Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AshMjdMqVRLYkyAm_6DbaelWA8A.roa
File: AshMjdMqVRLYkyAm_6DbaelWA8A.roa (raw, json)
Hash identifier: fDMJLwZMUPyqOw6iimu29xp6r9PvkGOP9roavvl7+5o=
Subject key identifier: 02:C8:4C:8D:D3:2A:55:12:D8:93:20:26:FF:A0:DB:69:E9:56:03:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B8FFF49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AshMjdMqVRLYkyAm_6DbaelWA8A.roa
Signing time: Fri 10 Jun 2022 13:09:05 +0000
ROA not before: Fri 10 Jun 2022 13:09:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341470025 (0x8b8fff49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 13:09:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02c84c8dd32a5512d8932026ffa0db69e95603c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:6d:91:10:c8:9b:23:6f:de:4c:8c:cb:61:
bb:ff:f6:b8:12:fa:80:09:60:e7:f5:3a:73:6c:9c:
31:4f:d3:f4:16:af:2c:ed:9b:41:6b:98:9b:d5:c3:
84:5a:1b:7c:8f:a9:01:ff:99:80:48:6a:38:7e:7f:
9d:68:e6:2d:62:3e:33:82:08:e2:e1:eb:e4:b9:c4:
4f:b9:53:cb:12:39:07:af:b4:36:2f:25:5b:0a:92:
fd:fc:13:6f:dc:5d:75:26:9c:2f:7b:4f:2f:fd:11:
39:b4:cc:96:5f:ea:83:df:bd:68:3d:a4:36:fd:eb:
8b:99:94:b1:2c:40:75:37:0b:c4:c1:cb:96:22:70:
16:84:21:40:af:8f:09:f9:2c:fc:5f:50:fa:75:3b:
75:72:02:cd:3e:94:5d:ea:e1:f1:63:4f:c7:0a:c4:
5d:83:85:08:20:80:98:4a:f0:d4:c6:3e:58:5d:46:
5f:98:9d:68:e9:1f:d9:98:0a:23:68:83:94:9b:5a:
20:03:d4:e8:c3:b9:72:5d:06:16:3a:30:6e:56:3f:
a9:72:44:e8:d7:69:ef:a1:12:d0:76:fa:16:87:5c:
b2:83:19:9f:99:c5:7f:6d:83:5a:fb:9b:f0:dc:c9:
a3:76:3e:db:3e:f6:68:32:ac:1a:f6:cc:54:d5:6e:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:4C:8D:D3:2A:55:12:D8:93:20:26:FF:A0:DB:69:E9:56:03:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AshMjdMqVRLYkyAm_6DbaelWA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:46:fe:be:a3:73:82:ed:0c:3a:ef:a8:b7:05:ce:46:8f:fb:
53:92:f4:6c:a7:4a:67:5b:8f:cc:a0:e3:38:53:27:fc:3b:c2:
b7:0a:af:d1:76:e4:84:82:25:48:71:7f:e4:e2:27:be:0f:5c:
e2:62:33:d4:f1:c0:6b:8f:fd:ea:81:77:34:30:8b:ed:3e:99:
e9:5f:6c:a4:a1:b9:03:0b:c9:b2:bf:e3:bd:87:e7:e8:45:f9:
48:3a:1b:de:b6:33:6f:fb:78:fa:f4:f8:50:b9:be:84:fa:4b:
7b:38:91:34:c2:12:c9:8b:65:6a:1f:8e:71:20:b0:38:8a:77:
d6:c7:5c:d5:ea:e2:ad:83:76:af:45:df:84:e3:42:a8:52:93:
19:73:ec:6c:f5:8f:dc:3c:19:ab:97:51:46:22:ca:d5:e3:4b:
67:0a:1b:64:7e:99:03:bf:35:23:1e:5c:be:94:2d:96:07:4f:
49:9c:34:dd:f4:5d:42:a3:5d:c0:1c:c8:92:f2:6c:21:67:fe:
da:35:57:19:2b:c7:f0:91:c6:4b:c0:53:44:6d:ee:1f:bd:7e:
4f:c6:28:0c:66:0b:24:db:f7:6f:7b:6d:84:0c:df:5b:fd:a7:
0d:cc:7c:81:7c:be:69:59:44:13:f0:a6:76:22:26:a3:1b:80:
81:ae:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:07:10 2025 by rpki-client