Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AKITUw3UGaMcqbuU6SdILK5PUbo.roa
File: AKITUw3UGaMcqbuU6SdILK5PUbo.roa (raw, json)
Hash identifier: YoqFr9LzfpLQN+96HDAYKqWGPyvv/oH9uD4+BGxKVQ8=
Subject key identifier: 00:A2:13:53:0D:D4:19:A3:1C:A9:BB:94:E9:27:48:2C:AE:4F:51:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EE9CC9A4A3CA1E5316043B90C7E8F713
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AKITUw3UGaMcqbuU6SdILK5PUbo.roa
Signing time: Sat 06 May 2023 01:11:05 +0000
ROA not before: Sat 06 May 2023 01:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ee:9c:c9:a4:a3:ca:1e:53:16:04:3b:90:c7:e8:f7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 01:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00a213530dd419a31ca9bb94e927482cae4f51ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:70:da:69:df:23:1c:97:07:d3:7f:22:0c:
6e:53:5c:13:e5:1d:63:47:7a:78:a9:e6:57:8a:27:
72:17:f0:dc:65:0e:c2:b7:3f:a0:83:0c:26:f4:ff:
ef:10:42:30:94:2a:e4:75:f1:cc:0e:b7:3a:aa:2d:
5d:42:88:a6:3e:2c:d8:84:5b:bb:95:a8:8c:74:5d:
45:66:76:35:83:71:85:1d:a9:51:54:fb:84:ff:a3:
4d:5f:84:4e:c9:57:25:2e:3b:56:07:60:9d:44:b1:
92:d9:04:9d:f3:54:a2:60:e8:3b:d7:79:23:55:a8:
f4:a8:a7:88:cc:3d:1e:c3:8e:13:70:31:49:53:ca:
bc:96:29:1f:8e:6d:5b:e3:bc:2d:c0:7a:59:c5:da:
eb:a3:6c:85:85:78:b1:19:3b:84:7b:c3:5f:1b:cd:
f3:56:cb:44:58:f9:bc:5f:66:ae:03:c5:b8:dc:e2:
9b:89:bd:42:30:24:fd:31:1a:ac:f9:c5:13:00:cd:
83:b9:af:d9:0d:c7:3e:ae:81:8b:40:56:de:bb:50:
c1:91:cc:ef:f2:e6:ea:86:52:9e:59:ee:c6:af:3b:
50:72:70:e9:39:a2:fc:bd:94:e3:8e:27:c9:d4:a4:
ea:50:c9:1a:b8:5f:c2:3f:52:61:e7:c4:14:bc:c9:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A2:13:53:0D:D4:19:A3:1C:A9:BB:94:E9:27:48:2C:AE:4F:51:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AKITUw3UGaMcqbuU6SdILK5PUbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:d6:d3:02:2f:90:79:3d:bf:62:63:03:78:7a:f4:63:3a:21:
b9:8f:fd:50:75:47:a2:9a:61:78:b0:57:65:98:53:90:dd:bb:
65:8e:be:4b:b0:fc:36:45:44:52:7b:13:6f:d7:f4:13:28:de:
97:ef:ee:23:11:c4:5e:43:9f:5b:3c:14:34:9f:3a:86:85:e8:
23:4d:2b:09:a4:b6:06:f6:ac:73:a4:4f:23:c2:7e:8a:fa:ce:
f6:98:1b:d9:81:12:a3:97:45:c3:e3:2a:a0:2b:1d:e0:b7:9e:
80:3a:8e:24:e9:c0:d2:00:b7:c0:f7:68:4a:af:30:7d:1c:74:
32:4c:e2:b2:aa:3b:ca:c7:f4:12:9e:9d:ed:df:20:6d:38:a4:
cb:af:eb:f6:f5:af:77:36:ad:92:01:ed:64:94:13:5d:30:0c:
5a:ca:06:3b:d4:f6:d3:ce:2d:bc:12:bb:16:b3:55:03:91:a7:
92:9d:a5:4e:83:5f:06:38:19:0f:b9:ad:e5:a1:11:90:e0:ad:
5d:32:6a:4f:43:07:2c:07:9e:78:86:61:a0:cc:ec:41:a5:23:
35:e8:4a:a3:f9:54:5b:bc:50:f0:1a:3d:9e:06:2e:b7:38:18:
22:1f:55:cd:5d:14:ad:e9:df:65:54:5f:28:be:66:49:1d:f8:
68:54:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:30 2025 by rpki-client