:1C:CE:58:63:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67075275
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2AcafERUZiGqY2Q9_3VHM5YY3I.roa
Signing time: Tue 01 Feb 2022 22:04:25 +0000
ROA not before: Tue 01 Feb 2022 22:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:b751:4ce9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728533109 (0x67075275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 22:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03601c69f111519886a98d90f7fdd51cce586372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:40:57:8a:7a:ff:d2:06:73:eb:fa:b7:b7:
c0:c1:7e:61:5f:df:8b:0c:12:9a:df:f8:b4:07:cd:
e1:8b:58:71:a5:4c:f8:3d:47:13:e3:fb:06:84:5c:
39:87:5d:de:30:2c:32:5f:2e:87:83:ab:86:ee:3b:
93:37:e0:58:42:69:0a:1a:e0:7b:24:74:23:05:d7:
95:9c:b9:37:9c:9b:ea:33:61:e0:13:0c:6a:60:7d:
b9:37:b1:6c:d6:40:8e:09:70:33:56:fc:07:7f:91:
92:d5:42:3f:6f:3b:0e:4a:6a:ae:4b:91:64:99:4d:
c4:a4:33:67:e2:15:ac:2a:a9:39:d5:09:39:25:b2:
98:c6:a1:e2:3e:95:a5:46:3a:1a:63:3c:75:8a:39:
55:04:fb:73:a9:6b:51:34:0e:c6:e6:bd:23:6d:62:
b8:fa:34:b0:7c:0f:4b:e5:e8:f2:76:61:98:86:6f:
d2:05:97:ef:cf:4c:9d:e8:b1:e0:45:94:f5:6b:f8:
48:18:f4:06:71:7e:9c:cc:4b:bf:ef:db:2d:05:81:
52:9b:86:ae:52:81:f4:08:3f:ea:31:7e:0f:57:27:
2c:f4:96:c7:a9:ef:01:0d:96:d9:51:0c:41:62:52:
8b:35:82:45:ee:19:34:1c:82:e3:8d:e1:20:6b:54:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:1C:69:F1:11:51:98:86:A9:8D:90:F7:FD:D5:1C:CE:58:63:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2AcafERUZiGqY2Q9_3VHM5YY3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:e2:73:45:6d:94:77:d5:60:27:38:9b:a8:42:e2:bf:df:10:
0a:86:25:bf:72:87:0e:d7:c7:16:64:1c:c6:cc:73:1e:47:f5:
20:7a:b0:49:e2:59:4c:3f:0c:6f:51:83:1b:b7:18:2a:ee:b0:
9b:a5:aa:3b:0e:f5:37:98:ee:34:cc:0c:9c:12:53:07:e4:5e:
87:3b:54:09:32:0c:89:51:32:fc:8a:ca:7f:f3:38:66:1b:27:
04:5a:c4:ff:a2:2a:a6:5e:7a:bd:9e:33:e7:60:fe:b1:13:0a:
ec:4c:d7:d2:31:94:98:70:6c:05:75:7a:bf:89:dd:c4:2e:81:
a5:de:3c:c9:6e:5f:41:2d:10:48:94:34:16:18:6e:21:34:4b:
06:a0:94:6f:5f:12:95:c1:eb:3e:98:6e:b0:e1:3d:65:f7:9e:
c1:88:c0:99:d2:79:86:c4:ad:10:9d:fb:3f:ae:ce:8a:e7:e2:
40:72:36:ee:dc:d6:c0:16:56:31:7c:c2:9b:26:0e:5d:ca:78:
68:97:70:bb:10:f6:c5:83:01:a0:56:37:a1:18:cf:76:58:76:
78:76:29:fd:a2:eb:fe:fd:6d:a8:2d:36:3c:d2:20:3e:d6:5a:
29:dd:24:17:7e:71:8c:de:c7:ad:12:e1:5b:97:18:bf:f3:a0:
3c:73:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:27 2025 by rpki-client