Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AEVXAN-IP_ttnqY_gvpf9_UlfHY.roa
File: AEVXAN-IP_ttnqY_gvpf9_UlfHY.roa (raw, json)
Hash identifier: oFTm/k3Xitgpj4VvCMBQcrc+zqima6+HpDivg2BCBMo=
Subject key identifier: 00:45:57:00:DF:88:3F:FB:6D:9E:A6:3F:82:FA:5F:F7:F5:25:7C:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018822C311B6CC1E67239A1CDE85A10C2C95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AEVXAN-IP_ttnqY_gvpf9_UlfHY.roa
Signing time: Tue 16 May 2023 04:13:09 +0000
ROA not before: Tue 16 May 2023 04:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:22:c3:11:b6:cc:1e:67:23:9a:1c:de:85:a1:0c:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 04:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00455700df883ffb6d9ea63f82fa5ff7f5257c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:c9:eb:75:f0:80:ad:85:d7:4a:98:b9:09:
ce:55:75:de:75:98:79:60:3b:f6:f3:08:84:fa:9c:
6e:6a:10:99:b1:f8:10:f5:f3:eb:f8:64:56:17:ed:
7d:6f:b9:79:eb:80:a0:fb:56:5f:43:e5:f4:32:d5:
52:f5:de:df:93:36:05:f7:63:09:72:a6:54:4d:f6:
f2:51:70:7b:1e:59:d0:fa:03:1f:2c:9a:28:b1:8a:
7a:65:33:b5:62:eb:13:ac:19:dd:bc:7c:a5:c0:81:
16:98:87:ff:de:9e:76:bd:83:b9:ec:24:1b:bc:f3:
b7:e1:42:97:3b:5e:e4:b0:c0:bd:18:ec:72:18:c9:
fc:00:53:92:31:76:82:94:90:06:d5:53:d1:cb:46:
08:0e:27:73:15:21:61:bc:f6:7e:af:26:31:86:3e:
cd:dd:80:ea:3c:aa:87:e4:70:b5:f1:7b:74:dc:aa:
d2:fb:46:46:bc:e2:6d:27:7c:58:73:5b:4f:42:89:
5b:bc:d8:30:f1:07:54:2a:ce:a5:43:4d:a6:cd:b8:
91:8b:e8:9f:c2:3b:12:22:0d:20:e7:e4:3c:7b:bc:
83:01:7f:73:d2:cd:c3:8a:08:0d:41:dd:95:8a:ef:
72:de:bd:ea:25:c7:1f:d3:2e:05:89:b4:93:5e:f2:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:57:00:DF:88:3F:FB:6D:9E:A6:3F:82:FA:5F:F7:F5:25:7C:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AEVXAN-IP_ttnqY_gvpf9_UlfHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:f1:3e:e0:ae:f5:e5:85:f8:3d:6a:d0:d0:63:7c:08:b6:5e:
4c:28:01:fb:01:f4:ed:88:85:26:77:23:0b:91:7f:f6:4b:9a:
e2:c5:27:ab:79:05:45:76:a3:6a:e3:3e:2b:e5:12:1a:60:f9:
8e:12:94:c3:8a:54:15:f7:96:8e:39:d0:65:61:44:dc:cc:e6:
7d:38:6c:82:f4:7b:9e:21:33:b9:fd:0e:84:cd:04:de:99:ee:
d1:f6:83:88:78:f0:8c:86:f3:c3:aa:8f:d7:06:dc:aa:41:04:
8b:38:45:be:be:f3:99:fa:92:db:25:39:aa:24:da:12:9e:8b:
a2:aa:13:04:c6:c9:74:0f:26:a1:c1:9c:03:1b:71:0e:3d:34:
d1:37:8e:ca:8c:ce:2e:1d:67:7c:4e:26:c3:61:e2:d3:b9:e7:
3c:56:ec:5c:78:f4:08:e8:ba:75:7a:43:ff:3e:ba:19:66:9a:
ff:37:fc:e7:b4:da:80:eb:2d:af:7a:90:12:9a:78:9c:5e:6a:
39:f6:15:32:b3:0a:59:4e:93:d7:02:4f:23:79:da:51:bf:b3:
d2:64:69:23:e4:9e:c3:4e:7a:c2:e2:ce:71:d2:c6:41:26:bb:
a0:97:42:b1:63:0b:87:3e:10:a1:d2:10:e3:d6:34:ce:fb:99:
fb:70:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:46 2025 by rpki-client