Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AHIwDS5X_G4LMmFpc1TRooItNKk.roa
File: AHIwDS5X_G4LMmFpc1TRooItNKk.roa (raw, json)
Hash identifier: 11xLn4f51y0oTjWCXRJsoJHSlYRR7fuDykkybLytOdo=
Subject key identifier: 00:72:30:0D:2E:57:FC:6E:0B:32:61:69:73:54:D1:A2:82:2D:34:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A9EAB979149E4F9ABF94482DC63AAA98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AHIwDS5X_G4LMmFpc1TRooItNKk.roa
Signing time: Sun 11 Jun 2023 10:05:12 +0000
ROA not before: Sun 11 Jun 2023 10:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:188:a9e9:d33b/128 maxlen: 128
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:ea:b9:79:14:9e:4f:9a:bf:94:48:2d:c6:3a:aa:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 10:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0072300d2e57fc6e0b3261697354d1a2822d34a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:04:f7:7b:4c:be:53:71:66:72:48:b0:70:
46:0d:91:bb:9e:f6:eb:bc:f6:72:59:bc:56:f6:2c:
1d:86:c8:a9:00:59:ff:c2:29:e6:ca:48:23:1f:73:
4b:99:1e:bb:15:bc:b3:0d:e7:4e:8d:14:0a:21:fd:
2d:7b:87:42:28:5f:f9:e4:df:5c:1d:f5:f8:ce:23:
f1:2e:90:3e:8a:bc:5f:60:e7:b8:56:c4:dc:16:11:
4e:70:15:d8:46:56:34:d3:6e:dd:94:49:8a:73:24:
90:9a:37:d7:f5:79:4c:0f:03:13:14:b9:a7:13:d8:
c7:5a:76:92:56:8a:70:28:52:08:8a:a2:26:a3:a9:
32:75:fa:23:71:b9:f7:db:f8:46:97:02:48:9e:58:
b6:ed:1f:a6:55:25:96:aa:f1:1c:cd:73:1c:54:26:
01:d9:f2:13:da:3d:17:bd:00:9d:82:11:31:8e:0d:
3a:ab:be:25:ee:1b:1d:c7:3d:b6:f2:54:ad:9e:7d:
86:18:88:7c:cd:90:02:0f:ab:e7:2b:9f:f0:41:3b:
fc:cf:2c:f6:ce:89:96:01:33:d1:8d:7e:64:4a:44:
22:a1:ba:93:ae:cd:00:af:ec:35:f2:a3:66:82:2e:
b1:01:c0:bd:c6:7b:07:7c:cd:ab:39:90:d0:17:64:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:30:0D:2E:57:FC:6E:0B:32:61:69:73:54:D1:A2:82:2D:34:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AHIwDS5X_G4LMmFpc1TRooItNKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:96:a2:6f:77:a6:ab:08:80:14:b9:e8:56:81:24:cb:62:e6:
a4:2b:66:0d:90:1f:f1:4e:6e:78:0e:08:29:b0:c1:d9:e8:3e:
ab:82:c2:b0:34:fc:2d:77:50:92:c4:a8:e2:cb:29:78:86:29:
11:70:f2:8f:7d:55:4c:b1:16:c8:23:cd:35:e8:44:fe:29:51:
83:52:41:ac:b1:89:54:ae:b9:e3:19:31:3d:d8:a2:43:c8:5d:
c7:66:64:c4:cb:6c:1e:ad:b5:f6:ea:ef:9b:1d:d3:c4:99:f3:
b0:93:81:f2:bc:c2:95:db:73:02:a4:39:42:63:cf:f1:73:0e:
82:e8:da:58:e1:44:e3:30:1e:7f:e9:7d:25:4d:ee:3d:f5:4e:
65:8b:fe:84:37:ff:7e:0f:aa:44:f7:47:a5:d9:c9:18:17:9c:
f0:36:dd:a5:85:da:20:62:35:58:35:fc:0e:64:47:35:fe:5b:
5b:22:4c:f8:6c:9f:2f:72:e7:bb:d3:ad:6a:5e:a8:f8:8a:a5:
5c:e2:22:c6:26:b0:55:2b:78:9b:13:56:5c:bf:0e:77:ed:49:
46:e7:4a:70:83:dc:21:0e:d1:8c:18:c4:3f:29:5b:ad:46:2b:
2b:a3:1e:39:e8:d9:e7:d3:39:9e:d2:f6:ca:a3:be:59:03:49:
da:a9:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:24 2025 by rpki-client