Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AnHAcGkNVRx9lpO5p_AX_y64cqQ.roa
File: AnHAcGkNVRx9lpO5p_AX_y64cqQ.roa (raw, json)
Hash identifier: sQ3ekYUKqGRS+aVsFy3WYRmSaoYtnh1WuvdRN4bc1/c=
Subject key identifier: 02:71:C0:70:69:0D:55:1C:7D:96:93:B9:A7:F0:17:FF:2E:B8:72:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E3E6EC3BCCEBDA7702E27B8C0C3850C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AnHAcGkNVRx9lpO5p_AX_y64cqQ.roa
Signing time: Wed 15 Mar 2023 06:13:27 +0000
ROA not before: Wed 15 Mar 2023 06:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e3:e6:ec:3b:cc:eb:da:77:02:e2:7b:8c:0c:38:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 06:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0271c070690d551c7d9693b9a7f017ff2eb872a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:36:c3:6b:4d:4f:8a:c0:33:72:8c:c5:3d:
62:0d:7e:ae:b1:e8:6a:a3:a8:a0:29:9b:37:3e:57:
c6:f6:44:a4:63:ed:b8:75:df:2e:56:39:1f:3b:c2:
32:e4:e8:7a:ec:fe:9c:35:0c:f9:63:4b:68:45:4b:
47:29:16:5b:ea:9d:b7:8d:ad:bb:c8:98:37:7a:17:
f8:0e:5c:7e:56:a5:d4:22:88:31:8f:9e:7d:c1:e4:
dc:c8:7c:87:56:38:f4:53:a7:89:f6:fa:7a:bb:75:
37:70:8a:9d:d8:4f:39:61:c5:14:d3:ac:be:b2:c6:
60:10:b1:70:67:5e:f5:a0:7a:ef:85:d6:e4:35:7b:
f2:76:29:af:24:01:ff:99:d5:d1:ef:1d:67:04:31:
8e:37:09:c6:b3:d0:46:e0:0a:92:ea:70:7b:d6:48:
49:e6:36:cc:b3:0a:4f:26:6a:0d:fc:15:46:b1:15:
d3:a0:dc:8c:7c:a3:97:00:34:2b:ed:e3:bc:af:f6:
e1:6f:fd:5f:f2:6b:e3:bf:04:55:28:2c:b5:e7:54:
24:65:b9:6d:7d:52:77:54:bb:4f:7c:89:95:6a:9c:
d7:aa:8a:46:ea:63:24:40:1c:91:2d:91:95:f0:46:
da:4b:2e:b6:3b:c5:d7:5d:65:39:a2:5b:c3:84:ce:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:C0:70:69:0D:55:1C:7D:96:93:B9:A7:F0:17:FF:2E:B8:72:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AnHAcGkNVRx9lpO5p_AX_y64cqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:07:7e:20:dc:4b:7e:a0:d5:f8:56:e3:9f:9c:bb:dd:97:18:
92:b7:5d:b7:49:9d:4d:bc:5e:41:0b:20:8d:04:1d:a8:64:5e:
fb:46:59:2c:fd:a5:99:2b:02:1c:ff:8f:7f:96:f8:6a:2a:6b:
75:3b:ad:47:77:db:14:fc:fc:9d:04:35:52:8a:11:1f:3a:05:
2a:68:98:f0:c7:e2:8d:a9:ec:4c:2b:b5:8a:31:6d:a1:19:e0:
f6:95:c8:b1:d6:c9:29:2e:df:95:a5:8c:c1:e4:c6:ac:2c:11:
61:3e:e5:be:f7:cc:1a:85:99:63:cb:94:a0:9c:db:5d:51:ae:
4c:01:ce:13:2b:c4:c7:1e:df:04:43:f1:29:1b:20:ea:a6:a0:
18:0d:f6:24:3f:6c:69:f3:b4:6c:8a:fb:2f:cb:25:c5:b6:2f:
63:f7:1b:9e:dc:a7:45:5f:13:9a:47:21:30:83:70:52:76:30:
21:16:62:a9:ea:f6:2d:ec:f1:35:c6:f2:51:c6:11:df:c7:f9:
e2:ae:9e:7f:15:73:90:8b:ee:b9:4c:95:f6:21:9a:3d:ae:f5:
96:af:5e:04:39:85:d5:f4:4d:36:13:52:e8:2a:4d:b2:91:41:
38:09:4c:d2:5c:aa:99:bf:07:81:4f:7b:3a:dc:8a:67:96:7c:
4d:85:05:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:25 2025 by rpki-client