Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AWFbElVbFM7_ySzWTX2bEmGfhsE.roa
File: AWFbElVbFM7_ySzWTX2bEmGfhsE.roa (raw, json)
Hash identifier: qt2ONhKFZWktxwVc4CDx42gEdQG31EIAof3k1fbh6QA=
Subject key identifier: 01:61:5B:12:55:5B:14:CE:FF:C9:2C:D6:4D:7D:9B:12:61:9F:86:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869F6B875D607DAAE1BAB8119874E5C89A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AWFbElVbFM7_ySzWTX2bEmGfhsE.roa
Signing time: Wed 01 Mar 2023 23:04:29 +0000
ROA not before: Wed 01 Mar 2023 23:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:9f6b:5d9b/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9f:6b:87:5d:60:7d:aa:e1:ba:b8:11:98:74:e5:c8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 23:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01615b12555b14ceffc92cd64d7d9b12619f86c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:62:6e:2e:36:17:54:08:c1:8a:77:d7:b1:
4a:da:2b:70:d4:0f:75:3f:a5:ea:37:a2:27:28:47:
5d:ea:07:ad:8d:60:2a:aa:85:49:6a:60:73:7f:74:
55:9f:2d:e7:c2:e2:5a:ae:c7:8c:3f:56:39:37:da:
ae:f9:5f:79:7f:12:d7:88:6c:1f:72:6b:f2:cd:59:
53:29:9e:9b:08:37:66:8e:1d:60:97:f6:90:f7:1e:
bd:ae:de:07:46:c6:83:25:3d:66:c1:2f:dd:1e:74:
1d:77:78:a6:77:cf:26:40:82:14:e8:92:a9:d8:5b:
54:79:02:06:12:83:c8:a3:09:c7:6e:58:e9:73:fa:
35:a2:19:72:4a:bf:c6:33:ff:3e:2e:0a:fa:51:0f:
a4:a0:05:4b:f0:50:5e:29:58:2b:73:71:82:08:50:
a9:e0:d3:e5:05:a1:ae:cc:63:f4:17:4d:a3:a8:ba:
ca:54:74:c1:2a:91:eb:ad:4b:ba:65:6c:84:bc:19:
74:59:69:b8:fa:30:74:ad:a5:f8:a0:24:77:c8:28:
b2:f0:28:42:4f:60:1c:9a:f7:19:fe:06:20:4f:f1:
84:1f:9d:60:bc:b5:26:91:81:c1:e9:23:a3:33:9d:
66:a7:1d:7c:8f:e3:13:8c:07:e4:3f:d7:83:5b:91:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:5B:12:55:5B:14:CE:FF:C9:2C:D6:4D:7D:9B:12:61:9F:86:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AWFbElVbFM7_ySzWTX2bEmGfhsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:65:46:1b:93:9d:fb:d8:72:60:d4:5b:cb:1b:e4:84:37:6e:
47:22:b6:9e:6c:bf:38:9e:93:15:cd:06:56:8e:ef:98:68:02:
4d:f4:47:27:74:f1:52:c5:d4:ea:48:5f:d0:0b:92:aa:ba:fe:
1c:21:60:28:1d:ab:e8:c7:eb:8d:c9:f8:f5:86:57:6b:bc:75:
7c:f4:77:86:50:a4:c7:62:c2:55:ef:e3:fb:84:7e:6c:cc:ff:
23:20:59:51:1d:46:21:35:e5:c4:46:dc:58:24:87:50:8f:cf:
01:2c:10:c1:ed:ba:57:f7:37:78:7b:4e:70:1c:00:f4:d0:28:
0e:74:f7:e7:e4:25:5e:7d:f8:7e:d2:18:61:1b:db:75:3f:a0:
61:4c:26:77:45:39:04:75:25:3b:7f:37:aa:db:5c:62:ae:39:
8b:54:3d:e4:f2:3f:a0:b5:a3:2c:6a:ed:5e:9c:92:bc:2d:56:
03:e5:2d:71:1e:bb:ee:20:19:82:af:13:b3:a0:e2:b6:cb:b5:
6e:da:da:fc:04:fb:bc:63:ff:db:28:03:f2:fa:d7:00:3e:3d:
c2:5c:2c:98:a3:ff:6a:b6:84:62:56:52:b1:8b:8d:5d:38:b5:
b3:c1:f1:f8:55:35:9e:a3:c8:24:08:cc:07:1a:2c:0b:34:ee:
6b:9b:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:29:05 2025 by rpki-client