Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AOSrgtNXfz8L868CwVNbmUbSkZs.roa
File: AOSrgtNXfz8L868CwVNbmUbSkZs.roa (raw, json)
Hash identifier: LzmGT1h3BDX5kQ+mVbZyCdC/5VRy88vGPDZURPdiZc4=
Subject key identifier: 00:E4:AB:82:D3:57:7F:3F:0B:F3:AF:02:C1:53:5B:99:46:D2:91:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183677A8FBA0BE8C8793A06D3C64AD8C50D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AOSrgtNXfz8L868CwVNbmUbSkZs.roa
Signing time: Thu 22 Sep 2022 23:13:48 +0000
ROA not before: Thu 22 Sep 2022 23:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:67:7a:8f:ba:0b:e8:c8:79:3a:06:d3:c6:4a:d8:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 22 23:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00e4ab82d3577f3f0bf3af02c1535b9946d2919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:92:f6:80:e1:8c:14:9f:66:34:19:2a:68:
76:9f:cd:f5:fe:b2:e4:ce:3e:64:92:81:a8:f4:ac:
7f:47:1a:83:9b:46:9a:a9:06:1d:01:dc:7f:7d:c4:
0a:44:37:05:c8:91:00:66:94:55:1e:e6:23:2d:3a:
97:e3:b5:2d:73:b8:ea:39:08:58:be:8e:c5:9b:1e:
26:2c:fd:af:33:8b:66:8b:a2:a3:4f:d4:e6:76:1a:
43:4d:a0:9a:67:db:a9:37:58:c0:94:76:39:80:41:
a1:bb:95:15:46:43:4f:cd:ab:72:fc:35:1b:bf:df:
fc:da:40:67:cd:df:db:a2:f8:9b:c1:b7:e0:7b:e5:
d7:22:03:e4:4e:b1:8b:7e:ff:0d:cb:d4:92:58:f5:
13:2e:93:43:9c:f4:99:a2:87:c4:bb:63:f6:cf:a9:
8c:fe:87:b6:f5:5e:e1:5c:6d:c9:f4:96:ae:b6:91:
ed:41:c2:be:31:4e:76:fa:3a:24:c2:21:90:00:84:
44:c4:09:b8:90:3e:fc:7b:88:a5:7f:42:5d:29:95:
46:db:17:c4:dc:e6:38:93:5d:79:91:98:59:e3:7b:
55:0b:2e:a1:f7:af:06:d2:4c:67:89:d8:d8:18:11:
17:e7:b3:56:d3:3c:5f:51:a9:d2:f9:7a:ed:80:df:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E4:AB:82:D3:57:7F:3F:0B:F3:AF:02:C1:53:5B:99:46:D2:91:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AOSrgtNXfz8L868CwVNbmUbSkZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:79:09:79:62:89:90:6d:2b:7e:28:de:57:f1:7d:99:fa:3e:
51:03:86:d6:29:a6:fe:f4:12:09:66:ca:b4:0f:25:65:fc:b2:
8c:03:28:49:b5:1d:20:72:43:81:8e:20:6d:91:81:5b:26:64:
b3:09:b8:70:35:9c:7f:6b:3a:43:7d:d4:bb:68:3f:db:d3:3c:
34:d5:c9:d0:53:84:3b:85:2e:22:c5:31:ab:11:06:78:ed:1e:
a4:a3:9b:a2:bf:1b:f4:0f:b3:1a:6f:c5:5f:1e:16:8c:38:de:
02:57:84:2c:70:d0:06:ad:81:17:e5:49:bd:01:50:98:af:3c:
3a:ca:a2:0d:5b:84:91:f2:4b:56:51:59:34:bf:dc:d5:61:ce:
bd:c0:fa:57:7f:ec:2a:40:c2:ae:6b:6b:ce:98:9b:0b:66:90:
be:39:3e:36:00:c5:a6:9d:77:b4:01:f0:e9:07:64:7c:f0:fc:
de:b7:2e:2b:c6:37:79:1d:8a:7f:0c:2c:b9:f7:82:1f:c1:25:
46:29:68:0d:5b:14:ce:8e:75:62:eb:e4:cf:14:bc:6d:2a:55:
4d:88:bc:bf:85:dc:15:16:19:7d:24:0c:4f:21:20:de:db:32:
44:6a:5d:75:dc:55:fe:65:84:55:fa:d7:b8:f4:a3:07:db:a8:
f4:fb:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:59:26 2025 by rpki-client