Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Am3pbd-kIvL85sXmqgiFhddti0Q.roa
File: Am3pbd-kIvL85sXmqgiFhddti0Q.roa (raw, json)
Hash identifier: +7+qasj1aHu2cpARULShCE0zsQwmdQu8XAHudj/kCq4=
Subject key identifier: 02:6D:E9:6D:DF:A4:22:F2:FC:E6:C5:E6:AA:08:85:85:D7:6D:8B:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018826D33C5ACB5D8BCD4CA684C35187CD97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Am3pbd-kIvL85sXmqgiFhddti0Q.roa
Signing time: Tue 16 May 2023 23:09:17 +0000
ROA not before: Tue 16 May 2023 23:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:d3:3c:5a:cb:5d:8b:cd:4c:a6:84:c3:51:87:cd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 23:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026de96ddfa422f2fce6c5e6aa088585d76d8b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:a3:f7:38:d8:2a:26:43:98:b0:33:65:60:
40:7d:8f:ba:4b:db:6c:44:56:7f:7d:ef:98:74:4d:
fa:1c:f0:4f:bf:be:73:b8:9f:57:4b:ab:ba:e9:c7:
6e:8d:71:69:1b:58:41:42:f9:ad:b0:93:f9:e1:8f:
08:3d:11:0d:17:80:77:39:38:4f:9b:8c:80:da:13:
1f:5c:a8:81:60:21:5b:2b:c5:2d:1e:37:2e:fb:93:
71:4b:13:23:06:a1:8b:f8:c5:3f:d1:da:ac:b2:29:
58:07:f4:3e:ad:fd:a3:24:3a:43:c8:8f:a8:9e:21:
e3:10:c9:f4:e5:90:a1:7b:0c:e9:42:75:00:d8:98:
97:1a:54:98:20:8d:cb:a8:43:2e:90:f9:7e:c1:8a:
cd:02:80:09:8e:bc:f0:7d:57:b4:5f:38:c7:f1:92:
f1:6a:2f:55:53:86:59:33:89:15:a4:bf:6c:b5:1f:
d4:ec:d4:d9:37:c8:d4:59:fb:53:30:79:04:ea:80:
48:9f:dd:3c:c4:44:aa:55:53:a1:e5:34:2d:e6:ce:
ae:18:8f:89:e9:68:70:ac:56:7e:03:a1:7f:a5:90:
7b:d3:ba:7d:a9:ed:26:0f:cc:e0:54:00:60:0f:96:
69:e9:94:53:25:24:f1:a5:0f:1c:7e:61:a5:5c:3c:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:E9:6D:DF:A4:22:F2:FC:E6:C5:E6:AA:08:85:85:D7:6D:8B:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Am3pbd-kIvL85sXmqgiFhddti0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:a2:df:60:6f:6f:a9:a0:f7:58:0b:a7:bb:1d:2d:d6:2e:55:
7c:8f:76:57:be:d6:94:14:77:f2:63:89:9e:97:2f:84:8b:23:
5d:4f:fa:50:3a:e4:8a:7e:61:25:53:d4:85:56:6f:19:5f:b4:
fc:d5:f5:84:98:ed:1d:0b:5d:a5:fc:14:05:bb:af:11:21:0a:
cb:85:a8:2d:1d:1a:c0:55:c2:2b:ad:f3:e6:40:02:2b:52:0f:
2d:14:90:e8:88:44:0d:a6:7c:26:d4:42:90:f1:3d:61:3b:a2:
95:aa:b8:57:06:87:67:b4:09:63:f2:db:48:9b:0c:d1:03:a6:
de:46:33:88:48:53:28:d5:21:b3:f6:9d:33:28:27:a5:d5:19:
67:54:03:ab:2f:fb:25:2d:f3:50:4e:89:2f:a4:7a:c8:fb:a6:
08:e0:62:f7:a7:3c:58:32:7e:d7:a8:20:b8:3d:b1:62:c7:17:
76:e8:bd:d1:85:2e:a1:ad:a0:6c:55:e7:1a:e8:1d:63:e4:19:
20:dd:da:43:8e:7b:80:53:02:21:55:96:e9:54:6d:cc:6c:55:
72:69:de:c9:06:ee:47:05:8d:3e:6d:7a:b9:2a:7e:d1:c6:6e:
a5:a5:35:19:a6:14:0c:da:ca:a4:54:fb:82:c9:31:46:b4:ca:
87:33:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:15 2025 by rpki-client