Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AJ0cY3bMa6atVYts9SOxbcEKeys.roa
File: AJ0cY3bMa6atVYts9SOxbcEKeys.roa (raw, json)
Hash identifier: Adv0ANIrej+r7dEdiwpApKxWBJ3TAcJ4y45uSR5+n54=
Subject key identifier: 00:9D:1C:63:76:CC:6B:A6:AD:55:8B:6C:F5:23:B1:6D:C1:0A:7B:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860A17B97928DA1AC5EF42FF3BB30DCA71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AJ0cY3bMa6atVYts9SOxbcEKeys.roa
Signing time: Tue 31 Jan 2023 23:09:32 +0000
ROA not before: Tue 31 Jan 2023 23:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:17:b9:79:28:da:1a:c5:ef:42:ff:3b:b3:0d:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 23:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=009d1c6376cc6ba6ad558b6cf523b16dc10a7b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1e:29:09:32:d6:31:31:45:d3:e1:8b:a7:de:
fa:fd:a8:b0:18:cf:9d:c9:4f:ec:12:60:ba:fa:7e:
a8:4d:20:4c:8b:04:0c:5b:c5:c2:e0:92:23:9e:43:
56:c9:c3:44:59:2a:37:a0:22:9b:5c:0d:fe:cf:5f:
15:17:a3:30:ed:06:2e:02:01:03:2f:f1:c2:20:20:
64:b3:e7:53:5e:d3:92:f2:ac:ff:73:e9:98:3c:ab:
5c:b6:af:1f:17:fa:8c:6f:93:e0:77:6b:c6:e9:ff:
63:c9:94:5c:a3:e7:d8:55:55:b7:97:39:ac:7c:17:
4f:e3:9a:a8:48:dd:9c:d2:89:d9:56:4a:b3:58:09:
ed:7a:d3:1d:26:da:e0:56:57:ec:5c:03:f3:51:21:
96:f3:60:5b:43:d5:2a:80:d6:eb:10:ae:77:7f:91:
f3:46:2e:fa:a3:01:53:1e:3e:50:7e:7a:04:f5:0a:
6d:3e:87:a8:c2:57:61:a4:ff:4f:f4:cc:a5:58:cb:
50:91:04:12:84:73:e7:f0:f7:3b:22:ba:10:0e:8d:
50:0f:05:ad:13:bf:d6:e7:23:d4:b6:b0:71:58:87:
ac:0f:b2:42:4a:cb:14:24:0e:2b:4d:a1:e9:ef:a5:
f8:ba:e3:b7:c8:59:c2:6d:5c:05:11:97:1c:8e:d3:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:1C:63:76:CC:6B:A6:AD:55:8B:6C:F5:23:B1:6D:C1:0A:7B:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AJ0cY3bMa6atVYts9SOxbcEKeys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:40:52:ac:06:3d:90:c1:68:fa:6f:23:d3:18:0d:15:37:fc:
4e:ec:02:73:e6:55:15:fa:bb:db:7d:5e:41:4b:9e:03:62:3c:
79:87:79:93:53:c4:cf:aa:43:aa:8e:ad:bd:e2:60:d6:32:94:
f6:5c:d4:b6:28:f4:31:54:4e:1d:aa:b6:52:c5:56:99:3b:ac:
29:96:ce:d2:a5:c2:a6:00:77:81:cb:52:60:4c:74:69:97:8d:
d2:47:6a:15:70:ad:b4:f8:af:db:2b:df:b0:51:fa:d5:0d:bc:
ed:47:c0:73:ea:a3:43:81:4f:f0:cb:ac:c4:1c:eb:13:17:ca:
8b:2e:8a:ae:23:ae:f6:f8:9a:67:5c:a0:67:fd:a9:37:a1:fc:
4c:94:20:9d:31:61:f8:22:79:16:d0:8a:92:97:44:20:52:90:
9c:42:be:58:1d:46:1e:a8:3c:2a:62:cd:46:0e:91:85:42:35:
64:69:ba:6a:f3:3f:24:3e:93:f0:21:5b:b4:e4:c4:c8:38:8f:
fb:d0:54:18:cf:3e:bd:5c:51:5e:8f:7f:31:63:b8:5a:75:aa:
7b:d5:80:44:47:4b:f2:66:6b:28:35:1b:2d:a3:69:6f:5b:b2:
d7:c2:1c:8b:14:2a:7c:e6:00:5a:39:9d:0a:81:c6:62:25:20:
39:13:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:45 2025 by rpki-client