Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AKcYm5DFH-GQgQv5fKt3K0Vv7U0.roa
File: AKcYm5DFH-GQgQv5fKt3K0Vv7U0.roa (raw, json)
Hash identifier: J2y25igaM8ujNezQ2TmEXB+yp5Dn3gFLZWk+Rc2HmmY=
Subject key identifier: 00:A7:18:9B:90:C5:1F:E1:90:81:0B:F9:7C:AB:77:2B:45:6F:ED:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D9C734836C8EAD95AC4B422BE6C96B9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AKcYm5DFH-GQgQv5fKt3K0Vv7U0.roa
Signing time: Tue 02 May 2023 00:05:23 +0000
ROA not before: Tue 02 May 2023 00:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:d9c6:79c7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:c7:34:83:6c:8e:ad:95:ac:4b:42:2b:e6:c9:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 00:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00a7189b90c51fe190810bf97cab772b456fed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:86:45:23:e9:94:ee:12:d2:8b:6e:bb:49:
a6:a2:9d:6e:cb:b0:4d:79:59:ae:cf:18:e2:f4:11:
48:d6:9a:9a:89:ba:d1:d7:48:6f:00:60:ca:00:cb:
1e:9d:fc:a3:ac:0b:73:bb:95:74:b9:fe:f3:34:34:
09:16:83:00:72:b4:b4:f3:d0:65:fe:02:61:01:50:
15:64:e0:a7:00:d8:29:0e:f9:a4:7d:1e:a6:c9:ae:
b5:4c:11:a8:01:89:12:d4:1f:8f:88:a9:2a:a7:79:
04:71:d4:e7:53:76:d9:6f:b4:1c:57:76:2a:51:5d:
f0:6c:39:86:f2:81:3f:0c:e1:e4:70:7a:fe:36:f5:
27:e2:33:5d:8b:d2:94:04:67:ad:41:c2:bd:84:8b:
e5:61:04:28:f2:96:a0:15:59:cd:bf:0c:1d:a9:29:
3e:14:a5:ce:38:d7:63:19:ea:67:77:1e:8b:59:b0:
d4:11:bc:4b:1e:c4:e3:cf:aa:e2:05:f1:d5:24:d5:
88:58:11:da:09:d7:84:dd:a4:19:45:ab:3f:86:96:
cc:9c:ef:ba:47:cc:aa:ae:f5:55:4c:5f:bb:a9:e7:
6f:4c:56:fe:f7:61:c1:af:98:eb:40:40:5f:89:1f:
ca:4c:ec:78:b9:b1:da:a2:88:2b:07:c4:77:65:9b:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:18:9B:90:C5:1F:E1:90:81:0B:F9:7C:AB:77:2B:45:6F:ED:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AKcYm5DFH-GQgQv5fKt3K0Vv7U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:36:b7:19:24:6a:b8:af:5a:94:c1:a2:e2:57:9d:5a:50:8c:
9d:66:6c:8d:ab:28:3f:e7:9a:b2:f9:08:35:73:17:a8:57:eb:
01:65:6a:91:c7:98:19:ee:27:45:bf:d7:4f:ac:df:a0:74:b3:
e4:62:9c:3d:2d:ac:d4:e0:21:6a:e3:40:f6:ef:08:21:2b:9f:
05:44:fc:40:e7:44:c2:ee:c1:b0:6a:a5:47:48:f7:89:2c:2d:
2b:a1:b5:bd:31:9b:64:cf:0f:be:a8:34:12:03:e1:21:58:08:
33:f5:89:76:f6:d7:9b:f0:94:9a:ab:31:6e:b8:60:df:0c:a3:
37:23:55:c5:99:35:53:12:a6:fd:8e:f5:76:a1:dd:e0:57:22:
68:c3:e8:71:21:37:12:db:5c:23:1b:e1:8b:44:5d:b2:89:fd:
4a:45:48:21:d5:c6:a1:ad:a9:c6:6e:f4:5e:66:8e:af:90:8a:
b5:3d:e2:f8:72:37:91:56:a9:12:4a:4a:5c:ed:1b:a4:5d:c7:
06:c1:fa:db:97:02:d5:b9:b6:d5:30:89:81:11:d4:6c:a8:ef:
5d:a2:a7:b2:a9:45:1e:77:01:3e:2d:65:40:19:1c:6c:68:ce:
fa:4e:3a:11:75:ed:63:5c:22:47:af:f8:a4:a2:cb:96:eb:eb:
90:9e:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:11 2025 by rpki-client