Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ajjq4dPtbhBnsHOVpURDEsv5Agw.roa
File: Ajjq4dPtbhBnsHOVpURDEsv5Agw.roa (raw, json)
Hash identifier: yAUpT6S7bxL+XfOdxVwfN9mKRHYwCb19pQ1MpFrRjjM=
Subject key identifier: 02:38:EA:E1:D3:ED:6E:10:67:B0:73:95:A5:44:43:12:CB:F9:02:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A01AB666A6ED4D18AE160054672FD1599
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ajjq4dPtbhBnsHOVpURDEsv5Agw.roa
Signing time: Thu 17 Aug 2023 04:05:24 +0000
ROA not before: Thu 17 Aug 2023 04:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:1aa:cdd5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:ab:66:6a:6e:d4:d1:8a:e1:60:05:46:72:fd:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 04:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0238eae1d3ed6e1067b07395a5444312cbf9020c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:12:ca:ca:c7:cb:aa:68:35:25:46:44:f6:
84:a9:54:6e:98:59:9b:07:c8:a1:17:a1:71:f8:06:
41:7c:14:e2:ce:86:8b:a2:0f:38:7b:f7:6b:c6:01:
3e:f0:60:95:89:73:58:4a:b7:a0:a0:96:e2:60:d6:
95:7f:28:8f:a6:5f:3f:c2:ae:ba:60:24:f9:19:2c:
05:e9:36:90:dc:34:b3:a6:25:23:64:da:61:4c:ee:
fa:10:7d:81:78:40:bf:63:28:6d:b2:36:db:d3:b3:
9b:19:62:82:c7:78:ff:2a:e6:c0:0a:5b:5d:96:0c:
0f:10:b0:0c:7c:f2:3d:3c:49:4a:f4:14:2b:f2:7a:
ae:51:33:4a:8e:d6:7e:38:e0:bb:11:1f:8d:7e:13:
2d:38:74:d9:95:0c:40:60:bb:50:d8:b0:ce:31:c8:
e1:ec:e6:e5:32:7d:e3:99:dd:0d:1b:30:ae:c0:9a:
70:94:19:24:c7:0a:34:f3:7c:40:c1:ca:88:b4:7c:
b4:f2:01:83:14:55:f7:40:68:6d:fc:49:d9:25:b1:
26:2f:5b:f4:00:ea:0e:cf:1f:71:a6:02:5a:c0:83:
8e:84:80:f7:86:f0:19:85:6c:04:b4:e4:3b:ea:f1:
4a:55:a9:f8:4c:db:65:7d:ee:25:0b:9e:92:de:e9:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:EA:E1:D3:ED:6E:10:67:B0:73:95:A5:44:43:12:CB:F9:02:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ajjq4dPtbhBnsHOVpURDEsv5Agw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:11:d3:b4:57:c1:2c:03:80:33:8c:91:68:74:d9:0e:00:d0:
52:be:50:5a:a9:7b:08:38:4a:d9:0c:49:71:f2:53:9d:1f:f7:
3f:fe:76:71:9a:b5:e8:a3:f9:66:60:b6:b6:4e:7f:a3:85:e6:
da:4a:c2:c9:1a:27:2c:e7:0c:67:07:df:68:dc:5d:93:84:aa:
5b:1d:cc:1e:5e:9d:27:4d:41:f1:ed:57:8d:75:cc:f8:4d:94:
9f:94:85:b4:1b:5e:a7:57:c0:d2:a6:cd:01:d1:ac:95:94:8e:
8f:57:da:60:2d:55:3b:0f:da:61:f3:9f:1d:a5:0b:13:87:40:
52:8c:82:ea:27:f8:31:08:62:81:f9:18:7a:d4:39:6c:18:fc:
07:7b:25:97:f8:06:64:b3:21:59:67:21:8c:cd:1d:44:15:85:
6f:e1:fb:cf:76:6a:a5:ca:63:44:e6:19:88:d0:b2:4d:af:76:
60:69:89:c3:3a:92:43:e2:c4:a9:90:b4:48:08:ff:e7:7a:ce:
fa:ea:0f:7d:93:01:63:ae:6f:d8:6e:32:f0:57:15:4e:7c:43:
27:fb:c0:23:2e:58:74:d8:11:06:94:82:96:0b:d7:70:e5:57:
3e:a0:f0:b0:b5:e8:f7:3e:71:f7:84:43:a8:7a:a8:00:b6:02:
ce:34:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:59 2025 by rpki-client