Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AUWhxqP9odEJR6PZBn_FpveQJ9Q.roa
File: AUWhxqP9odEJR6PZBn_FpveQJ9Q.roa (raw, json)
Hash identifier: 2EORU9ZUP8qs61JhGoGsaCGnOmB3MK+ZLI37lP7uQ6s=
Subject key identifier: 01:45:A1:C6:A3:FD:A1:D1:09:47:A3:D9:06:7F:C5:A6:F7:90:27:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018981CCC017FBD4F830148C90D5E7CB1F93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AUWhxqP9odEJR6PZBn_FpveQJ9Q.roa
Signing time: Sun 23 Jul 2023 08:10:26 +0000
ROA not before: Sun 23 Jul 2023 08:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:cc:c0:17:fb:d4:f8:30:14:8c:90:d5:e7:cb:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 08:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0145a1c6a3fda1d10947a3d9067fc5a6f79027d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:69:93:3a:29:7e:46:ef:90:ed:a5:47:6e:
ca:2d:ee:b3:09:5a:2d:7d:9a:82:e0:87:43:65:ad:
b6:ff:f8:8f:e1:af:b4:5b:99:59:ef:3b:36:4b:7c:
22:fa:8e:9a:ff:1a:76:e5:df:fa:64:cb:9c:81:1b:
fb:96:9a:1a:a0:03:a4:2e:a8:6f:ed:51:41:f8:fd:
23:9c:9a:22:c2:2c:88:71:20:d2:4a:01:42:82:65:
fd:2c:f8:fa:d8:b4:39:55:2d:dc:78:1f:1a:b7:99:
ee:ba:dd:4c:5a:12:42:88:09:16:8f:0e:1c:8f:1d:
f2:ea:f4:7a:e7:ca:7e:6e:15:b1:e5:4b:92:df:4b:
7e:a3:fe:26:0c:3e:f4:27:cf:ce:12:85:88:3a:3b:
9f:9d:1a:94:0f:9b:e4:2f:a7:d5:91:57:3e:40:5b:
f1:2e:d1:71:b4:99:45:7b:79:58:95:78:3d:e3:6a:
aa:08:70:2f:a6:3b:11:d9:56:79:95:ae:d0:27:f4:
ea:7a:a4:d7:58:16:1e:c7:1c:9d:df:2a:e4:e4:f4:
8d:59:9a:dc:cc:8a:a7:4c:c2:43:36:05:ca:de:d0:
9b:f1:fb:b7:bc:b7:41:8b:5d:49:85:83:d4:53:aa:
b7:17:07:14:80:36:4c:04:38:2c:4e:6d:9b:2d:47:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:A1:C6:A3:FD:A1:D1:09:47:A3:D9:06:7F:C5:A6:F7:90:27:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AUWhxqP9odEJR6PZBn_FpveQJ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:f6:34:13:c8:e9:41:39:6d:81:ea:fa:55:25:99:23:01:45:
16:c0:f4:7a:3f:50:bd:66:24:c5:f1:ff:ed:1a:ef:95:70:9c:
fb:29:df:95:a0:79:70:0f:ef:41:71:e0:ae:9d:d1:cc:b6:ae:
90:9d:ba:6e:8c:d3:87:23:29:43:92:9d:d9:14:28:63:0c:f7:
9b:b5:f9:00:ec:09:58:b7:83:40:5e:6d:e1:87:3c:36:ed:08:
c3:10:0d:56:02:cf:ef:54:c3:e0:f5:3e:36:70:44:79:45:8b:
e4:e9:43:ee:10:cb:f0:f5:38:ee:e9:ec:29:4f:ce:91:b7:ed:
10:f9:dd:86:58:97:31:10:40:29:2e:a3:c5:db:e2:34:bc:f3:
35:d2:2a:39:15:87:76:94:46:09:95:1c:00:2b:25:89:1b:fe:
a1:69:d5:26:94:f9:aa:19:92:c7:84:cc:9f:7c:b3:49:38:ee:
b2:15:67:f6:fd:da:b4:a2:38:07:5e:ed:d0:dd:e2:16:f8:de:
fe:e9:15:b5:1e:4b:eb:96:ab:02:76:6b:65:73:aa:b9:fc:1b:
6a:77:8e:30:ad:34:3d:11:8f:e2:0d:44:e4:ba:3a:88:88:d3:
61:d6:5b:15:09:a2:9b:3f:9e:50:56:6c:fe:2f:9f:d4:1d:13:
f7:51:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:03:12 2025 by rpki-client