Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AxYv2HsKEYXRHGYSw_Z1yMPSlj8.roa
File: AxYv2HsKEYXRHGYSw_Z1yMPSlj8.roa (raw, json)
Hash identifier: dPTKtuwPPHpti3MzS3aLeQDbLNpDND4peNEBmQjTffI=
Subject key identifier: 03:16:2F:D8:7B:0A:11:85:D1:1C:66:12:C3:F6:75:C8:C3:D2:96:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2DA84E5353C1CAB97A090C3195C08A6F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AxYv2HsKEYXRHGYSw_Z1yMPSlj8.roa
Signing time: Fri 25 Aug 2023 17:05:19 +0000
ROA not before: Fri 25 Aug 2023 17:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2da7:8c1e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:a8:4e:53:53:c1:ca:b9:7a:09:0c:31:95:c0:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 17:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03162fd87b0a1185d11c6612c3f675c8c3d2963f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:85:93:d2:6e:5a:97:9c:92:92:b7:64:84:
cd:d7:45:51:2f:37:53:eb:32:f8:7e:96:61:1f:b7:
27:3b:a8:c7:89:b5:92:e3:6c:31:44:77:52:b3:7f:
dd:63:4c:36:73:f6:89:98:cb:cd:b1:4f:58:71:a6:
09:f5:3f:b5:56:ad:9b:5d:9b:12:b1:52:29:fe:a3:
c0:1c:da:c3:a1:d4:9a:66:9d:d3:22:cb:bc:e2:e1:
f6:ed:3c:e4:20:25:11:f4:66:69:6b:59:24:a4:ae:
9a:e5:78:d5:5a:9f:5d:fe:a8:3b:05:c4:50:60:84:
86:61:e6:0f:0c:72:5f:2e:80:31:34:f2:78:f4:ad:
d1:a0:90:a7:bf:89:54:1b:f9:79:a5:94:47:04:c7:
65:5b:1a:fb:91:17:c8:37:0c:28:da:b4:e1:b7:22:
ce:2c:a8:13:58:59:c4:8c:87:e2:9b:89:39:8c:fc:
c6:c5:94:47:40:bb:1c:b0:78:d5:13:f5:df:72:01:
e4:e8:7b:e6:f7:c9:18:d2:c7:9e:18:c8:6a:9a:86:
05:2a:84:91:ef:45:8a:d4:9a:d4:e0:81:d5:a2:14:
92:6c:ab:6c:68:d3:12:b3:42:62:76:6f:a1:8c:35:
72:f8:29:5e:9c:92:f6:dc:3f:a9:14:40:32:75:59:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:2F:D8:7B:0A:11:85:D1:1C:66:12:C3:F6:75:C8:C3:D2:96:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AxYv2HsKEYXRHGYSw_Z1yMPSlj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:52:fe:84:fa:6a:da:8f:46:b7:19:b6:fe:27:fc:25:6c:f4:
d2:de:54:da:f6:b3:24:4b:d7:db:8e:62:c2:a0:6b:fc:8d:d1:
c2:08:7e:46:a8:df:b0:b6:6e:d7:96:0a:ec:25:15:58:ee:df:
4d:f5:e9:26:81:90:b0:eb:47:57:fe:26:83:24:11:9b:aa:d8:
26:8d:63:af:18:02:16:2e:7e:13:55:af:df:13:f1:37:2d:b4:
64:81:d8:d6:d6:d7:77:5b:7e:f8:74:c7:ac:ec:a2:af:76:50:
c6:ac:fb:d9:55:5c:d7:6d:ca:39:ee:95:84:e3:c8:aa:88:60:
a0:11:c3:a2:60:2e:59:5b:ed:d7:e8:be:74:b2:78:7c:db:2b:
fc:ac:fb:47:23:28:83:b7:a5:e5:82:67:db:a2:d3:fe:7b:7f:
f5:58:6e:4c:0a:1a:8e:17:6c:cc:4d:b9:1d:06:9d:a4:4a:1f:
7a:c4:79:8f:22:42:2a:f9:a0:df:81:8b:51:ae:9e:b3:c7:2d:
00:1d:09:87:fd:65:d9:07:83:cf:c6:5f:11:37:37:6c:91:9b:
c9:ce:d4:f3:40:e0:ab:96:36:d0:73:7f:e4:26:cb:92:73:b4:
b3:d7:3e:b5:c2:46:5c:c8:1c:b4:f8:65:7b:d3:9c:9b:48:b2:
0c:c2:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:45:53 2025 by rpki-client