Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AB0JF4IZstYZYcAIkbkRy96IQ40.roa
File: AB0JF4IZstYZYcAIkbkRy96IQ40.roa (raw, json)
Hash identifier: Sq/qXXurC82Dx8XFPRA9GQrB5rxbuJK68IZRMZLKTQ0=
Subject key identifier: 00:1D:09:17:82:19:B2:D6:19:61:C0:08:91:B9:11:CB:DE:88:43:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FD9F65D4FAD6CFB2A86DA38097BA9241
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AB0JF4IZstYZYcAIkbkRy96IQ40.roa
Signing time: Mon 20 Mar 2023 06:05:27 +0000
ROA not before: Mon 20 Mar 2023 06:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:fd9e:ee9e/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:9f:65:d4:fa:d6:cf:b2:a8:6d:a3:80:97:ba:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 06:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=001d09178219b2d61961c00891b911cbde88438d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:e8:68:60:16:9d:5b:1f:4b:c8:5b:13:e7:
76:c3:d3:f5:8b:f4:4b:52:48:ce:ef:b6:34:11:e4:
3b:0c:f4:24:34:c2:b2:8b:f1:ee:20:83:d1:b0:1b:
d0:40:85:6d:8d:a3:8b:36:1b:15:4b:1f:31:e2:1f:
05:a7:af:5f:c3:f4:f0:94:c3:d1:63:84:38:52:37:
27:a8:81:bf:40:4e:7d:50:fb:bd:56:39:61:fc:33:
81:41:9f:db:7a:b8:21:a9:da:09:d5:b9:1b:26:94:
2a:62:c7:bf:e3:83:f6:3d:e0:6a:de:c1:3d:df:d7:
76:57:19:57:6b:96:ee:2d:26:39:4a:01:7b:b7:e5:
e7:78:f3:a1:1a:de:a1:d7:09:b4:1f:60:cf:31:69:
4c:92:6f:78:77:64:8a:b5:66:85:e3:0b:0d:48:ca:
5a:a8:99:12:52:e2:ba:b6:c3:1c:b8:26:fe:b9:61:
f5:ba:55:73:f4:3c:78:48:95:df:e4:ab:8f:41:78:
ea:e8:45:80:50:cb:5a:b2:3b:fc:2b:33:61:39:51:
f0:0f:2f:36:a8:6e:91:8d:34:36:93:89:0f:46:bb:
1f:1f:52:fd:1f:07:3a:07:e8:6e:5b:8a:a2:b6:23:
d6:d0:9e:bf:d9:a4:77:41:08:4c:d3:0c:48:31:d1:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:09:17:82:19:B2:D6:19:61:C0:08:91:B9:11:CB:DE:88:43:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AB0JF4IZstYZYcAIkbkRy96IQ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:70:76:cc:d1:c1:d3:59:f3:7e:5d:ee:58:dd:74:c0:74:d7:
76:71:13:43:8d:b7:2d:cb:b8:34:94:13:3d:15:03:98:6d:74:
51:98:2d:49:9e:a7:51:70:eb:e4:d7:5b:c9:98:83:52:f3:42:
4f:de:40:14:98:b4:99:d4:c5:16:93:12:4b:f3:c4:b9:73:4c:
b2:2e:5a:50:f3:44:c7:e1:7e:8b:c1:ee:d9:56:64:a7:17:44:
7f:65:ab:89:a7:61:ad:24:bb:4f:6a:2d:3c:be:40:b8:eb:eb:
a1:bf:51:1f:88:85:43:8f:bf:49:8d:48:41:5d:97:9c:d9:d1:
da:87:66:bc:05:03:41:78:4f:f8:f7:26:79:04:88:3c:e2:6d:
77:de:f9:f5:09:bc:00:2d:b9:a1:91:5f:66:ad:3b:3f:9e:f6:
4c:7c:92:30:80:0d:76:fc:2e:f7:dc:4b:91:7f:67:79:9c:c8:
ce:45:5f:f8:99:94:b6:48:b8:7c:9e:57:9d:aa:bb:e8:cd:66:
57:83:20:5a:35:ab:45:1d:d9:f1:fb:8e:ff:1b:14:68:a0:d4:
b3:b0:64:9f:18:d3:d5:7d:5a:97:ec:96:c8:a0:66:2a:d9:57:
62:e3:86:e5:01:db:b5:ca:c1:9b:29:a9:5c:95:a4:32:97:c8:
96:e3:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:24:38 2025 by rpki-client