Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AAGI_YxTtddn7joiJgAE1v1xOwM.roa
File: AAGI_YxTtddn7joiJgAE1v1xOwM.roa (raw, json)
Hash identifier: F7aLp6MI9GqSFkLFTmGeYJJBi7V+opzt44gJqKWr1DU=
Subject key identifier: 00:01:88:FD:8C:53:B5:D7:67:EE:3A:22:26:00:04:D6:FD:71:3B:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7914D822
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AAGI_YxTtddn7joiJgAE1v1xOwM.roa
Signing time: Thu 07 Apr 2022 00:09:29 +0000
ROA not before: Thu 07 Apr 2022 00:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031409186 (0x7914d822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 00:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=000188fd8c53b5d767ee3a22260004d6fd713b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:16:52:6a:00:1e:2d:ba:5f:52:05:eb:b0:
a0:0d:80:f0:91:30:22:ab:8b:ab:fb:07:26:68:b6:
71:46:2d:66:20:5c:cc:6d:b6:3d:d9:94:f1:a1:a1:
5c:76:0c:22:79:fe:02:bd:c1:d3:e2:32:8f:0c:ed:
a7:07:b1:bd:eb:87:93:3b:8f:59:2d:60:38:0b:dd:
ba:dd:a2:f3:bd:40:65:32:e8:22:ca:61:26:8b:4f:
8b:26:25:39:56:ae:fd:a4:3c:cc:a2:42:b7:1e:5f:
27:2a:df:9e:c7:b9:3c:e0:18:a9:6c:67:5d:cf:76:
f2:31:7d:8a:c2:30:32:17:49:9e:ab:1f:77:94:c6:
ec:45:b6:3b:f8:79:9f:0b:85:90:02:1b:2b:6a:fc:
cd:76:0e:62:08:0e:9a:cd:78:a3:6f:ca:3f:90:58:
5a:d6:22:30:55:5a:1e:82:33:19:49:34:b4:97:79:
9c:30:5a:d8:fe:a9:de:2f:36:7e:a9:a4:85:b2:ca:
b8:0b:9c:c0:e2:25:92:50:20:12:c7:a9:cf:42:17:
db:c1:d4:e8:ea:11:aa:f7:8c:5e:66:ea:a3:94:3e:
de:4d:1f:44:de:43:72:b3:fb:48:86:62:8d:91:32:
35:74:95:c2:7c:34:18:38:e6:78:3c:69:e7:26:b3:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:88:FD:8C:53:B5:D7:67:EE:3A:22:26:00:04:D6:FD:71:3B:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AAGI_YxTtddn7joiJgAE1v1xOwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:22:73:25:a6:9a:ba:b6:51:00:04:45:2c:d1:43:3f:a4:aa:
ba:10:28:1c:84:0e:2a:67:2a:24:bc:4f:17:c9:80:14:4e:81:
5d:68:8a:8d:37:57:78:e9:a1:86:dd:50:88:cf:47:86:c3:f9:
a9:a9:76:e1:a6:27:a1:9c:6c:5e:88:44:3c:ee:d8:22:a8:6a:
78:22:5c:f0:3b:e1:91:86:ce:d7:4f:b1:6e:68:11:85:85:64:
a5:a3:ea:cf:f4:39:1e:d9:0f:36:59:2a:5c:f6:41:e6:2e:b4:
b7:c3:7c:9f:85:62:01:7c:e6:1f:1d:91:e8:e0:cf:f4:34:a2:
f1:a8:9b:15:cb:c3:ff:53:5f:11:71:92:c1:03:20:04:25:5b:
15:e0:19:b8:cd:1e:6e:75:87:84:ea:57:99:b4:1b:45:aa:c5:
c4:5a:43:65:e0:0c:ac:25:08:a4:ce:c2:6c:0f:e2:80:db:f2:
c4:fa:b4:16:ca:7a:dc:97:16:ef:4c:a3:34:c5:c9:f0:11:5f:
48:eb:c6:0b:6c:0d:a0:78:52:c7:54:50:13:9c:47:f9:32:b0:
2e:d7:25:21:23:ed:c6:2a:bc:f4:b5:c8:94:38:9c:43:bf:8b:
34:99:9f:9b:1a:71:31:ea:52:56:3c:2a:4d:a3:d8:e6:e0:91:
d6:e0:97:a8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEeRTYIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQw
NzAwMDkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDAwMTg4ZmQ4YzUz
YjVkNzY3ZWUzYTIyMjYwMDA0ZDZmZDcxM2IwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2nFlJqAB4tul9SBeuwoA2A8JEwIquLq/sHJmi2cUYtZiBc
zG22PdmU8aGhXHYMInn+Ar3B0+IyjwztpwexveuHkzuPWS1gOAvdut2i871AZTLo
IsphJotPiyYlOVau/aQ8zKJCtx5fJyrfnse5POAYqWxnXc928jF9isIwMhdJnqsf
d5TG7EW2O/h5nwuFkAIbK2r8zXYOYggOms14o2/KP5BYWtYiMFVaHoIzGUk0tJd5
nDBa2P6p3i82fqmkhbLKuAucwOIlklAgEsepz0IX28HU6OoRqveMXmbqo5Q+3k0f
RN5DcrP7SIZijZEyNXSVwnw0GDjmeDxp5yazxXMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQAAYj9jFO112fuOiImAATW/XE7AzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0FBR0lfWXhUdGRkbjdqb2lKZ0FFMXYxeE93TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCCInMlppq6tlEABEUs0UM/pKq6ECgchA4qZyok
vE8XyYAUToFdaIqNN1d46aGG3VCIz0eGw/mpqXbhpiehnGxeiEQ87tgiqGp4Ilzw
O+GRhs7XT7FuaBGFhWSlo+rP9Dke2Q82WSpc9kHmLrS3w3yfhWIBfOYfHZHo4M/0
NKLxqJsVy8P/U18RcZLBAyAEJVsV4Bm4zR5udYeE6leZtBtFqsXEWkNl4AysJQik
zsJsD+KA2/LE+rQWynrclxbvTKM0xcnwEV9I68YLbA2geFLHVFATnEf5MrAu1yUh
I+3GKrz0tciUOJxDv4s0mZ+bGnEx6lJWPCpNo9jm4JHW4Jeo
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:54 2025 by rpki-client