Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AU7kGy0F3KQzyIweTxHYPfgbJq0.roa
File: AU7kGy0F3KQzyIweTxHYPfgbJq0.roa (raw, json)
Hash identifier: DqwxRn0XWlPwGRLsOjOoUp643ntqX3AStRzY4UkiUVo=
Subject key identifier: 01:4E:E4:1B:2D:05:DC:A4:33:C8:8C:1E:4F:11:D8:3D:F8:1B:26:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EAB34EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AU7kGy0F3KQzyIweTxHYPfgbJq0.roa
Signing time: Tue 01 Mar 2022 06:09:23 +0000
ROA not before: Tue 01 Mar 2022 06:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856713963 (0x6eab34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 06:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=014ee41b2d05dca433c88c1e4f11d83df81b26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:3e:af:ac:d0:25:85:08:d8:29:ec:cb:3d:
b8:5d:44:3c:5e:91:a4:3f:8b:26:72:26:bb:9b:eb:
dd:92:02:08:54:e4:14:a5:53:b4:db:ee:b1:db:12:
f9:2b:35:b8:63:d5:00:6a:02:de:0e:70:a7:af:c4:
71:38:22:d8:a4:5a:5d:92:5f:e4:20:a3:19:e2:37:
51:aa:0f:ec:da:66:01:48:e3:e2:e0:b9:22:f9:2d:
85:75:03:0a:cc:1d:b9:a4:7c:49:f6:79:4a:bd:ea:
61:61:22:be:3a:16:ab:2a:33:9f:db:39:4e:47:59:
c3:7a:f2:18:cb:5d:74:75:6c:5f:7a:c7:c4:d0:0d:
41:32:28:a6:75:55:f8:58:d5:63:e1:c3:10:28:92:
fb:9b:87:dc:68:8b:50:c0:2c:70:45:7f:bb:eb:42:
08:e4:5b:06:0e:ea:bf:6b:82:55:8d:5e:ea:d8:5e:
d1:e2:18:e2:02:79:91:e9:d9:73:51:6e:0b:70:0d:
d7:48:0f:78:f8:29:72:9d:01:54:ea:af:93:06:d2:
79:58:a0:49:c5:2d:93:24:f7:a7:d8:e5:24:93:09:
d6:c1:52:85:f0:4c:a7:da:6e:aa:d6:fb:66:6b:35:
64:5b:7f:2b:76:57:1f:20:bb:30:e6:62:f5:79:f4:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4E:E4:1B:2D:05:DC:A4:33:C8:8C:1E:4F:11:D8:3D:F8:1B:26:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AU7kGy0F3KQzyIweTxHYPfgbJq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:91:10:20:8b:a6:7a:46:17:a7:45:d7:c6:84:46:ab:b9:76:
22:14:8d:7a:15:ee:13:5a:09:c9:78:af:31:e5:b2:37:05:87:
52:06:b5:4e:7f:9f:4d:c5:a5:ed:4d:1e:05:b6:7a:ba:f6:5f:
d8:dc:28:4d:60:65:4a:f2:0b:13:2a:d5:62:3f:ab:a2:0f:37:
5d:91:04:61:f0:7a:1d:47:0f:d0:9e:5f:83:6a:30:f3:dd:e9:
45:cc:83:71:13:c2:35:ef:e3:aa:70:78:dc:83:33:b7:55:64:
bb:ea:d3:7e:cb:94:71:86:e5:89:a2:00:f7:42:e8:bb:f2:86:
ac:0d:2e:2f:a8:14:91:23:c8:df:5b:2b:58:4a:cc:56:e4:41:
f9:67:e0:a9:64:7b:03:6b:a1:5b:a0:8f:3f:06:7e:77:90:49:
c9:95:57:a3:ee:0f:d8:ab:ef:a9:25:9b:bd:aa:85:d9:49:de:
d3:9a:c2:2e:68:a1:81:8c:04:01:2a:fd:56:81:7e:58:da:19:
0f:b0:00:4b:80:c4:ba:4a:35:c3:1a:f1:05:e0:4e:19:10:06:
9c:8c:3d:87:e9:22:15:11:9e:36:27:bb:10:79:90:93:0c:23:
f5:99:30:23:7a:d3:63:74:8c:2c:2f:73:6e:67:6a:53:0f:40:
1b:89:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:22:01 2025 by rpki-client