Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AGVkJVMNBuGpk-oFxnd4CjxIflI.roa
File: AGVkJVMNBuGpk-oFxnd4CjxIflI.roa (raw, json)
Hash identifier: uPqSqziLiaVaBHmHcw2gfIaCWZjYEO6BimvdE5GbI2w=
Subject key identifier: 00:65:64:25:53:0D:06:E1:A9:93:EA:05:C6:77:78:0A:3C:48:7E:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018250F7A58D11000BC545AD2DC36EDE59E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AGVkJVMNBuGpk-oFxnd4CjxIflI.roa
Signing time: Sat 30 Jul 2022 21:16:23 +0000
ROA not before: Sat 30 Jul 2022 21:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:f7:a5:8d:11:00:0b:c5:45:ad:2d:c3:6e:de:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 21:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00656425530d06e1a993ea05c677780a3c487e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:03:f8:b7:56:4d:69:76:fd:71:82:e6:c1:
44:5b:be:33:bf:c5:43:be:3a:40:ba:a1:68:92:bc:
f5:cf:03:81:60:b9:3b:df:78:40:0a:b6:6a:3b:13:
59:15:45:bd:cb:c8:3a:12:b5:05:07:8b:f1:3d:fc:
e1:f0:2b:27:0d:a8:9a:17:28:f2:e8:51:58:2d:c0:
cf:de:c7:cc:56:2c:fb:7c:5b:4d:31:81:d5:52:c2:
82:ab:01:d5:ce:8b:40:42:40:ca:2f:b9:44:67:b5:
44:43:f8:7d:23:b9:fe:2e:d0:58:91:e5:67:7f:e0:
3f:14:c4:21:05:18:6b:d1:ae:c4:69:ba:15:32:ba:
94:2c:46:56:8d:f4:00:3c:73:24:3b:0e:af:83:22:
1c:ba:ed:f6:3d:df:97:98:98:22:70:90:d0:dc:1c:
e1:e0:ff:7c:f1:d7:3c:93:86:41:ba:d0:e0:fe:fa:
ab:0b:87:7e:64:e5:04:64:c4:9c:f0:40:de:89:be:
74:36:95:a6:a9:dc:10:bb:bb:73:5b:b2:61:10:79:
5b:9a:65:45:c3:0b:a6:2b:7d:e0:08:03:a8:b1:d8:
43:dc:27:83:c1:ca:ef:7c:e7:1a:eb:e4:3e:a1:f9:
1a:5c:51:f0:a4:e1:52:a5:a4:7c:40:64:d4:8c:7e:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:64:25:53:0D:06:E1:A9:93:EA:05:C6:77:78:0A:3C:48:7E:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AGVkJVMNBuGpk-oFxnd4CjxIflI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:38:dd:33:91:a9:bb:ee:af:00:6d:88:db:4a:c1:9f:5b:1c:
39:be:39:78:76:7e:1b:cc:8a:b2:1b:e3:2c:30:71:f0:7b:15:
cf:30:95:94:af:70:f2:c2:c9:18:5d:fd:f1:e9:99:fa:af:6c:
62:5f:7c:6a:9e:bd:9d:f4:03:e6:c3:9e:92:ae:d5:00:b9:f1:
ae:b9:54:a1:dd:48:be:d5:d6:b3:29:8f:02:c6:0c:6d:48:54:
e0:e8:50:7c:ef:8a:49:e7:1a:0c:99:fa:9d:93:0e:a2:a1:ee:
fa:2d:65:a8:49:95:7a:12:79:6f:4d:60:f3:8e:44:85:eb:f4:
a4:37:1a:7f:ce:b7:3a:cb:25:74:c5:f6:6c:9e:ed:fc:28:ae:
f6:54:65:ea:65:0f:4f:67:1d:5b:0f:bc:b2:cb:e1:8d:2a:91:
d0:d6:00:a1:07:3e:bc:7a:d9:4d:63:1d:2d:7b:0b:10:b7:ed:
6e:5a:01:9c:2e:e4:59:8e:32:f7:f2:4f:f0:fb:78:bd:e4:79:
66:a6:5a:5f:75:fe:39:e2:7f:4d:ce:72:8d:13:77:18:f3:67:
69:44:92:66:07:04:d0:84:86:5c:c3:5c:ab:98:5a:87:c1:fe:
78:c3:02:ae:fd:cf:bf:b0:19:ce:ef:60:d9:66:23:24:7a:42:
b0:d3:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:17:38 2025 by rpki-client