Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AtFjkAPRGIx7G0yq8PioWSGOtMs.roa
File: AtFjkAPRGIx7G0yq8PioWSGOtMs.roa (raw, json)
Hash identifier: ZqP/9kmATmbOfwLErCUAvy3JPKo2HDizhedTyFp92/o=
Subject key identifier: 02:D1:63:90:03:D1:18:8C:7B:1B:4C:AA:F0:F8:A8:59:21:8E:B4:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D69D8715E476651EA8B0483A9E6D361C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AtFjkAPRGIx7G0yq8PioWSGOtMs.roa
Signing time: Sun 12 Mar 2023 16:18:13 +0000
ROA not before: Sun 12 Mar 2023 16:18:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:9d:87:15:e4:76:65:1e:a8:b0:48:3a:9e:6d:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 16:18:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02d1639003d1188c7b1b4caaf0f8a859218eb4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:83:24:ad:d1:d1:87:95:94:de:eb:36:25:
9d:50:c2:49:cf:26:83:e3:4f:35:be:a5:53:34:eb:
bf:83:32:66:14:5a:8f:88:71:08:90:e9:11:7d:eb:
f2:41:6d:3f:10:3e:ed:58:a9:8e:f7:a1:8f:b7:3d:
8d:f2:be:a4:0f:a9:d0:27:3d:89:55:06:be:b5:46:
2e:70:8b:71:8c:12:c4:2e:13:79:1d:d7:52:25:ac:
67:9c:5d:e6:42:f3:23:6c:bb:41:8e:a4:9a:6e:83:
07:b5:2e:f6:54:22:29:2b:6c:bd:3c:61:91:11:b9:
f9:e1:c0:15:34:fd:8a:47:16:7c:69:bf:45:fb:61:
ad:59:20:0f:31:49:d5:3f:f1:dd:ea:0d:ef:20:d9:
dd:8e:77:bb:88:1b:1a:6f:b1:cc:bd:aa:a9:10:87:
a5:ee:d4:1a:13:00:00:bc:3f:10:c3:2f:18:cc:25:
55:95:b8:7f:55:f4:d7:ba:98:5f:ab:c2:f5:6c:1d:
6b:93:3b:59:61:ac:a3:26:a2:c6:45:73:3d:38:b9:
1a:bd:2c:ef:d8:fd:13:a8:e9:2c:0c:08:18:6b:30:
27:3a:35:8d:25:15:ec:2c:4b:4a:93:42:96:57:90:
fe:80:4a:b7:a6:83:97:f5:64:42:c2:c9:43:84:04:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:63:90:03:D1:18:8C:7B:1B:4C:AA:F0:F8:A8:59:21:8E:B4:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AtFjkAPRGIx7G0yq8PioWSGOtMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f3:fc:d6:2a:54:24:ea:9d:ae:29:eb:1e:fd:75:45:3a:1e:
52:2b:92:a0:11:74:fa:3d:45:86:b9:32:29:3d:00:8a:46:7e:
c9:a5:92:12:79:14:e6:88:93:b1:e3:89:7b:19:b9:f1:10:ba:
4b:2d:c7:67:4d:ea:52:d4:c2:41:f6:06:66:df:27:1d:b6:7d:
a4:f6:14:05:81:9c:d3:39:0c:9b:10:b9:15:6f:b7:91:15:d5:
7e:bd:c9:3a:d4:ea:e4:e7:d8:49:97:c4:38:47:45:86:cf:f7:
82:a8:6b:26:4d:23:32:4d:32:43:7f:ab:b0:80:71:54:3d:d7:
8e:7a:84:85:13:76:e2:7a:36:90:41:dc:36:3c:72:a2:05:34:
37:d5:ba:41:6d:98:05:91:8d:10:c0:ac:18:34:6f:f7:c1:f8:
52:76:ee:88:cc:20:70:5e:e1:8e:1e:f6:72:f4:de:07:e8:d7:
9b:f2:6b:e2:49:ed:96:6a:1f:79:e3:e6:bc:ff:77:92:19:fc:
27:fd:d1:cf:21:d7:95:d9:0f:07:d6:c0:c7:13:ec:de:10:5d:
8f:5a:33:c4:6b:4d:a0:ff:35:1a:c1:38:4d:4f:1b:f2:bf:13:
53:b5:47:5c:fb:a9:34:14:57:85:53:e1:d0:95:8e:8f:27:4e:
ed:28:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:51 2025 by rpki-client