Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AieKfNIzW6KF3FJ5YPkkANgvqA4.roa
File: AieKfNIzW6KF3FJ5YPkkANgvqA4.roa (raw, json)
Hash identifier: Y7peYKvxVV9CDndWCFBgVOvYKGyvyS60XUeXViaryQ4=
Subject key identifier: 02:27:8A:7C:D2:33:5B:A2:85:DC:52:79:60:F9:24:00:D8:2F:A8:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F9D7C14B60617315BCBA82E4B7D83653
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AieKfNIzW6KF3FJ5YPkkANgvqA4.roa
Signing time: Thu 01 Sep 2022 16:17:22 +0000
ROA not before: Thu 01 Sep 2022 16:17:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:d7:c1:4b:60:61:73:15:bc:ba:82:e4:b7:d8:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 1 16:17:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02278a7cd2335ba285dc527960f92400d82fa80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:3a:56:cd:e1:89:f4:66:73:ce:f8:79:f8:
a0:46:58:68:11:f5:3a:3a:e0:a7:2a:ed:9d:4d:26:
92:1e:dd:76:db:40:4a:39:a2:b6:ee:c0:fc:82:67:
e7:8d:ae:29:df:d1:0c:9f:9e:c1:5b:bf:b2:a6:c6:
83:d4:a1:63:72:c1:a2:2c:98:08:a2:f7:c1:3f:c1:
2a:cd:37:46:d8:a3:37:54:5d:b3:3c:fb:f6:02:42:
1c:26:a9:d9:05:f9:36:e5:b0:54:ec:c8:90:3b:42:
65:28:81:c7:9e:b6:86:8d:0f:a0:52:b4:fb:c5:64:
c3:bf:2c:48:84:2f:e3:4f:21:0b:cd:af:a0:b1:91:
f9:99:1b:b5:17:82:52:a0:f6:49:a3:f5:ca:2e:fd:
51:8b:d8:9e:a7:61:76:a7:15:51:f3:6f:1a:74:4d:
64:ca:29:5e:38:db:00:b5:c2:f7:64:89:45:13:1b:
4f:ad:1b:7c:83:01:81:d9:92:47:0d:17:4b:07:81:
6b:95:5f:f4:48:4e:23:b7:fe:e1:0f:84:97:2b:f9:
62:4e:fb:72:ec:e5:ce:f2:71:cf:b3:a3:40:4e:e9:
f1:25:26:b3:9d:03:4a:74:2f:24:eb:0f:e3:d2:05:
08:e4:36:48:29:83:c4:81:e3:f5:37:79:92:5c:4b:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:8A:7C:D2:33:5B:A2:85:DC:52:79:60:F9:24:00:D8:2F:A8:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AieKfNIzW6KF3FJ5YPkkANgvqA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c2:95:34:ff:3f:08:3b:a1:68:e4:6e:f3:2b:cd:33:69:ff:
3d:17:b8:3f:2d:da:b9:ee:43:33:37:f0:dc:76:8b:36:e4:85:
cc:2e:36:ee:20:b7:03:ec:18:ae:51:32:8e:84:34:ed:bf:df:
75:05:91:57:41:31:48:b2:e3:d1:42:b9:3b:60:33:3a:29:a3:
a9:7f:13:8a:2a:24:c7:3a:a0:35:fd:f7:5e:a8:41:55:c0:b9:
34:00:a5:fd:9c:73:54:b7:11:20:f6:d8:60:c5:5e:cb:87:ad:
11:7e:16:8b:b7:9f:70:2d:c1:d2:fa:e4:7a:22:03:f3:10:12:
f5:fe:b6:38:72:dc:92:be:1a:0e:dd:22:97:af:1a:18:1f:d2:
83:fa:1c:87:f2:c2:9d:36:b5:e4:a7:d8:c6:e5:89:ef:c6:03:
39:73:09:c5:f4:fc:2b:c3:3d:5e:e8:7b:4a:dd:c3:6d:73:55:
83:c4:13:72:e6:33:3f:3a:55:3f:7f:51:68:7b:ac:7d:44:32:
1e:e1:89:11:a1:af:72:15:26:d4:c5:13:72:0e:45:9c:fc:4e:
9f:d1:d3:13:df:6f:ed:d2:51:00:45:c8:4e:df:90:14:db:df:
7d:ab:3e:28:79:04:df:72:5d:c2:46:b7:08:b9:86:9d:82:e1:
25:93:c8:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYL518FLYGFzFby6guS32DZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTAxMTYxNzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjI3OGE3Y2QyMzM1YmEyODVkYzUyNzk2MGY5MjQwMGQ4MmZhODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggM6Vs3hifRmc874efigRlhoEfU6
OuCnKu2dTSaSHt1220BKOaK27sD8gmfnja4p39EMn57BW7+ypsaD1KFjcsGiLJgI
ovfBP8EqzTdG2KM3VF2zPPv2AkIcJqnZBfk25bBU7MiQO0JlKIHHnraGjQ+gUrT7
xWTDvyxIhC/jTyELza+gsZH5mRu1F4JSoPZJo/XKLv1Ri9iep2F2pxVR828adE1k
yileONsAtcL3ZIlFExtPrRt8gwGB2ZJHDRdLB4FrlV/0SE4jt/7hD4SXK/liTvty
7OXO8nHPs6NATunxJSaznQNKdC8k6w/j0gUI5DZIKYPEgeP1N3mSXEu2JwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAIninzSM1uihdxSeWD5JADYL6gOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWllS2ZOSXpXNktGM0ZKNVlQa2tBTmd2cUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALPClTT/Pwg7oWjkbvMr
zTNp/z0XuD8t2rnuQzM38Nx2izbkhcwuNu4gtwPsGK5RMo6ENO2/33UFkVdBMUiy
49FCuTtgMzopo6l/E4oqJMc6oDX9916oQVXAuTQApf2cc1S3ESD22GDFXsuHrRF+
Fou3n3AtwdL65HoiA/MQEvX+tjhy3JK+Gg7dIpevGhgf0oP6HIfywp02teSn2Mbl
ie/GAzlzCcX0/CvDPV7oe0rdw21zVYPEE3LmMz86VT9/UWh7rH1EMh7hiRGhr3IV
JtTFE3IORZz8Tp/R0xPfb+3SUQBFyE7fkBTb332rPih5BN9yXcJGtwi5hp2C4SWT
yFo=
-----END CERTIFICATE-----
Generated at Fri May 2 13:12:08 2025 by rpki-client