Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AJallvkLUDnwCIY6tlvozdF6x_I.roa
File: AJallvkLUDnwCIY6tlvozdF6x_I.roa (raw, json)
Hash identifier: MEnEsSQvwrFSrZmfAQAJTNh2hzcWUkzpGPmJ7JjOsZQ=
Subject key identifier: 00:96:A5:96:F9:0B:50:39:F0:08:86:3A:B6:5B:E8:CD:D1:7A:C7:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018778CEF6F730271BDCE5D715A563B95EBD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AJallvkLUDnwCIY6tlvozdF6x_I.roa
Signing time: Thu 13 Apr 2023 04:10:42 +0000
ROA not before: Thu 13 Apr 2023 04:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:ce:f6:f7:30:27:1b:dc:e5:d7:15:a5:63:b9:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 04:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0096a596f90b5039f008863ab65be8cdd17ac7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:77:44:3a:4e:ad:be:5e:d8:ce:73:45:bd:
3d:3c:82:a6:fa:64:02:c0:bb:d1:3d:0a:74:db:32:
cb:67:10:c8:6c:69:2a:9a:37:c2:ac:f9:55:a2:dd:
4b:f1:24:bc:4e:a1:de:2a:b7:f4:f3:1e:99:de:d2:
d7:76:2c:ce:f8:11:77:64:f7:8f:ca:49:bf:25:8f:
7a:7e:35:59:e3:eb:45:17:02:38:3a:a1:cd:2f:77:
af:82:76:6a:58:70:e7:a4:59:d9:a1:d8:39:f6:80:
bf:e2:37:f4:ca:e1:dc:63:2f:ff:e8:6c:c1:15:09:
5c:42:45:56:a9:08:9f:bf:5e:c0:df:5e:35:4b:99:
2f:88:75:43:91:6e:99:05:51:e0:17:a5:bd:24:ee:
5b:ab:1c:f0:8a:78:33:9f:a7:f0:54:fd:1a:f0:f9:
45:c6:7e:6e:45:f9:6a:42:5b:02:2a:a2:f8:19:d8:
cb:eb:62:90:c7:14:73:74:99:09:8b:ef:88:c0:58:
20:4c:3e:61:6d:ac:31:f4:9e:00:46:21:27:9b:93:
38:14:01:3d:4c:74:a9:7a:27:08:02:2d:4c:77:16:
23:b7:66:9d:50:7e:48:41:94:b3:b2:78:74:80:9c:
f6:67:d9:d3:8f:34:35:f7:49:e7:d9:48:1b:94:e0:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:A5:96:F9:0B:50:39:F0:08:86:3A:B6:5B:E8:CD:D1:7A:C7:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AJallvkLUDnwCIY6tlvozdF6x_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:51:dc:be:0a:5b:f8:ea:7a:cc:dd:fb:bf:6e:0d:b6:f1:10:
8d:93:f1:0e:03:af:26:e5:0c:8f:e9:aa:71:d2:a0:ae:56:5b:
c2:80:dd:55:06:e0:12:5b:a9:f9:b1:63:70:b3:85:ab:5d:b0:
36:14:7c:18:b2:f1:01:9a:86:d5:0a:a0:db:77:a4:bb:2e:53:
89:e2:0f:f3:e5:84:d6:0a:e7:d0:09:e1:de:a4:43:ed:86:b2:
57:6d:80:b4:4a:96:d1:8e:08:f2:76:ee:f8:5a:33:08:e9:14:
fb:d5:0f:f3:ce:f8:d5:9c:6e:54:45:b1:fd:c0:31:dd:6c:cc:
82:b7:ac:f9:56:df:8c:e2:89:79:48:a1:3e:be:f8:22:ff:df:
c9:8d:69:ff:f2:49:60:8e:d0:56:3a:8f:24:18:87:72:9d:bd:
ae:d9:69:37:8f:b7:71:6b:44:5f:12:2d:03:36:35:52:6a:0b:
ba:96:89:f3:77:56:6d:7e:c8:40:ed:e6:16:10:9f:b6:ab:a2:
aa:cb:fc:20:d1:b0:bd:08:98:87:82:70:a6:d6:78:d8:18:1c:
12:d5:c9:f4:ee:60:1b:8e:8d:64:1c:2d:2d:cf:48:1d:7d:61:
18:b5:01:9a:b0:44:01:81:75:54:57:f4:b0:ac:cf:73:0f:66:
3a:18:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:53 2025 by rpki-client