Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AohBzR_5UcCvo4VLtZ4NgH8Bnxw.roa
File: AohBzR_5UcCvo4VLtZ4NgH8Bnxw.roa (raw, json)
Hash identifier: z90DY2yPZBcFOqvXM92pk36ksj0pCtFQXr9aJXKE2nk=
Subject key identifier: 02:88:41:CD:1F:F9:51:C0:AF:A3:85:4B:B5:9E:0D:80:7F:01:9F:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A9EE61FBB8003D136C2D8F2E4F9A674A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AohBzR_5UcCvo4VLtZ4NgH8Bnxw.roa
Signing time: Sun 11 Jun 2023 10:09:12 +0000
ROA not before: Sun 11 Jun 2023 10:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:ee:61:fb:b8:00:3d:13:6c:2d:8f:2e:4f:9a:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 10:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=028841cd1ff951c0afa3854bb59e0d807f019f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:81:e5:78:bd:43:49:eb:41:0f:2a:d2:c5:
61:bc:31:78:c8:3b:9e:f6:9e:07:1e:dd:d3:bc:c5:
05:8c:93:53:21:57:c6:24:a9:24:0a:0a:a1:31:b4:
52:3b:cd:cf:00:6e:61:3d:e9:44:38:40:d2:9f:08:
0e:40:f3:e7:03:d7:a8:8a:a9:06:ac:d0:f0:f0:ef:
95:04:8e:8a:67:97:e8:e7:d4:1e:2e:18:26:69:be:
f1:9e:fe:30:2e:db:33:a8:44:f0:95:ce:23:5e:bd:
08:71:cd:06:ad:3c:fb:b3:6f:40:23:b7:92:c8:6a:
46:11:cb:2a:14:a8:5e:39:8d:23:06:19:b6:3c:42:
4d:2e:9b:65:e4:a5:61:d0:e9:cb:d8:4c:0d:a6:57:
33:1b:c8:f9:0c:4c:72:ed:ba:64:47:77:8b:68:cb:
f8:4e:fa:e2:08:69:54:d0:29:e2:c0:f9:f6:c3:c6:
42:c0:61:71:87:40:15:27:b2:8f:20:e5:12:1d:93:
8f:ad:23:a1:80:dd:f2:64:ab:c8:4c:86:58:c5:de:
3a:f4:2a:38:92:73:9a:4f:03:32:4a:bd:20:a1:2a:
86:68:5a:10:82:ac:23:18:09:9f:4d:41:4f:82:44:
28:e0:6b:18:31:f8:91:b7:61:3b:d3:9f:49:69:69:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:41:CD:1F:F9:51:C0:AF:A3:85:4B:B5:9E:0D:80:7F:01:9F:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AohBzR_5UcCvo4VLtZ4NgH8Bnxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:2c:78:f1:95:e3:f9:fd:08:a0:5f:f6:a6:32:7d:94:d7:a7:
6a:4b:0f:c9:82:15:fa:93:a9:38:fb:a8:f5:01:c5:4a:bb:cb:
c3:5f:26:60:d5:54:0b:b2:06:7a:b7:06:ac:e0:c1:b3:c8:3c:
66:76:d2:10:12:c8:6a:3b:78:44:91:7b:4f:58:f7:47:5d:9f:
31:65:56:6d:da:5f:fc:24:fe:1e:13:39:82:3c:5f:ba:f0:fc:
c9:14:de:32:0d:8a:97:c3:a7:7d:54:9c:38:6c:ea:ee:76:3b:
f5:a3:34:20:6e:8f:6e:77:44:f0:bf:d2:32:08:3e:09:a5:84:
2f:eb:5d:67:7d:c6:10:d0:f0:5f:81:63:46:74:3e:47:95:d3:
de:58:74:d0:5f:ba:14:44:9a:a3:bc:83:4b:01:ea:e0:b7:7f:
6d:19:b5:c9:85:0a:30:f3:67:ae:04:98:53:c3:5a:92:1c:38:
6d:8d:71:c6:9b:c2:69:5a:c7:a6:0e:da:43:ae:fb:c0:fb:3a:
2b:7d:cf:c7:a3:5f:8c:b2:45:0a:18:8e:6a:a3:89:0d:68:24:
0c:c9:f4:1c:5f:28:b7:a4:2b:72:0f:d7:8f:0f:c4:5e:81:6b:
2d:27:bd:8e:af:27:57:73:a8:f0:82:86:4e:a2:45:d8:b4:a4:
ad:00:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:53 2025 by rpki-client