Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AAJ2GNzVMejLj7zu1VLLYfXcyhA.roa
File: AAJ2GNzVMejLj7zu1VLLYfXcyhA.roa (raw, json)
Hash identifier: nJCCwr+5qEIDLqo3ixJ9k9dDvvox3V+3bmGFjPVWIUA=
Subject key identifier: 00:02:76:18:DC:D5:31:E8:CB:8F:BC:EE:D5:52:CB:61:F5:DC:CA:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856BF429CBA2F19F0FAA3619C450E743B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AAJ2GNzVMejLj7zu1VLLYfXcyhA.roa
Signing time: Sun 01 Jan 2023 06:10:41 +0000
ROA not before: Sun 01 Jan 2023 06:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f4:29:cb:a2:f1:9f:0f:aa:36:19:c4:50:e7:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 06:10:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00027618dcd531e8cb8fbceed552cb61f5dcca10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:b8:ae:7e:a5:e4:8b:08:8b:35:49:23:47:
5d:8d:b6:82:ea:2b:c0:a3:05:5e:c6:84:ba:96:67:
35:dd:47:85:56:f7:2d:ca:18:9c:8f:96:79:7d:97:
bf:a4:71:dc:e2:9c:f1:38:82:26:1a:bf:4a:3a:61:
5a:f5:00:42:bd:00:89:f8:ce:d4:21:d6:a6:67:6c:
22:04:1d:1d:11:e8:61:2b:ce:52:2d:9a:d9:cb:7f:
54:9a:e9:20:a1:a7:8d:cb:d9:c6:f2:2f:35:48:52:
b5:29:e7:e7:97:db:d4:97:77:d1:8f:b7:bc:8c:32:
35:e0:2f:26:ed:2f:42:ee:1b:a2:53:ae:19:84:6d:
74:75:b7:03:c8:48:8d:74:45:3c:b9:bd:23:9c:36:
92:0f:bb:53:5d:d1:eb:03:04:fc:6f:f2:d9:62:f3:
c1:1a:a3:0e:56:30:32:6b:28:63:c2:57:53:e7:b1:
03:c2:d4:dc:e8:b1:33:0a:42:a5:14:5e:86:6e:bb:
0b:dd:2f:19:de:d1:5d:40:e0:4d:f4:96:f5:28:73:
47:d6:0d:2a:61:60:15:1d:0a:de:0b:2d:6d:d0:84:
56:13:2d:65:94:72:4b:b5:35:94:1b:67:ab:56:32:
35:7d:35:ce:20:a8:45:bb:eb:48:71:4f:73:cc:7b:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:02:76:18:DC:D5:31:E8:CB:8F:BC:EE:D5:52:CB:61:F5:DC:CA:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AAJ2GNzVMejLj7zu1VLLYfXcyhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:82:90:2a:4d:20:b7:a7:e9:07:83:43:3f:71:53:ee:b0:99:
d1:14:bd:39:6c:70:d6:91:79:90:bb:65:a8:d2:2e:96:6e:e9:
7c:7c:a1:82:9e:50:57:7e:43:1e:16:4d:82:4f:34:9b:94:7c:
20:79:a0:11:a9:dc:f9:c7:69:09:1a:08:a7:d7:8a:c7:9d:2a:
3c:b2:27:4b:f9:45:5a:55:cf:dd:84:c3:60:3b:40:2e:47:61:
33:b8:38:1d:a3:eb:fe:93:66:5d:ce:f3:d2:88:61:dd:d6:4d:
29:bd:4b:72:1b:36:ef:91:cc:6d:49:15:37:8f:7e:5d:01:4d:
52:ad:cf:4d:65:07:13:7b:22:be:f3:74:e6:ce:dd:c8:2a:4a:
bb:43:b5:c3:a0:ae:0f:ab:b0:ba:24:92:5a:01:cf:4b:ab:1b:
4c:b6:d3:d7:74:e5:7f:5c:7d:c2:00:4d:80:71:e0:c7:91:31:
73:da:79:2b:62:29:44:40:01:51:45:a8:21:cf:84:ca:b9:1d:
72:ee:fe:7f:ad:4a:3e:1b:b0:f5:f9:75:16:2b:ac:65:cf:37:
be:71:3d:d2:91:94:f8:e3:1f:7d:d8:e2:8e:99:37:3c:27:64:
c0:f1:3e:a3:3d:c6:0f:ad:bf:f4:09:dd:15:91:73:35:f4:a9:
70:15:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:09 2025 by rpki-client