Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AXfN9Vcj2WiRw76qmavuYfTS6fA.roa
File: AXfN9Vcj2WiRw76qmavuYfTS6fA.roa (raw, json)
Hash identifier: aFMIxm3xGLMwsALiM9Yo7kEc4DNlHliTPb5iUP4MAZ0=
Subject key identifier: 01:77:CD:F5:57:23:D9:68:91:C3:BE:AA:99:AB:EE:61:F4:D2:E9:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B180E9C801C655065E5C692A810979B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AXfN9Vcj2WiRw76qmavuYfTS6fA.roa
Signing time: Sun 05 Mar 2023 11:21:00 +0000
ROA not before: Sun 05 Mar 2023 11:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:80:e9:c8:01:c6:55:06:5e:5c:69:2a:81:09:79:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 11:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0177cdf55723d96891c3beaa99abee61f4d2e9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:ad:27:8b:2a:a4:3f:b1:38:16:97:a5:3e:
ff:f0:af:dd:68:cf:c3:c9:83:8f:b5:61:3e:c3:11:
79:b0:70:58:f6:35:08:01:95:74:34:f7:4a:e8:01:
4b:35:79:a5:c9:bb:d9:a7:76:7f:7e:64:c8:4e:f8:
6b:bf:17:03:a2:dd:c8:04:58:5b:7d:5d:4c:d2:c5:
d7:01:6f:b2:1f:25:e5:76:ba:66:fd:b7:da:81:ff:
3d:4c:40:76:d0:f5:ad:96:c2:e8:a0:51:14:01:39:
55:4f:e2:46:f6:34:d1:84:09:7f:02:82:79:69:f8:
59:b4:d4:ef:48:cf:a4:d7:da:15:0f:cc:df:99:5c:
9b:85:0e:a1:bb:44:17:22:bd:a4:7d:e1:3d:c1:09:
1a:05:10:85:2a:5f:8c:08:24:84:fe:1e:ba:54:48:
7a:93:42:e1:c8:d0:db:ec:70:16:db:5b:c6:9b:b4:
2d:70:83:3b:a0:af:9a:3a:3c:65:d4:ff:ae:ce:33:
b5:8b:f7:b0:16:14:49:c3:12:90:48:fd:02:9f:ae:
af:d5:b0:85:4a:b0:c1:59:28:8e:9b:92:c4:53:49:
42:d3:67:9b:a4:b0:19:27:f2:97:c8:cd:cc:a3:e0:
6d:76:a0:cc:29:b7:55:f7:e3:92:bf:b8:d6:5a:d6:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:CD:F5:57:23:D9:68:91:C3:BE:AA:99:AB:EE:61:F4:D2:E9:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AXfN9Vcj2WiRw76qmavuYfTS6fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:9d:48:cf:63:00:34:9c:f3:43:5b:9e:78:ef:f5:75:fa:35:
6b:a0:ee:c9:80:c4:6d:fb:0b:3f:eb:e7:32:bd:0c:a2:8f:b9:
58:9b:eb:a4:61:81:35:3c:1d:d4:cf:f1:51:45:56:56:74:5e:
c6:f9:05:fe:bf:95:d7:81:94:42:8b:9a:7e:82:c7:11:22:08:
8b:04:c6:0c:63:1f:07:96:16:3e:3c:2e:06:39:57:69:19:ef:
35:bf:e5:b4:3e:54:c3:f6:77:ca:eb:ef:52:62:e0:bd:f7:6f:
1c:2b:c7:83:5d:be:f8:df:65:87:54:66:59:f3:9b:af:1a:12:
4e:32:b5:10:69:43:f2:2d:6f:1c:4e:90:a5:17:f6:fc:b2:38:
86:fe:1e:8f:23:42:49:20:63:2d:49:7c:3f:4c:ed:10:d7:e9:
b2:70:eb:10:e1:e0:48:3b:f8:7a:25:30:e1:e2:76:26:55:41:
1c:b6:8e:5e:53:36:bc:fc:4f:43:c7:fc:0f:87:28:3c:5f:50:
b3:28:d7:81:5d:02:28:ee:f3:ab:97:4c:cc:f7:d4:4d:42:c5:
c9:e2:a8:b7:cc:78:1a:70:ec:27:0a:69:98:d8:b9:ad:57:b7:
a0:1a:22:aa:22:b4:1a:e9:ad:13:7b:14:be:d3:71:29:ac:65:
b5:88:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:36 2025 by rpki-client