Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AxiC70pYrsTFWcU8a7_fwvGizfg.roa
File: AxiC70pYrsTFWcU8a7_fwvGizfg.roa (raw, json)
Hash identifier: aqaPocXjIz85MlaQD6XvXd+j5PSf07aSGCwqD08Ffzc=
Subject key identifier: 03:18:82:EF:4A:58:AE:C4:C5:59:C5:3C:6B:BF:DF:C2:F1:A2:CD:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B0318B59BF3D6984832E7870D7BF1CAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AxiC70pYrsTFWcU8a7_fwvGizfg.roa
Signing time: Fri 07 Oct 2022 02:06:20 +0000
ROA not before: Fri 07 Oct 2022 02:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:b02f:8b30/128 maxlen: 128
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b0:31:8b:59:bf:3d:69:84:83:2e:78:70:d7:bf:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 7 02:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=031882ef4a58aec4c559c53c6bbfdfc2f1a2cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:a8:80:f9:7b:f2:bc:3f:3b:80:e6:b7:2c:
99:f7:bf:3f:9a:4b:ba:36:c8:e7:12:09:cd:f2:71:
5a:b4:06:f2:94:69:14:9b:1d:c1:b9:3a:47:d4:85:
fc:6a:09:5f:14:1c:26:58:68:c3:8f:73:a4:42:5a:
51:e4:aa:0b:8d:3f:be:84:d4:b3:65:86:a3:d6:63:
10:96:71:60:ca:06:16:71:05:87:2a:3e:9e:92:82:
91:8b:65:25:f2:95:74:97:16:1d:51:be:f8:d6:5d:
dc:cb:e4:85:07:59:7d:e1:49:79:66:a6:c5:ea:f4:
72:66:d2:03:dd:d5:94:a2:85:da:cc:d4:69:e3:8b:
c3:e0:ec:3c:04:01:20:43:1d:47:3a:68:85:c3:c7:
72:a0:55:dc:b7:9a:f4:74:a3:3a:b8:f1:44:13:55:
07:87:e7:2e:79:8e:4c:2f:1a:cc:ec:f3:d7:1d:6b:
d6:87:83:ea:18:5c:f7:cc:b0:0f:02:b2:94:af:bd:
6b:1d:bc:a4:6b:ba:69:fa:19:92:72:a0:47:39:77:
2d:a4:80:02:7a:90:ea:30:1d:37:51:62:12:2b:0e:
af:30:7f:16:29:1f:10:13:da:2d:bd:95:a7:f7:1b:
f5:e7:97:c0:2b:b8:9d:0c:38:b1:f9:93:da:a1:cd:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:18:82:EF:4A:58:AE:C4:C5:59:C5:3C:6B:BF:DF:C2:F1:A2:CD:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AxiC70pYrsTFWcU8a7_fwvGizfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ea:bf:55:61:72:a8:49:e1:12:5f:33:cb:f1:19:e2:bd:08:
df:7c:6f:55:43:ce:f0:0b:a6:03:b6:24:b0:5e:79:9b:23:80:
85:88:64:a1:4f:cc:e4:2c:42:0a:a4:8b:71:ac:e1:11:10:e2:
5c:6f:5b:95:2b:b4:e8:e7:0f:c6:51:25:73:f8:ea:7f:06:7c:
f1:bc:6e:b7:d5:f1:39:87:a3:b5:87:82:a4:22:39:47:be:cd:
3c:a2:74:92:3b:ea:33:ef:31:96:56:b1:4f:8c:d8:12:63:e7:
5e:5f:3e:0c:5f:31:e4:99:8f:a9:42:75:53:48:67:22:3c:c3:
71:9f:5a:01:47:49:05:f4:a8:21:28:b3:cf:91:0f:fd:17:6f:
af:94:fa:75:72:3a:c0:77:68:5d:78:1c:e8:1a:78:ec:e7:5e:
44:be:17:e2:14:c7:c9:df:7d:5a:88:eb:b4:19:1f:af:d2:31:
54:6b:97:a0:f9:02:cb:05:94:dd:0e:4e:f7:c7:06:b0:37:08:
ac:38:40:16:d3:45:54:49:41:d3:8d:09:43:37:d2:0e:b1:51:
40:e3:88:c6:55:74:4b:93:21:57:e6:86:d2:ea:f9:7b:87:ae:
a8:54:10:4a:bd:43:48:99:53:60:a1:e0:d9:16:20:0c:0b:c1:
80:55:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:25 2025 by rpki-client