Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AaAoE6D32VEpYXJLedrTfU0WzRg.roa
File: AaAoE6D32VEpYXJLedrTfU0WzRg.roa (raw, json)
Hash identifier: unB5P+Z2mMH7ZO8A7iU1JBm5U0u4bbhFSeKl9+noxCE=
Subject key identifier: 01:A0:28:13:A0:F7:D9:51:29:61:72:4B:79:DA:D3:7D:4D:16:CD:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 759ADAB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AaAoE6D32VEpYXJLedrTfU0WzRg.roa
Signing time: Fri 25 Mar 2022 16:10:31 +0000
ROA not before: Fri 25 Mar 2022 16:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973082804 (0x759adab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 16:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a02813a0f7d9512961724b79dad37d4d16cd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:4f:6b:0a:73:9a:96:65:55:39:a7:cd:f1:
dc:c8:de:9d:4f:3c:7b:f7:dc:38:12:d4:d3:8c:5e:
a6:99:c4:dd:1c:41:d1:16:c8:0e:e6:72:0b:f7:78:
aa:bb:55:05:bf:2e:03:1b:a5:4e:af:a6:34:42:e1:
a5:cc:9c:1c:19:78:34:77:62:fe:9c:0b:29:a0:dd:
69:3f:ae:bd:97:1c:38:42:fe:d4:e6:7f:47:ea:79:
d6:75:66:64:46:f8:40:fc:dd:f1:30:e7:7a:aa:21:
60:c9:f0:03:52:ac:aa:73:5c:69:ae:35:36:a5:22:
7f:49:f2:50:63:57:2a:be:c3:f8:1e:3a:fe:bb:73:
55:aa:91:0f:97:6b:97:99:81:71:65:2f:ff:2e:0a:
af:51:d0:6b:84:1d:c9:b0:d8:b8:ba:d4:04:4a:2a:
60:68:a2:6e:86:c1:0e:2b:18:f6:37:69:7d:15:a0:
22:f6:e2:a3:b4:68:b6:ea:bb:14:74:be:b4:a4:66:
f9:20:97:96:76:a2:95:87:72:e6:66:5f:80:da:b0:
24:16:50:42:d9:d8:90:25:19:9f:d7:93:ed:8d:d3:
9a:66:51:48:b8:06:49:2a:a9:fd:5f:e6:93:85:37:
91:d5:74:3d:ed:de:7f:45:e7:33:c1:4c:d2:9d:93:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:28:13:A0:F7:D9:51:29:61:72:4B:79:DA:D3:7D:4D:16:CD:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AaAoE6D32VEpYXJLedrTfU0WzRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:17:44:9c:c8:c3:e1:6d:2f:33:5b:44:cf:2c:59:a4:7d:af:
c8:4f:f8:6a:5f:5d:b6:14:63:20:42:61:fd:8a:6a:fd:43:a9:
0c:d8:3a:8d:9d:a9:af:9f:ed:1d:d2:52:cf:3b:f7:b6:19:cc:
ec:4c:e7:aa:91:0d:c1:95:c0:c0:a0:db:37:0a:63:a8:67:46:
5c:89:ea:e4:bb:08:91:cc:fa:df:76:5d:d5:3d:c3:cf:15:c7:
ab:b5:90:06:c5:69:a8:f5:be:04:6a:26:4b:e5:67:b5:32:67:
cd:92:95:18:c5:e7:03:11:06:b7:8e:3a:09:03:36:17:ed:cc:
d7:8a:95:9f:68:c1:b9:f0:70:f4:f1:33:65:10:a7:8d:ad:b9:
e4:65:8b:94:0c:37:fc:03:d0:65:28:74:d1:7b:5d:7b:ff:ec:
7e:2e:bc:1f:72:ba:66:01:b3:29:db:e8:6b:08:8a:80:66:0e:
2e:31:aa:38:c2:28:be:b0:79:7b:73:9b:bd:28:f0:0a:b4:47:
d4:d5:9b:ea:10:a1:71:32:04:f5:58:9d:2c:ce:28:7e:b2:74:
87:2a:73:c7:e5:20:9f:a3:1e:a0:f5:92:8a:ed:55:6b:d3:d4:
4b:50:0e:e1:7c:fb:84:9b:f1:86:da:04:9f:16:ab:e4:52:dd:
a4:c2:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:50 2025 by rpki-client