Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ABTYPvX0LtDtoTmHOc5oYJIAzvo.roa
File: ABTYPvX0LtDtoTmHOc5oYJIAzvo.roa (raw, json)
Hash identifier: ad8gwXtOK9nnYlmBKCBXDbA7RmrLyTMu/nnRfmiXVco=
Subject key identifier: 00:14:D8:3E:F5:F4:2E:D0:ED:A1:39:87:39:CE:68:60:92:00:CE:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F953DA864F4C44932A02E29C88DDFC44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ABTYPvX0LtDtoTmHOc5oYJIAzvo.roa
Signing time: Sun 19 Mar 2023 10:04:27 +0000
ROA not before: Sun 19 Mar 2023 10:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:f953:c33b/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f9:53:da:86:4f:4c:44:93:2a:02:e2:9c:88:dd:fc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 10:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0014d83ef5f42ed0eda1398739ce68609200cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:3a:ef:0b:5e:3b:fe:97:18:66:6e:e2:fe:
e3:03:bf:da:8f:fe:16:d1:2c:7f:53:49:65:49:64:
82:68:bc:d2:76:9c:55:cd:61:92:96:2f:23:fa:cd:
1b:90:94:b7:fc:23:dc:c2:22:6e:b9:cc:c2:ff:7d:
c5:c1:24:3f:f0:02:f7:47:e8:99:b6:73:e1:cb:76:
56:73:11:a6:96:1a:b0:ba:d8:94:5d:f6:95:27:d9:
fb:16:95:d4:96:98:02:dc:47:a3:c0:62:a9:05:15:
36:5d:04:21:8b:84:b3:a4:ba:3a:24:19:67:23:ba:
c0:d5:73:a9:ab:7a:aa:a1:6a:c4:70:d7:7e:f8:50:
ef:1e:a5:21:80:6e:e6:25:b7:0b:b3:5a:5d:81:5d:
c5:6f:f4:f5:d4:01:44:80:1b:db:c2:2a:4b:40:a7:
33:88:61:4d:97:06:f7:9a:ac:05:a4:f6:25:b0:8c:
d7:ee:8f:68:5a:eb:3e:52:d9:d8:2a:92:27:c5:17:
a3:ae:fe:c5:fe:28:81:c0:0c:9d:9c:0a:76:09:7b:
3f:70:c5:ac:8c:e7:8c:0b:6c:b9:01:54:17:e6:58:
e4:27:bc:ad:05:20:56:ad:4b:13:cf:38:b4:fb:10:
e1:20:26:93:94:22:0e:da:b4:78:4e:40:d9:ed:fd:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:D8:3E:F5:F4:2E:D0:ED:A1:39:87:39:CE:68:60:92:00:CE:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ABTYPvX0LtDtoTmHOc5oYJIAzvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:12:91:54:1d:e9:f8:24:c7:58:9d:3e:38:8a:7b:02:2f:37:
94:d0:3d:d7:1b:bc:a3:a5:5b:6a:85:b7:e1:6e:7d:88:22:37:
60:a4:26:fa:74:d3:fe:bd:be:98:bd:09:01:bb:3e:1a:7a:6f:
80:4a:fd:13:73:7f:63:a7:8b:31:e4:9f:a7:2a:ac:fd:49:ed:
76:57:d0:74:24:31:8e:3f:e2:08:12:0f:57:8c:df:52:34:aa:
1d:50:4d:3f:54:3b:4e:bf:ed:3b:88:64:a6:b9:08:46:31:fc:
8a:58:16:ac:8c:cc:25:77:56:82:4e:1d:0a:20:c1:3d:b4:c9:
9f:65:7d:27:f3:0f:40:be:b6:41:96:2a:8e:b9:e2:2f:d1:07:
1f:cc:1f:af:71:63:12:d6:f6:16:1a:71:56:17:1a:2a:29:df:
96:ae:8b:c8:d6:ab:54:82:44:1b:1f:a9:10:0d:24:d6:22:aa:
42:94:d2:1f:2a:fb:1b:1e:68:b3:a7:90:10:c9:b6:b6:2a:1a:
7e:5c:e1:19:73:41:94:4e:2d:63:54:8d:78:91:79:ab:8c:16:
46:47:42:9a:0c:30:ba:ac:94:25:ad:14:c6:47:1d:a9:c2:7e:
d6:06:15:a7:31:6e:d7:a1:aa:59:29:c2:e9:6d:09:7b:2d:9b:
54:ec:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:33 2025 by rpki-client