Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aa_BJCbzA9bfoYyGQ97TZFpnW9k.roa
File: Aa_BJCbzA9bfoYyGQ97TZFpnW9k.roa (raw, json)
Hash identifier: 4Vhj+G9YSAAoB3f/cgB4+TJRLAS2gQUfJJE+5gGHPWM=
Subject key identifier: 01:AF:C1:24:26:F3:03:D6:DF:A1:8C:86:43:DE:D3:64:5A:67:5B:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D9CADE83E15DB3C887A3492C11CE4C63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aa_BJCbzA9bfoYyGQ97TZFpnW9k.roa
Signing time: Wed 09 Aug 2023 10:14:58 +0000
ROA not before: Wed 09 Aug 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:ca:de:83:e1:5d:b3:c8:87:a3:49:2c:11:ce:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01afc12426f303d6dfa18c8643ded3645a675bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:bf:41:a2:27:d7:42:24:5c:24:a8:56:6d:
ef:4b:38:62:e5:ec:73:80:9c:4f:81:a3:b5:3d:87:
35:9e:c4:40:76:82:d6:03:36:51:03:82:f1:86:d2:
21:81:1d:dc:fd:b6:b4:ff:2a:a6:5a:f1:00:b3:36:
db:90:d7:af:d2:26:c8:b2:5c:1e:be:b2:98:00:50:
73:71:b0:e4:f2:22:ff:26:9f:b3:13:03:14:55:1c:
c5:cb:7a:3d:2d:f2:d6:bb:e0:64:3f:4f:af:f1:d3:
0e:71:e0:ec:5e:dd:e5:e4:35:c0:db:21:9d:25:08:
b9:87:a8:1a:fa:5c:17:fe:53:3a:cf:2b:c5:23:3f:
ad:9c:82:ae:3f:51:fe:6a:d5:34:09:3e:aa:9c:34:
1e:1c:6a:ed:b2:a7:72:09:98:6f:84:c6:d3:a6:1e:
d9:bc:0a:e7:69:07:6f:60:f1:50:59:90:8c:44:a3:
50:c1:f2:7a:e0:83:8f:2b:0a:01:5e:6b:36:dd:99:
f1:99:2f:d4:87:ac:81:64:e0:e1:4d:03:ac:82:94:
6c:f0:e5:91:06:8c:e5:43:98:b5:ef:c0:c7:e9:ce:
8c:1d:de:42:2f:8c:11:b6:bf:b1:af:84:94:f1:01:
f9:8f:f7:6c:14:16:ef:50:3b:2d:51:da:7a:df:99:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:C1:24:26:F3:03:D6:DF:A1:8C:86:43:DE:D3:64:5A:67:5B:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aa_BJCbzA9bfoYyGQ97TZFpnW9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:54:3e:d4:97:66:ab:73:b7:11:dd:ab:c6:a1:1c:0c:27:3c:
23:79:82:0d:67:0f:b9:1c:cc:e2:d2:6b:9d:69:d2:78:90:7f:
bd:1b:93:9a:75:cb:2d:2d:10:13:88:ee:dd:b7:0c:10:fc:81:
f5:ee:58:ab:e4:cc:a6:28:b4:27:32:73:95:b8:12:7f:08:65:
50:7b:aa:28:7f:03:d0:e4:75:2b:3e:56:69:7f:13:83:f8:8c:
33:69:24:f6:ef:e2:f5:a2:b3:05:ca:63:f8:02:a9:2c:72:50:
04:62:0d:53:dd:e8:e7:97:02:d5:64:e8:53:2d:49:6a:74:d4:
4a:79:97:26:51:48:0d:d6:3a:36:70:6d:7f:56:c4:04:a7:e9:
05:41:6d:13:35:3a:73:76:37:5c:05:40:7d:27:90:e9:c7:be:
b4:a2:d1:ff:a6:f6:cb:36:c7:53:af:08:e2:e2:fc:5b:85:d8:
e3:6c:7e:60:ce:f6:00:9c:04:05:8c:dc:9d:c4:3b:a0:62:f4:
ae:85:ae:c0:40:23:2a:a6:f7:cb:c2:a4:6d:0b:83:1e:55:96:
41:0f:9d:88:f6:2a:b9:32:c9:eb:94:e8:b2:63:40:bb:c5:2c:
2a:60:fa:e3:59:85:ec:9b:33:5a:f3:08:d7:99:bc:db:33:af:
9d:6a:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:15:25 2025 by rpki-client