Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AZXFh7bXfpK8pBIuurx6JgC4AB0.roa
File: AZXFh7bXfpK8pBIuurx6JgC4AB0.roa (raw, json)
Hash identifier: Al2IHPbC6kpbw/rGBKTo1nqBUKlhxm1tguvoULC+oQs=
Subject key identifier: 01:95:C5:87:B6:D7:7E:92:BC:A4:12:2E:BA:BC:7A:26:00:B8:00:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872600C193BBACC351BCCB415FA9F38A6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AZXFh7bXfpK8pBIuurx6JgC4AB0.roa
Signing time: Tue 28 Mar 2023 02:16:36 +0000
ROA not before: Tue 28 Mar 2023 02:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:00:c1:93:bb:ac:c3:51:bc:cb:41:5f:a9:f3:8a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 02:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0195c587b6d77e92bca4122ebabc7a2600b8001d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:24:76:72:a6:af:c7:c9:30:25:f5:e9:67:
de:2f:7c:f8:1a:47:c8:e6:ba:8c:d5:1c:7a:a9:09:
d9:1c:cd:1f:f5:3e:68:ce:f6:07:7e:a6:da:78:d3:
d9:fb:91:b8:87:61:63:6f:7e:eb:d7:c3:80:cc:09:
88:22:68:c9:1a:14:7b:eb:1f:a5:88:38:ec:30:7f:
d1:73:f6:13:8f:97:75:d3:30:66:27:af:1f:e0:2f:
48:ed:37:b9:88:a3:dd:3a:7c:43:59:8f:e7:de:46:
8c:06:c0:1b:2d:56:1f:df:e4:2a:69:37:12:e2:96:
32:0a:38:a9:f3:53:86:d5:46:68:e7:06:03:d7:5b:
06:81:0e:db:b0:ed:3a:32:a3:19:ba:ac:e7:84:44:
84:10:af:dd:d4:3f:2e:9d:28:c9:b0:8d:27:f2:1f:
2f:73:06:54:ae:49:68:a6:b8:48:c3:53:34:71:0b:
ea:db:27:a0:63:45:96:29:4e:b4:db:0b:f6:54:ae:
0b:0d:6f:3d:48:37:fe:3d:d5:52:64:2a:c1:b8:a4:
21:e5:89:a6:0e:95:e9:92:c7:e5:77:de:d2:9f:17:
7c:4d:0b:d7:cf:15:e9:14:f7:35:8f:f8:93:f0:e1:
b2:ff:38:45:da:69:89:40:e0:3a:39:16:70:c0:bc:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:C5:87:B6:D7:7E:92:BC:A4:12:2E:BA:BC:7A:26:00:B8:00:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AZXFh7bXfpK8pBIuurx6JgC4AB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:e8:f3:92:bd:3b:3f:af:a7:1e:08:41:ed:48:19:5d:ff:3a:
6c:1b:60:26:38:54:85:b0:a0:11:26:e7:d9:54:a3:e1:3f:20:
1b:96:30:92:bd:78:17:0c:ba:55:e4:31:1a:15:8f:21:0d:4c:
7d:ea:c8:49:96:3d:98:e5:e3:01:8a:98:3a:9a:9b:80:56:ae:
78:e6:a0:d7:91:f7:dd:5b:2e:9b:74:a3:ab:99:4f:b7:6b:af:
22:72:2b:47:7a:98:96:ed:98:f2:f2:c1:b3:24:55:9e:7f:2b:
d1:3e:1b:c7:2f:4c:e3:86:c5:b6:42:9d:87:f2:43:5d:ea:1c:
83:52:0c:d5:c8:0a:ce:8f:04:7d:a7:c3:e3:c5:e7:10:99:0d:
89:7d:e0:2d:08:6c:f4:8b:db:99:3c:fa:16:b9:e6:b7:c9:a5:
c6:67:0d:19:1b:6b:30:26:16:3f:d7:81:0f:d7:7e:91:9d:f1:
38:d1:30:2e:4c:62:f2:1b:f9:e5:36:07:0f:96:18:74:7a:0d:
04:7c:18:00:78:d6:b0:f7:b5:fd:07:4d:94:4a:32:84:6c:d9:
59:ed:e5:32:59:9a:ee:5e:fd:e9:40:52:2c:b5:94:32:74:ce:
6b:1c:b2:33:6c:c2:fb:4e:1d:a3:32:53:c3:1a:e2:9c:31:c6:
d0:c5:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:55:59 2025 by rpki-client