Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ACNnx-0iWcF9vGG0Zzu8VxmI-M0.roa
File: ACNnx-0iWcF9vGG0Zzu8VxmI-M0.roa (raw, json)
Hash identifier: Tg3CH18Agj+r1GQkree2+N8ezXbCL2Q4OPQnXi9miKo=
Subject key identifier: 00:23:67:C7:ED:22:59:C1:7D:BC:61:B4:67:3B:BC:57:19:88:F8:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E1C45B92824519408168A3ECE34B6B90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ACNnx-0iWcF9vGG0Zzu8VxmI-M0.roa
Signing time: Tue 14 Mar 2023 20:16:27 +0000
ROA not before: Tue 14 Mar 2023 20:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e1:c4:5b:92:82:45:19:40:81:68:a3:ec:e3:4b:6b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 20:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=002367c7ed2259c17dbc61b4673bbc571988f8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:8d:0c:a4:ed:e1:2c:a4:28:42:15:e3:bf:
76:81:0c:0e:3c:38:b3:a9:83:5b:61:37:0d:14:c7:
e9:31:a0:4b:be:af:8d:e8:e3:11:54:9f:20:2d:bd:
e1:07:a8:09:82:23:21:6a:ab:28:c4:c0:31:94:96:
ce:1e:f7:41:b3:43:f5:eb:56:64:d3:6d:c3:dd:ed:
d7:db:92:15:aa:ee:fa:84:ba:4b:23:9a:63:1a:c9:
28:7c:99:a3:5c:30:0d:a5:fe:83:b0:4a:94:6e:b5:
97:43:81:b3:8c:dd:34:a8:7f:58:b3:65:07:62:de:
57:c6:6c:3c:eb:0f:2b:3f:6e:fc:c1:fa:11:9a:e8:
70:3b:f9:b0:93:c4:61:60:11:fc:94:ef:e1:4c:c6:
3a:42:d5:74:78:91:1e:ee:21:aa:3b:b5:e0:a3:97:
2e:b1:59:20:fa:41:63:48:56:f0:b9:8a:cd:61:2b:
f5:0a:fd:01:9e:c9:2a:4c:50:72:73:a9:c9:a5:76:
7f:87:d8:5d:fb:4c:02:3f:f3:a7:da:06:ff:cd:61:
e2:0d:57:8c:76:f2:8d:ce:83:9d:d1:0b:3e:93:81:
29:a1:89:46:ce:62:b1:3a:78:b3:d7:85:2a:64:f8:
bf:7e:e0:ab:95:94:dd:05:e1:91:07:53:2a:d9:91:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:67:C7:ED:22:59:C1:7D:BC:61:B4:67:3B:BC:57:19:88:F8:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ACNnx-0iWcF9vGG0Zzu8VxmI-M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c4:8e:05:61:38:4c:30:c1:a3:a5:07:96:f0:be:a9:7d:84:
a3:74:29:43:b3:03:4b:4b:a1:78:d6:0c:c0:6c:c8:fc:aa:ea:
b5:ea:86:83:39:ff:b9:80:9e:99:7b:f3:7b:d8:f8:5b:98:b7:
ac:18:0d:4f:3f:dc:21:a8:ce:a0:f2:64:97:c6:98:a3:bb:78:
a0:7e:12:99:5c:97:75:89:3d:89:b1:3a:49:f4:fd:71:b6:13:
43:91:b1:84:b8:be:b0:d5:9f:6a:fb:7d:54:59:7f:b3:85:c2:
8d:1a:68:74:d3:78:e6:c3:04:b1:2b:23:96:6b:2d:35:1a:1c:
99:c5:eb:1e:8d:2c:41:20:96:37:64:8d:d9:aa:3b:c8:57:38:
75:d1:c0:ce:98:5a:73:2e:b3:ec:93:31:16:f5:80:8c:51:58:
75:17:27:b8:54:08:fa:c8:f3:06:c0:59:c7:cd:a2:b2:7b:48:
e9:64:2d:67:4a:b9:34:f7:1a:c6:2e:20:36:db:5b:f8:8e:27:
af:ab:ee:d4:2f:47:30:6c:1f:ce:df:cd:22:5c:cd:b1:95:0f:
a1:a8:64:ec:4e:48:32:4b:38:35:a2:57:35:8b:c1:aa:07:2d:
70:fb:33:9a:41:25:58:6e:d2:f9:46:91:3a:4d:18:1c:73:f9:
4d:82:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:23 2025 by rpki-client