Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aqf8R5pd60_6TUdgAwM-AqJBdak.roa
File: Aqf8R5pd60_6TUdgAwM-AqJBdak.roa (raw, json)
Hash identifier: ElFBHIs5463+DrXa4ClkXktOeWxFCjbPcIQZSazUX3Q=
Subject key identifier: 02:A7:FC:47:9A:5D:EB:4F:FA:4D:47:60:03:03:3E:02:A2:41:75:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850C3B070604FF280FB4890CCB9E7D2A9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aqf8R5pd60_6TUdgAwM-AqJBdak.roa
Signing time: Tue 13 Dec 2022 16:04:33 +0000
ROA not before: Tue 13 Dec 2022 16:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:c3a:bf56/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:3b:07:06:04:ff:28:0f:b4:89:0c:cb:9e:7d:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 16:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02a7fc479a5deb4ffa4d476003033e02a24175a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:33:25:70:28:c0:df:9b:96:23:04:6f:39:
f6:a0:9c:33:1a:ce:e6:50:7f:91:e1:72:c0:f9:13:
db:7d:48:15:16:45:c1:22:bd:86:ea:e6:55:42:10:
a3:15:84:08:05:22:77:a6:bb:44:f2:a2:7f:51:c5:
ed:ef:c4:fa:9a:bf:35:86:e3:b7:4e:6e:c1:96:ac:
1a:f7:36:fd:52:58:e7:aa:a5:61:eb:41:27:63:57:
08:08:0e:86:3b:91:97:20:5a:a7:99:c6:a2:4f:72:
c9:86:2b:9e:38:00:4c:d0:28:d8:00:6c:87:09:bc:
16:96:06:73:9c:72:79:29:01:07:42:43:39:d2:2a:
87:ef:3b:0e:ee:22:94:da:5c:a9:81:07:e3:2c:fa:
ab:48:f6:61:2b:44:47:7d:5a:66:4e:31:9a:3b:6f:
70:9f:29:60:31:dc:d3:4f:79:d7:24:28:c7:06:5d:
01:70:40:ad:30:6b:dc:0e:7d:31:eb:b0:35:ae:b2:
27:96:c8:da:48:68:e9:8f:8a:39:3e:5e:9f:d2:bf:
78:93:f6:e2:3b:46:fc:b2:78:58:6a:e8:a3:bd:87:
2d:fb:9e:84:a6:51:15:f1:d6:f7:18:01:1b:5c:ef:
dc:8d:60:4d:c4:d8:75:f5:00:5d:46:86:48:9c:c0:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A7:FC:47:9A:5D:EB:4F:FA:4D:47:60:03:03:3E:02:A2:41:75:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aqf8R5pd60_6TUdgAwM-AqJBdak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:1b:f9:29:f7:2e:b3:13:1d:d1:67:32:5f:b9:e7:f5:55:f0:
c4:d8:0e:bc:04:9c:b7:84:9b:49:4f:96:50:23:81:36:35:41:
8e:c3:b7:80:d3:c7:cb:a8:78:83:ec:4f:e5:65:22:f6:4c:bc:
ad:1d:ea:35:07:e5:05:bc:f6:28:ea:07:d4:51:e8:03:6b:4e:
15:86:ed:81:ad:65:9f:b0:6b:a2:3c:59:9f:58:02:50:aa:0e:
d3:2a:5d:8c:c9:c7:56:33:58:7a:f7:d2:f2:75:64:48:da:98:
dd:ed:08:9b:83:44:6f:b3:6b:45:6b:7b:cc:14:a9:fc:f0:3f:
cc:ef:95:e8:d7:95:d2:65:c8:41:41:fb:bb:47:a3:6a:d9:82:
00:f9:f1:5a:a2:20:af:53:29:49:bc:bc:16:83:f0:9e:5d:40:
ee:14:3d:e2:2c:b3:3e:50:57:59:cb:f0:e0:a5:f7:83:1e:92:
da:68:e1:9d:dc:43:ef:fa:8a:eb:2e:a6:59:41:09:16:98:08:
58:e2:90:57:bc:c2:42:6d:65:11:b6:a2:87:0d:4a:30:82:0e:
5f:ec:fa:37:49:03:55:fa:72:16:de:f0:f4:e7:04:3f:ca:f2:
46:36:2e:35:b3:66:af:75:db:f5:5d:7f:99:27:a4:72:39:c8:
f0:98:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:47 2025 by rpki-client