Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AbJra6FT9QLidOrquEY01ayy41U.roa
File: AbJra6FT9QLidOrquEY01ayy41U.roa (raw, json)
Hash identifier: dkRpfk1Bp/k5BsBdgSaO3331DkpB6AUxqh/PRs3wUZQ=
Subject key identifier: 01:B2:6B:6B:A1:53:F5:02:E2:74:EA:EA:B8:46:34:D5:AC:B2:E3:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018670E53FB5796B4D4F58DB9096B747CBE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AbJra6FT9QLidOrquEY01ayy41U.roa
Signing time: Mon 20 Feb 2023 22:15:17 +0000
ROA not before: Mon 20 Feb 2023 22:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:e5:3f:b5:79:6b:4d:4f:58:db:90:96:b7:47:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 22:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01b26b6ba153f502e274eaeab84634d5acb2e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:ff:40:d7:ad:9f:6a:31:e8:14:5c:c5:ce:
b2:f5:2d:a1:c2:84:2e:f9:29:f9:88:cc:4f:ad:d8:
7a:e8:ef:cc:57:41:7a:eb:31:89:36:e4:cb:57:15:
ec:3d:7a:2b:01:53:f6:94:98:88:4c:63:1b:c8:98:
a2:47:67:bd:9e:00:49:f0:63:88:e5:8c:d2:7e:7f:
07:df:30:d9:b8:04:6c:73:8d:75:49:f3:e4:d1:4b:
18:27:e9:01:4e:2b:3a:d2:78:f8:15:91:0a:0c:29:
ce:34:9b:23:8f:70:97:2e:b7:1a:bc:7a:93:45:b7:
15:0b:8a:d0:54:99:19:9a:98:8b:12:de:d6:ac:b8:
ed:1b:8d:2c:e5:9c:71:73:cd:81:79:83:c9:53:c4:
05:c9:12:a7:ed:a0:f7:98:f0:e1:99:22:b8:fb:f4:
11:cd:94:d4:38:cc:c5:d3:5c:42:36:a1:10:cf:a8:
70:c0:49:ed:9a:0f:b7:64:ad:73:fa:96:47:9e:0e:
c3:4f:a7:5b:bb:69:e7:ca:a6:11:22:55:d8:9d:aa:
c8:26:fa:34:0c:7c:0b:1c:60:e3:e6:62:c5:21:01:
54:1f:c8:f1:31:c5:b5:5c:53:e6:1d:f9:da:61:46:
f3:e8:eb:17:08:c1:b3:bb:8f:f8:24:7c:bf:d0:89:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:6B:6B:A1:53:F5:02:E2:74:EA:EA:B8:46:34:D5:AC:B2:E3:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AbJra6FT9QLidOrquEY01ayy41U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:b4:7c:f9:c2:af:d6:0a:47:cf:8b:f0:74:d5:2f:7e:8d:69:
a4:1b:06:d2:cc:0a:2b:cf:d4:23:d5:8e:df:6f:b8:b6:af:94:
a5:06:77:98:1b:b3:f1:46:30:4f:25:6b:d8:43:e8:49:7b:25:
5f:ce:9f:21:a0:e2:22:26:03:9b:0f:4d:38:bf:5b:77:6c:43:
78:8f:c2:7c:5a:07:d4:de:cd:56:fb:83:e4:b8:b9:d6:2e:89:
18:de:d0:2f:3d:2a:80:08:72:c9:9e:ea:14:d2:37:4e:9c:87:
75:5e:7f:3c:2f:f7:fe:4e:7e:75:20:34:28:00:cd:4c:46:f2:
99:8b:ce:f9:5e:ea:37:3c:aa:cf:24:4b:0c:fd:cd:17:f3:f5:
4d:3f:69:92:6f:9f:18:c4:80:92:fa:16:ed:49:67:23:d7:2f:
cc:35:b2:c2:b2:fd:a8:2e:0e:99:c0:9b:6e:ed:61:ed:ff:48:
1b:27:a5:d2:e1:ae:41:68:19:23:05:6b:3a:f1:e2:5d:be:e4:
02:59:f0:30:47:27:f3:2c:63:c2:85:76:e2:e2:f2:2b:28:68:
2c:34:12:8c:44:39:9a:cb:e8:b1:5b:af:fd:11:81:4f:a6:5b:
18:6d:18:76:e7:65:95:83:10:d1:35:d9:bf:1f:52:15:16:40:
90:2c:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:51 2025 by rpki-client