Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AHR3rAmi37C-KYL2jEVpCDF_IDY.roa
File: AHR3rAmi37C-KYL2jEVpCDF_IDY.roa (raw, json)
Hash identifier: 8RfP4wZj4waHubPsb47T+SC63irpm9oh5NEXHuVbwoM=
Subject key identifier: 00:74:77:AC:09:A2:DF:B0:BE:29:82:F6:8C:45:69:08:31:7F:20:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884E4EC3C731B998597505217F7B783C07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AHR3rAmi37C-KYL2jEVpCDF_IDY.roa
Signing time: Wed 24 May 2023 15:09:24 +0000
ROA not before: Wed 24 May 2023 15:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:4e:c3:c7:31:b9:98:59:75:05:21:7f:7b:78:3c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 15:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=007477ac09a2dfb0be2982f68c456908317f2036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:ab:3a:8f:a6:28:b6:81:c3:86:6a:15:3e:
0a:e8:c6:51:50:ee:57:18:08:ff:4c:ed:1c:96:42:
e1:1e:b0:49:3a:8b:f8:24:59:6a:75:45:70:dd:83:
66:d2:2c:6e:77:d1:d8:8c:8c:10:ea:84:7b:18:1c:
42:7f:6e:87:d3:43:bc:03:2a:99:87:17:b8:dd:82:
14:d6:ab:a0:02:cc:9f:10:b5:4a:ad:18:5d:71:f9:
31:c7:c7:9e:2a:0a:8a:0c:f8:96:4d:a2:21:20:ef:
59:31:3e:21:ba:fe:e4:21:a7:9c:76:05:1b:e9:a2:
a5:ab:f0:9d:25:c0:8e:41:de:82:03:f8:3d:9e:71:
76:35:b5:5b:6f:2f:86:fa:39:05:7c:65:23:eb:c5:
13:81:9c:5e:0a:39:e9:bf:bc:d7:e7:d0:ea:d3:16:
cc:8c:52:13:e3:18:ba:1a:97:98:4a:f5:9c:e2:87:
43:dd:5d:b6:df:d6:39:f1:81:cb:f2:b0:69:ca:b5:
d7:d3:25:52:08:84:50:cb:af:4c:61:2c:26:02:9e:
eb:e8:04:d9:4f:c9:cd:ce:30:48:c8:58:c1:22:44:
72:e0:a5:c9:8e:34:a9:47:c2:a3:7c:ac:6a:10:db:
51:c9:0a:41:71:fa:80:2e:28:6b:66:a4:bc:ee:b5:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:77:AC:09:A2:DF:B0:BE:29:82:F6:8C:45:69:08:31:7F:20:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AHR3rAmi37C-KYL2jEVpCDF_IDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:65:7e:56:30:0f:77:1b:99:ed:7f:99:6d:c4:d8:56:dc:20:
a0:f6:f0:90:44:6f:90:99:e0:c4:e7:d3:0e:ba:f9:3c:33:cc:
e6:4a:fd:ad:99:d6:20:b9:cf:9a:9b:26:07:4c:3f:d5:dc:00:
42:a8:bf:ba:6b:72:cc:e6:e0:51:8f:f1:ea:d5:31:10:47:48:
c3:d8:a2:41:b7:23:8c:5a:35:69:54:70:3e:c2:9c:ca:e0:72:
c8:1b:e1:98:5e:b1:54:9b:b5:8e:a4:2b:07:c5:63:07:a5:94:
eb:b3:a6:89:5a:79:01:53:2d:4a:7a:83:5b:29:e6:44:eb:8f:
ec:38:62:fc:e9:a6:99:7a:92:f5:c5:a1:07:b9:ed:84:e4:24:
4b:e0:ab:0d:99:8f:a8:ea:e0:b8:17:35:b4:80:fa:59:09:6b:
48:d2:9d:51:93:e6:c0:14:a5:ec:5a:02:c7:0c:43:cf:c1:61:
d8:76:25:bc:10:5a:2b:bb:f5:90:c9:3f:e7:17:78:04:87:6b:
89:37:30:5b:c1:af:ec:11:db:91:0d:81:cd:07:3c:7f:94:56:
fa:95:4e:cd:09:ac:e9:7b:1c:ba:e4:ad:28:92:8b:98:7f:66:
09:80:e4:cb:91:ef:52:fb:7a:ab:a3:1c:0e:57:39:1f:87:c2:
e9:9c:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:19 2025 by rpki-client