Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aame6OfMduUwM_DUbONFW5ATr6k.roa
File: Aame6OfMduUwM_DUbONFW5ATr6k.roa (raw, json)
Hash identifier: 441Zs06elcfIEZr+sZ+wxjzl6HKYwVQL0z8mC3T95zY=
Subject key identifier: 01:A9:9E:E8:E7:CC:76:E5:30:33:F0:D4:6C:E3:45:5B:90:13:AF:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0858B6694EF532636F8DAA39F9F4C7FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aame6OfMduUwM_DUbONFW5ATr6k.roa
Signing time: Fri 18 Aug 2023 11:12:26 +0000
ROA not before: Fri 18 Aug 2023 11:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:58:b6:69:4e:f5:32:63:6f:8d:aa:39:f9:f4:c7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 11:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01a99ee8e7cc76e53033f0d46ce3455b9013afa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:8b:96:ec:79:2e:5f:80:86:55:f8:df:19:
6c:17:d0:f7:4a:34:1f:22:f3:60:72:06:ea:ff:27:
99:df:66:86:df:f9:b3:57:50:4e:85:4e:bc:6e:93:
41:d9:79:71:f6:24:bf:97:44:fa:55:19:cc:d5:8b:
cd:89:e0:ba:d7:2c:d8:0d:c6:25:31:ed:c1:21:93:
d9:0a:81:d4:74:4c:76:03:e5:3e:ab:7a:3e:28:13:
03:17:28:f2:83:9f:ed:b0:b1:87:34:39:0e:a0:9a:
e5:a3:6a:f7:a2:79:39:71:7f:59:74:37:02:22:46:
99:fb:5b:26:cc:8a:9f:0a:cf:ba:46:37:ac:a0:a0:
fa:d9:7b:7f:42:d3:c7:26:10:43:2d:87:c2:41:5d:
c3:a9:44:96:40:7f:89:7c:f0:af:9b:0e:6e:63:71:
1f:da:09:38:d9:cc:7f:c1:2f:a6:bc:a0:37:b2:52:
d0:67:66:7c:96:b5:59:32:98:5e:23:b4:f6:c0:e7:
85:ea:ce:a9:06:55:ad:60:4b:9c:52:44:21:31:33:
c1:57:f4:91:22:0a:2a:9f:0f:ed:fb:b4:89:a2:8a:
eb:5d:27:7e:39:a9:41:e6:05:09:16:fd:5a:b3:9a:
34:2c:33:e1:2b:f5:0a:69:e2:81:d5:56:f8:9e:66:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A9:9E:E8:E7:CC:76:E5:30:33:F0:D4:6C:E3:45:5B:90:13:AF:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aame6OfMduUwM_DUbONFW5ATr6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:23:16:0e:46:4e:c5:27:2d:fb:f6:92:3f:55:e3:84:31:e3:
2a:da:57:e7:75:f1:ea:84:61:97:cf:60:07:16:84:94:5d:b5:
9a:62:7b:3c:d4:5a:96:95:3b:aa:62:be:10:0b:08:83:cf:11:
6b:b9:3d:26:96:51:fc:b5:d9:44:51:d4:78:bc:6d:7a:79:ad:
ed:04:9c:a6:eb:ad:53:01:7c:da:c0:6b:85:1f:0c:e4:43:c8:
a6:51:04:3a:c4:d2:9e:6e:1f:31:0a:7d:d1:94:bb:13:de:fe:
09:93:1a:24:fc:c7:c9:9d:4f:c5:0a:31:b1:b0:3e:2d:29:b6:
26:ea:7a:ec:ac:0c:d3:6e:b7:b1:2d:ea:91:3f:c0:68:86:b1:
76:68:da:c4:3b:1d:93:c2:13:71:d8:46:94:03:6e:fb:e5:b5:
21:74:dd:13:ee:88:5a:8c:7a:95:06:0e:a0:9c:3c:9b:54:48:
5f:f7:90:20:e8:78:d9:7f:66:ec:00:2a:8e:f2:56:ed:40:64:
ec:3f:87:a7:2c:ff:86:fa:83:60:fb:d3:61:79:18:ce:cc:42:
15:4c:8b:d1:5f:0b:3d:bb:3b:4d:3b:2b:da:d6:a6:25:05:86:
74:0f:11:f5:fd:ad:54:fc:a8:db:fd:7c:91:35:3a:e4:a5:a7:
dd:9a:c7:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoIWLZpTvUyY2+Nqjn59Mf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE4MTExMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWE5OWVlOGU3Y2M3NmU1MzAzM2YwZDQ2Y2UzNDU1YjkwMTNhZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+GLlux5Ll+AhlX43xlsF9D3SjQf
IvNgcgbq/yeZ32aG3/mzV1BOhU68bpNB2Xlx9iS/l0T6VRnM1YvNieC61yzYDcYl
Me3BIZPZCoHUdEx2A+U+q3o+KBMDFyjyg5/tsLGHNDkOoJrlo2r3onk5cX9ZdDcC
IkaZ+1smzIqfCs+6RjesoKD62Xt/QtPHJhBDLYfCQV3DqUSWQH+JfPCvmw5uY3Ef
2gk42cx/wS+mvKA3slLQZ2Z8lrVZMpheI7T2wOeF6s6pBlWtYEucUkQhMTPBV/SR
Igoqnw/t+7SJoorrXSd+OalB5gUJFv1as5o0LDPhK/UKaeKB1Vb4nmbriwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAGpnujnzHblMDPw1GzjRVuQE6+pMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWFtZTZPZk1kdVV3TV9EVWJPTkZXNUFUcjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADkjFg5GTsUnLfv2kj9V
44Qx4yraV+d18eqEYZfPYAcWhJRdtZpiezzUWpaVO6pivhALCIPPEWu5PSaWUfy1
2URR1Hi8bXp5re0EnKbrrVMBfNrAa4UfDORDyKZRBDrE0p5uHzEKfdGUuxPe/gmT
GiT8x8mdT8UKMbGwPi0ptibqeuysDNNut7Et6pE/wGiGsXZo2sQ7HZPCE3HYRpQD
bvvltSF03RPuiFqMepUGDqCcPJtUSF/3kCDoeNl/ZuwAKo7yVu1AZOw/h6cs/4b6
g2D702F5GM7MQhVMi9FfCz27O007K9rWpiUFhnQPEfX9rVT8qNv9fJE1OuSlp92a
xw4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:27:48 2025 by rpki-client