Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G-ajY3vCyj90LgLfRZgawAEdYgc.roa
File: G-ajY3vCyj90LgLfRZgawAEdYgc.roa (raw, json)
Hash identifier: oZvpZ/FE7FykdS3IH4w0klvaHKRjcaxgmNzHaO+PppE=
Subject key identifier: 1B:E6:A3:63:7B:C2:CA:3F:74:2E:02:DF:45:98:1A:C0:01:1D:62:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859B97DD47CE40C94E6B4599D5AB356AEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G-ajY3vCyj90LgLfRZgawAEdYgc.roa
Signing time: Tue 10 Jan 2023 12:11:39 +0000
ROA not before: Tue 10 Jan 2023 12:11:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:97:dd:47:ce:40:c9:4e:6b:45:99:d5:ab:35:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 12:11:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1be6a3637bc2ca3f742e02df45981ac0011d6207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:7d:38:13:6e:8c:c2:e8:2c:ea:b4:ca:82:
0b:a3:f5:d2:b5:28:8c:7c:18:5c:b0:5f:76:45:89:
a6:93:ac:fa:08:25:48:09:6d:52:33:14:59:8d:5e:
9c:07:7d:cc:de:38:d7:8c:c0:93:af:4f:6d:e1:6a:
12:8a:ab:bc:14:fb:9b:1e:4a:e3:3b:a0:9c:dd:d3:
f2:f1:ad:d5:9e:9b:75:b7:72:d0:03:2a:fb:c6:fa:
c7:d4:cc:be:81:3c:72:d9:00:b0:83:a2:52:29:d0:
c8:b0:3e:8d:33:2b:bb:da:d9:e1:b0:7e:08:51:85:
b8:54:48:ca:ea:f9:bf:4a:9b:da:b8:e1:06:ae:68:
00:e0:d5:c3:69:fa:09:38:a3:3f:2d:3f:54:f1:3b:
71:e7:85:ed:0d:b2:d4:87:fe:0b:12:47:bc:7f:4b:
85:bd:d1:22:fb:9d:07:13:15:ca:4d:ca:64:91:39:
e9:5b:f9:24:28:14:d7:65:24:ae:4a:38:b8:cb:9f:
3d:7e:dd:a2:3d:a6:88:3d:39:50:22:3c:b2:ce:84:
ce:43:4c:d3:69:f9:85:4f:ed:cb:bf:b0:1e:22:69:
ff:94:4e:a5:01:0f:29:41:a0:2c:7d:5d:c5:b4:f2:
fd:20:1c:49:15:10:f7:b1:91:a9:ff:e0:25:8b:1a:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:A3:63:7B:C2:CA:3F:74:2E:02:DF:45:98:1A:C0:01:1D:62:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G-ajY3vCyj90LgLfRZgawAEdYgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f5:02:c2:60:d2:81:9d:39:05:d8:27:83:be:7f:ff:bd:6e:
ce:cc:5a:57:89:e5:42:73:0a:be:55:e6:a0:c6:e4:c7:02:8c:
b2:55:94:83:e7:52:16:ff:66:fb:72:7c:b8:e5:5b:52:bf:72:
8c:bb:42:c8:a6:69:29:6f:01:e5:35:09:8c:df:94:b7:18:90:
77:dd:f2:74:de:d7:66:30:60:e9:ae:29:50:4f:c1:61:f8:a1:
18:d9:ec:d5:fb:df:eb:3a:37:00:48:1b:c0:02:63:74:20:e6:
8c:ed:6a:1f:96:1d:49:e3:2f:b8:f5:fe:75:7b:16:41:8d:fe:
4e:10:75:58:08:9a:0e:6e:86:ea:a0:cf:6a:63:f7:02:44:12:
c7:f2:97:b7:e0:39:de:3c:c4:a7:ac:06:90:b8:43:6c:58:70:
32:59:25:76:7c:5f:43:60:d6:f9:f6:e4:63:01:d1:e7:09:a1:
07:3f:3b:5f:1b:07:ae:50:09:b8:5f:d2:5a:21:2f:ac:be:90:
31:be:47:85:d1:1c:0f:43:98:ab:c8:bc:df:d1:4b:27:ec:5e:
5c:04:db:0b:40:46:21:d8:ab:39:31:27:da:63:51:48:f6:16:
dd:16:7a:4b:75:be:6b:03:56:2f:8f:8e:ef:49:bf:9a:49:3e:
63:59:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:05:37 2025 by rpki-client