Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AuQfrEdjS6JthC9ju7Uya-V9eZA.roa
File: AuQfrEdjS6JthC9ju7Uya-V9eZA.roa (raw, json)
Hash identifier: C3vJeDgRO1nBPE+hXTTD+IWb2ZLe5HfXztjgRPXQA6Y=
Subject key identifier: 02:E4:1F:AC:47:63:4B:A2:6D:84:2F:63:BB:B5:32:6B:E5:7D:79:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A5B629A2F39A68C0CC024E4100DAA534
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AuQfrEdjS6JthC9ju7Uya-V9eZA.roa
Signing time: Tue 16 Aug 2022 08:12:35 +0000
ROA not before: Tue 16 Aug 2022 08:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:b6:29:a2:f3:9a:68:c0:cc:02:4e:41:00:da:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 08:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02e41fac47634ba26d842f63bbb5326be57d7990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:1a:ee:9d:6e:b2:fd:ad:db:6e:fe:91:19:
7e:61:8c:b1:b9:80:1f:8f:22:21:f6:39:d4:31:b5:
80:5c:dd:cc:51:50:38:08:63:3a:6a:78:e2:89:f8:
e0:bf:b7:8f:d7:3d:60:cf:a9:60:a6:aa:a1:e0:e3:
77:16:d3:f2:dc:35:a1:a1:07:3e:c4:02:42:c9:b5:
1d:23:57:84:b5:ee:9d:15:29:16:2c:b6:88:4a:1c:
6f:56:37:98:9f:d0:70:5c:4d:e4:b5:49:37:0f:c2:
80:90:93:74:b8:8b:49:76:7a:a5:e4:a7:12:4b:d9:
5f:02:fe:89:6d:88:48:57:42:52:5b:6f:12:a6:06:
27:2a:98:d6:30:32:19:d5:a1:0e:5d:74:5a:39:a6:
e4:7e:77:92:02:d8:0b:8c:e3:13:ff:4d:cf:b2:9c:
cf:e4:54:7e:ef:7e:96:a6:6d:cd:30:48:8c:33:28:
31:2c:6f:b6:b0:36:fd:e7:17:c9:66:38:64:39:b4:
5e:23:31:f3:e0:0a:09:50:57:d9:a0:33:2b:78:42:
3f:84:d7:27:be:af:67:ab:f7:1d:54:af:89:b7:bf:
d6:9e:21:10:96:71:00:19:e2:69:7a:b7:28:fc:60:
cf:4e:89:fd:a0:8d:91:3a:93:ae:fc:db:d7:ec:1a:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:1F:AC:47:63:4B:A2:6D:84:2F:63:BB:B5:32:6B:E5:7D:79:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AuQfrEdjS6JthC9ju7Uya-V9eZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:f2:b7:87:e2:ef:ec:a9:78:3c:6d:30:46:1d:67:ba:f4:d5:
2c:81:2e:fc:7b:39:4e:f4:42:bf:eb:a3:94:56:6a:3a:58:06:
d3:c6:5a:cc:82:d1:af:6b:8d:cb:32:29:e3:e2:dd:ae:d8:6e:
9b:b4:2a:81:55:d0:77:74:bd:e6:34:0a:c6:87:74:51:53:fb:
06:4f:60:96:d7:21:c3:67:f1:30:be:c5:b0:15:1f:db:6c:75:
53:d4:85:b4:ac:bb:04:f1:61:f9:0f:e8:06:ce:09:bc:8f:60:
b9:d0:54:9a:c7:1f:f6:e0:ff:0b:c0:3d:2b:21:d8:48:f6:29:
2d:ff:bf:35:92:ab:59:8e:56:9c:b3:55:a5:b3:18:9e:7d:49:
c5:8a:34:9a:42:19:29:49:ac:b6:af:4b:a9:d8:0b:f6:97:d5:
4a:aa:ca:b0:65:4d:de:c9:df:1f:cd:00:42:a4:60:57:4b:02:
60:1e:a3:7f:59:6c:59:eb:e0:1b:16:71:55:63:fa:80:82:1b:
3b:ee:c5:83:25:97:e2:03:7e:c2:bc:32:7d:43:18:b1:e3:be:
9a:b9:2d:eb:43:60:b1:50:29:72:2d:26:94:12:f4:b0:51:30:
22:94:1b:8d:fd:93:02:38:b9:9d:b2:14:92:df:94:7e:4b:c8:
41:e0:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:06:40 2025 by rpki-client